Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2414b-fca9-4126-81de-756a9d53d164.roa
File: 4db2414b-fca9-4126-81de-756a9d53d164.roa (raw, json)
Hash identifier: 5127RYNWBzbT7CXgYeCZjTFIk7qUZSDaorGI03J1vAQ=
Subject key identifier: 78:F8:6D:4F:D7:26:85:B2:C9:67:21:68:82:23:D9:D8:44:18:0D:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 68A0BB06AB71172B77EF912791675BCF391AF755
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2414b-fca9-4126-81de-756a9d53d164.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 70.131.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a0:bb:06:ab:71:17:2b:77:ef:91:27:91:67:5b:cf:39:1a:f7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:2e:95:3b:5f:3c:18:2a:5c:75:af:0c:9c:
3d:48:2d:96:3d:7d:48:e1:1f:7f:ac:50:9d:44:26:
33:2b:51:b3:21:87:ac:13:0d:b3:d6:50:b7:5c:02:
5c:ad:d5:10:ee:d1:03:5e:68:b8:b0:23:76:46:91:
0e:cb:67:3a:c9:62:c1:18:ac:a5:1b:dc:1c:93:5d:
fb:d6:71:cc:8d:4b:32:1a:8b:cb:fc:98:7a:ed:f4:
39:af:a6:ea:de:d0:c9:ce:44:2d:9c:52:96:42:3e:
7b:e3:31:51:47:c7:0d:1a:8b:64:63:09:b7:7e:70:
4a:00:55:fd:83:fd:fa:b1:dc:8d:90:ff:a0:de:31:
98:57:ed:f7:51:c8:ef:8d:2c:c9:28:46:17:3b:4c:
29:f4:ed:22:b2:e0:f7:ec:b0:ba:c6:eb:04:77:fb:
27:68:d8:f5:f7:13:69:3a:a0:12:98:dd:79:d0:30:
49:49:55:0e:67:f7:2d:69:d3:71:4d:33:09:af:46:
55:11:6e:46:5b:9e:a8:02:82:2b:32:c4:05:6a:82:
0e:29:0d:77:d7:7c:ed:0e:5e:60:fa:b4:fc:a7:2b:
d0:a5:f7:eb:b2:31:5e:d6:67:8b:25:fe:93:df:00:
a5:2e:06:ae:8f:04:f3:38:0f:3d:de:5a:75:a7:84:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:6D:4F:D7:26:85:B2:C9:67:21:68:82:23:D9:D8:44:18:0D:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2414b-fca9-4126-81de-756a9d53d164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.131.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:33:97:59:98:75:2d:08:27:f0:a4:7b:ad:ae:2f:11:f4:06:
ec:64:33:87:8a:5a:5e:02:a5:71:1e:19:6d:7a:ff:cc:c2:57:
ab:28:18:ab:69:5c:93:1c:b5:9c:8c:f9:57:b2:68:89:68:87:
47:3f:9c:c9:e9:59:5d:02:6c:10:cc:32:1e:04:f8:23:2d:b0:
67:fc:4f:44:df:53:b9:7a:fc:4e:99:5e:eb:71:d5:f3:d8:04:
b7:2e:8e:84:05:1f:a6:c5:fa:d2:7d:6a:20:da:bc:90:5a:a9:
d2:9a:f7:bf:39:7b:4a:fe:98:45:40:fa:dd:b7:9d:f9:cc:51:
bd:e5:34:4f:36:0f:d4:69:f2:32:e1:0e:d5:0d:99:53:05:80:
df:03:00:f7:19:a7:a4:52:ae:55:b5:cf:10:72:28:c3:57:2e:
46:9d:3c:04:6f:1a:1e:6d:34:ce:78:98:0a:e5:0c:a3:77:d2:
96:b1:a0:0f:c0:14:f8:2d:e8:3b:ff:60:a6:9f:52:75:e1:64:
03:57:0b:a9:7b:44:d2:3b:ed:0a:51:2e:f7:b8:54:22:24:f7:
ee:1a:1a:c0:01:19:3f:8b:2f:4b:c3:91:66:18:08:8f:21:83:
ac:88:f6:9e:18:65:e4:8a:fd:0a:e3:96:9e:e8:0d:59:7a:68:
37:a4:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:53 2025 by rpki-client