Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51d5fbbf-c96d-4cc6-91a8-e2eeda8b3177.roa
File: 51d5fbbf-c96d-4cc6-91a8-e2eeda8b3177.roa (raw, json)
Hash identifier: Wm50KJFq3xz23WqHImfnccjwrN9cIikiD3OAps+b3Eo=
Subject key identifier: 7B:F3:E4:0C:FE:56:B8:2E:9B:DD:90:21:45:6C:76:AE:71:C9:C3:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2452BD09F1379105AF8129991128A95AE90E8C78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51d5fbbf-c96d-4cc6-91a8-e2eeda8b3177.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.12.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:52:bd:09:f1:37:91:05:af:81:29:99:11:28:a9:5a:e9:0e:8c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:80:aa:12:10:cd:cb:90:e8:9f:1a:5b:e6:
e3:f6:a8:5a:06:af:de:50:e8:28:48:15:81:e4:3e:
93:63:84:cf:fe:a2:39:ee:e3:a4:89:ee:e0:83:04:
30:12:9d:61:99:5a:ac:67:4d:f0:a5:62:0d:fd:33:
bf:67:4e:01:97:c7:15:19:32:89:e6:6f:d8:1c:60:
aa:8c:7e:8d:fa:f3:51:b7:36:61:f7:93:88:43:db:
41:4a:74:55:c7:c2:47:f8:6d:eb:22:92:5e:d2:19:
5f:1f:da:0e:89:2e:7e:b7:94:f6:b4:66:e1:49:4c:
46:8c:64:35:a3:29:79:8a:53:7f:f0:95:7e:25:07:
40:b8:be:22:47:84:83:88:09:1c:73:18:84:07:72:
ac:d9:5b:d3:69:3a:0e:46:4d:fd:5a:2b:99:57:d0:
53:e8:0f:93:e5:95:ca:c8:10:d9:b2:8b:ce:af:b7:
7f:8f:47:30:91:b9:0c:49:d4:10:27:19:c3:00:41:
20:bc:32:99:2c:4d:60:51:d9:32:04:b0:eb:ac:91:
a1:37:0c:db:9f:09:1c:07:21:78:72:3c:a9:4f:8d:
07:2f:cb:0c:da:2b:11:a6:c5:07:92:75:64:a3:f0:
1c:8e:67:df:96:81:33:b3:b2:2b:51:ac:8b:21:68:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F3:E4:0C:FE:56:B8:2E:9B:DD:90:21:45:6C:76:AE:71:C9:C3:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51d5fbbf-c96d-4cc6-91a8-e2eeda8b3177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.12.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:74:ed:89:22:0a:8e:d0:2b:e9:4f:84:72:06:18:f3:b0:20:
9e:2f:66:0c:fa:94:86:b9:88:f8:f8:25:7d:0e:a1:db:4f:f6:
75:87:19:5d:9b:12:43:12:7e:b9:34:e7:7a:cf:63:33:67:db:
a2:08:14:08:2c:de:03:b2:ea:5b:38:f9:3f:5e:73:94:b6:20:
12:2a:24:14:33:a6:93:25:9c:d8:25:93:c5:0b:38:e7:f1:cf:
a2:87:e9:fb:d7:a9:d7:b9:2b:0c:27:4f:b3:66:b0:ce:1d:c6:
fd:56:bb:03:7a:ff:12:8f:52:c5:c9:f2:c7:96:40:55:d8:a8:
bc:a7:ca:5a:83:19:1d:02:28:10:28:03:ae:2f:1b:48:cd:fd:
5f:ad:11:73:d2:8a:46:72:b6:14:b3:4e:db:2d:ae:37:b3:b5:
94:7a:98:1d:9b:16:f2:b9:9f:af:62:3d:1e:69:3a:62:6a:26:
26:1d:9c:31:67:f3:f1:8f:a2:82:9a:69:ce:c6:ff:c6:ff:52:
2a:5b:3b:df:45:4d:d5:e1:28:db:f3:1d:25:d4:9d:f5:d3:0d:
8c:82:8d:05:ae:12:61:a8:3d:29:eb:20:20:33:d4:da:52:85:
60:f0:25:02:ba:0a:9f:42:c8:93:61:d0:65:8b:85:04:d0:2a:
1d:79:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:28 2025 by rpki-client