Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5381a843-ea8f-4bb8-9cfc-0606ad55c60b.roa
File: 5381a843-ea8f-4bb8-9cfc-0606ad55c60b.roa (raw, json)
Hash identifier: ssKU3l9IZ7RLF2Iky7YFqYjV9nTjBnv9Se/49y+zFN8=
Subject key identifier: 63:9E:9D:D8:6F:FB:54:08:C2:3D:6B:AF:62:F1:8C:63:54:D4:48:09
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AE1F5FB5E745A876737E6358E8854CE159335
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5381a843-ea8f-4bb8-9cfc-0606ad55c60b.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.181.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e1:f5:fb:5e:74:5a:87:67:37:e6:35:8e:88:54:ce:15:93:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:62:cc:dd:5d:cd:fd:27:7f:42:f3:56:d6:
7a:02:31:dd:d2:73:70:6e:7c:43:f0:86:32:94:0f:
ac:aa:ef:a3:d5:5a:c5:df:9d:78:69:c8:b4:ed:65:
1f:2a:36:27:69:b3:e2:e3:b5:b8:05:ef:b5:9d:d2:
c7:90:25:5c:0b:28:31:2c:3c:5a:96:69:4f:df:6c:
9a:1c:02:c4:e4:3a:74:aa:8e:8d:50:fd:37:5d:07:
91:6e:96:10:fd:0d:7c:39:2b:17:2f:b9:f8:0d:e1:
36:54:2b:97:4c:f9:dd:b8:4e:cd:62:35:a0:a1:84:
4a:7d:6b:98:e2:15:3f:02:b0:67:4d:d5:b3:f5:36:
0e:cb:62:c0:2e:e0:dd:db:bf:85:36:fa:e2:c3:a2:
6b:e6:be:58:8a:fb:e2:32:73:fd:5a:6f:15:5b:5a:
a4:a8:43:2d:63:98:a5:22:ae:af:59:90:30:5c:e7:
61:56:c4:44:3d:d3:37:4a:e6:13:9e:f4:9c:2b:c4:
4a:5d:2b:38:10:5e:99:32:93:90:ad:e9:a7:77:c3:
70:7d:cc:41:96:af:e0:93:6b:ff:f9:cc:b1:39:c8:
16:33:79:01:d4:c4:27:b1:ce:1e:3b:bf:c9:44:ec:
f7:a5:83:d9:5d:dd:45:4c:31:f1:ab:7e:d4:28:f7:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:9D:D8:6F:FB:54:08:C2:3D:6B:AF:62:F1:8C:63:54:D4:48:09
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5381a843-ea8f-4bb8-9cfc-0606ad55c60b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.181.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:5f:cb:84:6e:10:d7:c8:0f:41:8a:ea:bd:3d:8f:e5:b0:cc:
3f:39:f8:c6:9b:4e:99:d1:00:51:7f:65:ed:e8:be:74:1e:24:
85:1f:72:82:e5:c6:0f:6f:7a:12:5a:f3:b2:b4:75:01:9a:e1:
7c:ec:de:54:67:8c:ab:51:c0:6b:54:9b:64:be:39:4e:5e:9a:
92:38:b9:56:3d:4e:4a:b4:63:29:bb:09:17:2d:e5:57:3c:3e:
8e:07:67:85:5d:68:38:3f:e7:f2:cb:38:46:3f:d5:d6:d0:8a:
c7:57:52:0f:a6:33:a3:dc:32:eb:80:4f:b7:cb:6f:a6:36:1d:
2d:e2:13:74:07:02:6b:31:e6:17:a2:46:75:dd:9c:93:b4:8c:
6a:d9:d6:9b:6d:e6:15:52:12:74:21:ce:b6:d7:97:d3:91:69:
d1:ac:56:45:6e:65:b7:b9:1e:01:81:e9:45:49:de:a1:05:28:
14:52:37:fb:ec:de:72:16:55:c5:24:a5:ba:90:20:1f:4b:f6:
6f:44:99:4f:cd:5c:12:74:b7:2b:bf:f2:69:15:18:f5:5e:47:
18:d5:b1:50:76:bf:00:c9:1e:ed:55:f4:eb:27:89:22:77:bd:
46:43:44:ed:20:d3:1c:c7:8e:c8:be:73:06:73:8d:10:d2:bb:
50:44:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:44 2025 by rpki-client