Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547c6071-5922-426b-a4d9-9ac157f5eb41.roa
File: 547c6071-5922-426b-a4d9-9ac157f5eb41.roa (raw, json)
Hash identifier: 9E2L4qjSRyZrxjGRJs1JLuzG+UYsu7waDN15jiXc1Fk=
Subject key identifier: 60:9F:36:A9:0F:0C:69:E6:9C:8A:EF:52:C8:96:E9:66:DE:38:F1:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49E8A5060ED3E75902718217F41C1CB56C5F30CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547c6071-5922-426b-a4d9-9ac157f5eb41.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 161.193.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e8:a5:06:0e:d3:e7:59:02:71:82:17:f4:1c:1c:b5:6c:5f:30:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:97:58:2c:c0:2a:52:66:cd:35:ff:c2:49:a6:
21:22:ef:51:ea:90:a0:36:95:11:1b:52:d1:58:92:
df:33:59:db:48:e4:30:8a:fd:52:9b:3c:13:81:6c:
75:c6:a8:7a:e2:2f:24:4e:d9:29:5f:ee:42:ef:96:
90:22:51:9a:18:60:b3:55:f8:0c:51:9e:59:70:71:
4d:16:a5:31:48:b1:9d:7e:02:da:e6:00:d9:51:d4:
7d:c0:ba:77:05:2f:33:b7:bb:09:6c:14:f7:56:38:
cf:b0:2e:f3:62:07:e1:85:e8:16:cf:ff:5d:2f:04:
64:58:3e:b5:7b:be:13:fe:4e:59:5b:3f:6d:13:1d:
bc:f2:55:69:62:f3:43:9c:97:e2:77:45:6e:5d:6b:
3f:95:55:5a:b5:50:a8:8d:b3:68:20:c1:3d:f7:34:
fa:19:dd:09:d4:e8:0b:60:44:a8:93:a4:84:a1:df:
d3:13:16:2c:dd:f2:aa:bb:f9:70:9c:02:eb:08:bb:
62:18:64:ab:54:b5:62:28:37:d2:be:6e:2c:8a:5b:
11:d5:fa:ed:57:b7:62:e8:e9:0c:1f:d3:b6:6e:25:
42:b9:0c:dc:14:3f:f4:8e:ba:d1:b8:d3:c0:c0:8e:
3d:49:f9:ff:c5:68:dd:6f:62:b4:ad:15:2a:c3:f2:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:36:A9:0F:0C:69:E6:9C:8A:EF:52:C8:96:E9:66:DE:38:F1:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/547c6071-5922-426b-a4d9-9ac157f5eb41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.193.0.0/18
Signature Algorithm: sha256WithRSAEncryption
66:c8:55:2a:d5:83:29:b9:da:a4:ac:37:19:c6:07:06:65:27:
04:f8:ea:74:b4:85:0b:fe:c4:75:8e:e3:c3:65:5a:49:d8:6e:
ac:f5:5f:4e:9f:55:bf:32:5c:21:da:53:3d:41:f6:01:85:86:
aa:3d:7f:6a:32:43:7d:72:91:6b:17:b6:87:7d:43:2a:09:f2:
2c:84:fe:92:ce:89:05:b1:26:df:99:d2:f8:50:8f:a7:ef:e5:
3e:2c:9b:3c:e9:99:14:09:0f:6e:2f:da:f8:e1:13:20:09:d4:
ec:04:00:a3:25:d3:89:f9:5b:3c:b5:f1:83:e7:6e:e0:07:11:
75:75:2a:8c:89:7b:f2:70:20:a3:e6:31:21:b7:38:75:94:a8:
91:10:f0:19:dc:33:87:09:f8:ce:29:58:24:d8:2c:77:88:5a:
12:2a:17:dd:e2:0e:95:a3:7e:2a:b0:ff:73:50:78:1d:ff:16:
1e:a5:a8:86:ca:a2:94:7c:5c:2d:18:fc:65:23:7e:d9:25:83:
d3:39:f6:e1:bc:18:f1:c4:5f:12:2e:29:cb:00:24:ca:05:45:
47:a2:d6:b8:ef:87:58:96:a9:cc:b4:49:5f:49:21:01:00:a0:
5a:a8:10:ed:ed:d3:f2:f7:57:ba:13:a9:c9:04:de:fa:48:54:
90:af:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:45 2025 by rpki-client