Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5635475e-b6ff-466e-9127-87c03ea98487.roa
File: 5635475e-b6ff-466e-9127-87c03ea98487.roa (raw, json)
Hash identifier: kCc8dMcr4B5hYDCn0JWqgcn8Y4dCB8TxV0i3MeeF8b0=
Subject key identifier: EC:3B:AD:04:7D:88:0D:78:89:5C:F1:49:44:BC:9E:1B:8F:FF:DD:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0181D0FA6A42A6725728D019A08923CFE6753EBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5635475e-b6ff-466e-9127-87c03ea98487.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 151.160.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d0:fa:6a:42:a6:72:57:28:d0:19:a0:89:23:cf:e6:75:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: serialNumber=6f35323554959b5d9226676d3e1af9eb6811827f536a66d8214fcf7dfab7eea6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:08:b0:85:0a:8e:7e:3c:2a:cb:5a:56:04:bc:
ea:7a:53:cc:6e:44:85:11:d5:17:0f:23:90:3e:2a:
ff:f3:b8:bf:e7:51:85:45:20:51:66:b9:de:b3:63:
76:f1:23:e2:16:dc:12:05:4f:a9:7c:86:a4:b3:18:
5f:18:e0:45:cc:c8:bc:79:15:c6:50:f4:0f:a4:29:
3b:2a:98:32:3d:d9:e0:92:a6:8e:af:75:ee:20:6b:
d3:d4:28:c6:ef:be:35:0a:4f:11:35:2c:ea:e3:60:
e3:f2:c2:cf:7b:94:1f:12:b8:bc:1a:08:5a:e2:e6:
ed:c4:6b:e2:81:23:4b:42:c2:18:08:2d:36:6a:9c:
71:ae:91:e0:5b:af:3d:07:98:1e:10:36:ba:1d:f2:
68:fd:32:1b:5b:08:e4:c3:a5:e3:40:67:01:b0:64:
38:97:73:a6:1c:82:c3:5c:f9:92:f2:c3:cd:87:8f:
72:fe:9c:dc:d1:2d:7d:02:29:b1:b7:5d:0f:36:7b:
47:dd:92:83:4a:b4:12:e1:bb:fc:95:46:7f:25:f2:
70:f0:3c:f4:63:ed:d1:54:c0:3a:8a:af:5a:d8:bd:
4b:34:98:b5:9e:bf:e5:41:02:d0:f6:23:7d:b7:62:
86:bd:bb:c7:e4:01:f0:ab:ef:a1:1e:db:af:76:74:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:AD:04:7D:88:0D:78:89:5C:F1:49:44:BC:9E:1B:8F:FF:DD:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5635475e-b6ff-466e-9127-87c03ea98487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:6a:ff:c7:db:fd:d6:80:7a:14:4f:3e:e9:dc:00:18:15:a2:
0d:1c:86:a4:39:c9:66:a6:e7:66:95:0e:c4:85:6e:c6:c5:55:
d8:1c:35:d5:3f:68:76:0a:41:89:4f:da:36:80:93:d0:18:7b:
f0:77:65:d3:11:7e:fc:f3:35:e1:4d:87:7b:67:ed:45:a9:c6:
c6:2f:3c:b2:6b:9c:d4:65:73:0e:a9:3e:2d:0b:c5:fb:f1:46:
ba:9d:49:db:64:f5:8b:23:6c:a3:ec:71:6b:ca:a0:e5:5f:8d:
18:ce:72:50:dd:ae:ac:6a:66:a2:f5:33:fa:e3:85:f7:0b:cc:
40:89:4f:df:a8:2c:cd:e4:f5:eb:1d:1e:bc:d2:3a:9a:44:a6:
96:fd:05:9a:d6:ec:a8:4f:07:0b:2a:50:cf:32:2d:7c:08:0a:
b0:d9:c0:31:89:fd:fe:14:5c:92:7e:4a:1e:09:04:a5:8f:4d:
d8:74:c8:6c:5d:69:b4:81:10:ef:f7:97:05:27:37:22:3b:60:
54:5c:d9:e7:49:3c:2d:98:3b:7d:49:6a:0b:c6:c6:52:0d:61:
71:96:ec:d9:74:2e:19:94:96:1e:b0:93:fa:30:7f:d2:a6:03:
a9:e1:c3:e3:3b:64:44:34:07:e1:64:aa:3d:39:65:f8:45:a7:
4f:50:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:33 2025 by rpki-client