Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59eea384-f703-42e5-82d2-829497314893.roa
File: 59eea384-f703-42e5-82d2-829497314893.roa (raw, json)
Hash identifier: qCV+shgr7124XYujwOj+XYzEz7v6uhDNN9/kbrpndiI=
Subject key identifier: 7F:5B:80:9D:95:23:06:F5:67:9C:61:A0:4E:06:07:8A:F7:3F:53:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7FC608502E1FDD3931B76FE37CC7EE842339477E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59eea384-f703-42e5-82d2-829497314893.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.50.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c6:08:50:2e:1f:dd:39:31:b7:6f:e3:7c:c7:ee:84:23:39:47:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:6b:5f:a0:8f:71:d3:04:a5:c4:e2:03:88:
2c:ea:55:9f:ea:26:03:e2:25:f0:21:6d:5a:0a:89:
44:73:b9:22:65:6d:fb:cb:f4:47:a1:1a:41:59:12:
fa:28:37:78:05:14:ba:e0:81:72:64:b8:09:7b:d2:
c1:e4:58:8e:dc:54:81:71:c5:35:6c:7f:5f:00:b2:
67:16:b3:82:60:37:30:09:b0:af:de:3c:60:fc:ba:
15:37:25:9f:4d:36:5a:62:20:d9:88:23:5e:8a:51:
ac:aa:77:56:06:5c:aa:8b:ec:b6:e0:93:8d:0a:4c:
1d:ac:f0:a4:9b:89:e7:a6:a2:23:8b:88:61:c5:37:
d3:1c:47:46:6c:51:24:66:73:cd:36:90:5e:20:7c:
0d:13:57:a2:3e:b2:dc:d0:22:89:40:4e:8d:56:5a:
b7:09:26:28:67:81:2d:2c:9e:bf:1f:73:ce:7d:96:
73:e1:eb:51:93:4e:c8:5c:d4:ac:33:f4:76:4a:57:
a7:4e:03:d0:12:25:49:b9:2f:4b:3f:c4:57:60:df:
a7:e3:01:95:d0:19:ab:e3:d5:88:41:b5:6a:a7:a7:
9a:e9:e5:3e:e1:30:f8:f7:62:18:de:f8:5c:15:5a:
4f:eb:a3:e7:45:e1:22:64:a0:3e:dc:05:36:85:6b:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5B:80:9D:95:23:06:F5:67:9C:61:A0:4E:06:07:8A:F7:3F:53:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59eea384-f703-42e5-82d2-829497314893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.208.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e6:c9:45:17:b8:19:07:41:14:27:ff:a8:f0:84:2c:03:d0:
fc:2b:c8:c3:86:60:0d:68:15:90:fa:e0:a2:40:ba:92:b2:e0:
17:4a:3e:9a:55:6f:42:47:72:d8:47:e7:4e:f7:58:1e:4b:c3:
f5:3f:22:f0:53:f8:71:7f:80:a3:8a:bd:34:22:df:15:be:09:
c5:71:f9:01:be:78:11:89:47:3f:79:94:5e:c7:c6:07:74:bd:
a3:27:99:35:55:3e:ec:11:a0:ca:95:ce:52:4c:11:b7:63:d5:
bc:2c:0d:ef:a0:42:bd:de:2f:53:05:13:bb:3f:ac:e1:93:67:
38:7d:6e:02:14:fb:37:e0:7d:8d:75:d4:da:bc:4f:21:be:94:
52:fc:60:74:92:68:f6:fe:95:3a:79:d6:ee:8f:6d:a3:70:a2:
17:28:cf:a0:1f:68:14:da:de:68:f2:ee:91:88:fb:9c:20:db:
ed:49:2e:6f:63:9f:4f:5a:a9:b0:42:ff:d2:62:88:26:e2:85:
26:95:c1:f8:f3:5a:40:27:41:9d:ac:df:fd:d8:14:25:b8:b9:
22:d9:3d:be:17:cc:57:04:c8:fa:19:67:9e:1d:1b:f8:fe:ce:
13:b7:12:df:8d:94:5f:a9:9e:63:71:36:d8:2e:01:90:70:21:
91:f6:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:41 2025 by rpki-client