Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b31b6e-f53f-443f-89eb-c6e99e4db569.roa
File: 62b31b6e-f53f-443f-89eb-c6e99e4db569.roa (raw, json)
Hash identifier: xqxvyXUSjpJmnvk3d7V/0DORkdtDu5PsVVxKZCrUirQ=
Subject key identifier: 66:3D:18:CD:1F:90:F8:16:44:56:44:0C:C2:64:AA:2F:F0:23:A1:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1848D8118C39A0CBB7DB53B990D839F7E4ADFA0B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b31b6e-f53f-443f-89eb-c6e99e4db569.roa
Signing time: Wed 01 Jan 2025 00:00:00 +0000
ROA not before: Wed 01 Jan 2025 00:00:00 +0000
ROA not after: Wed 05 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.212.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:48:d8:11:8c:39:a0:cb:b7:db:53:b9:90:d8:39:f7:e4:ad:fa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 1 00:00:00 2025 GMT
Not After : Feb 5 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:a3:b4:45:72:3d:82:2c:b2:48:88:11:5f:
bd:a8:1d:b2:a7:d7:19:c7:c0:ab:3a:bf:61:46:e0:
a3:c7:ea:2a:15:bc:a4:ab:ed:03:eb:a4:e1:d6:90:
09:78:a1:79:5f:e3:e7:10:8e:8c:0b:bf:90:79:97:
52:5a:08:a7:ff:9b:1b:52:46:ba:f7:b2:0e:bb:f5:
0a:3b:57:c5:c9:28:d1:4d:cc:b0:ab:e4:3a:30:dd:
4f:5a:ce:ac:82:68:95:c7:11:1f:a0:72:e8:e6:bd:
9c:81:e9:37:46:04:1d:73:6f:a4:73:b5:10:55:95:
d9:22:96:fe:1c:46:58:d5:bc:21:97:63:9c:f4:d2:
ee:f7:25:33:80:24:8b:ee:9c:c0:ea:80:4d:52:a4:
9f:8b:7d:b6:96:fb:76:76:9d:f2:7c:cc:75:29:be:
7b:db:be:66:20:90:10:d9:40:75:0e:8d:ac:83:d1:
19:24:13:48:9f:f9:8a:e2:eb:b4:dd:6f:a2:a2:e8:
4c:84:22:6e:c1:fb:ad:10:e9:0b:bd:4b:c8:10:ef:
c8:c6:57:7f:a7:14:5f:2b:b9:50:46:bb:ab:39:b9:
5e:11:6c:e7:19:77:88:dc:9c:18:d9:21:af:08:3f:
32:0f:c9:ee:17:3f:be:a6:32:13:e9:0b:08:aa:17:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:18:CD:1F:90:F8:16:44:56:44:0C:C2:64:AA:2F:F0:23:A1:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62b31b6e-f53f-443f-89eb-c6e99e4db569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.212.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:64:df:55:4a:23:d7:bb:4a:f1:d4:ff:6a:40:38:b9:aa:11:
74:42:58:97:4c:f5:ae:03:ec:d4:a1:22:f7:1f:9b:0b:f7:72:
b4:d2:47:04:84:3c:86:03:b3:51:50:4b:66:a3:ff:f4:26:13:
3a:ea:55:a2:48:8d:7a:9d:8a:e2:29:82:ac:ee:1f:f5:70:28:
f5:9a:98:a6:d8:bf:61:81:be:a5:9a:12:67:6b:13:8f:fa:49:
d6:cf:ba:cb:b0:8e:a0:ae:78:3e:d2:1e:46:30:18:42:f8:38:
9c:31:f2:36:c8:1d:5d:72:36:c3:1d:3c:51:8d:a2:b0:cd:6c:
2b:33:7f:ff:0b:c3:55:80:3a:19:e2:87:f8:c6:96:43:8e:89:
8c:97:d4:76:f9:0f:e3:0f:76:98:7b:6a:dc:76:21:a9:28:e7:
f3:20:10:b1:ac:db:93:db:ca:13:4d:f8:ac:e9:a6:a5:77:39:
2c:f1:ab:e5:99:be:fd:1f:42:5c:01:e2:a2:4b:87:04:e2:0d:
b0:5c:1d:c7:fa:56:bd:e8:02:12:e3:fd:25:28:cf:e9:86:df:
21:7e:68:1d:2d:3a:01:60:ac:8a:d8:f8:ea:32:1b:f8:8f:85:
c4:a9:cf:85:f9:37:e7:c0:38:f1:28:99:5e:9a:b9:41:94:4e:
2e:be:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:13 2025 by rpki-client