Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63327763-5634-44d1-979c-6bf77ff83266.roa
File: 63327763-5634-44d1-979c-6bf77ff83266.roa (raw, json)
Hash identifier: aYhLa17QymXHTOLhWPUxGVPPaqr91lwafP4yUeldLDU=
Subject key identifier: F7:7B:30:A9:DD:B1:E7:4C:49:BF:03:0A:74:6A:35:AF:93:89:42:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 743EB8F19597A8925E369DA43826900B4F35F325
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63327763-5634-44d1-979c-6bf77ff83266.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.246.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3e:b8:f1:95:97:a8:92:5e:36:9d:a4:38:26:90:0b:4f:35:f3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:53:dd:d0:15:ff:ac:5d:41:d7:40:b6:c4:
94:f4:4b:04:aa:55:b9:f5:0b:ec:a1:74:35:18:e5:
32:a6:59:16:96:9c:12:4e:06:cd:af:c8:42:52:fa:
3b:02:94:63:14:55:03:a4:9e:50:eb:e4:a8:ca:e9:
b6:c3:e7:26:19:7a:10:14:99:b0:d3:79:47:44:29:
7d:0f:6c:56:b8:66:f6:ad:be:03:30:b7:bf:8c:91:
be:d9:71:3e:06:d8:0d:5d:06:f6:fe:aa:80:f9:12:
01:0b:71:17:65:cf:7c:0f:1e:a0:8d:50:e9:26:4c:
a5:e4:51:3b:c3:a6:4a:19:95:50:27:07:a3:a9:e4:
c3:14:fd:33:ce:fa:4e:6a:96:df:87:e9:95:2b:fd:
dc:a6:c7:4c:0b:d5:18:81:0c:10:e2:5a:13:b6:a4:
a7:0e:f4:4b:bb:65:7c:c0:36:ad:d0:41:f2:c2:86:
8a:1f:be:99:f1:b7:e2:70:e7:4a:57:82:be:81:9b:
9b:9e:db:bf:a9:7f:f2:34:76:84:31:42:e8:e5:ca:
8e:f8:f6:39:10:50:39:6d:80:20:84:7f:86:87:8e:
36:c1:a2:b1:6b:fe:97:5d:47:7b:0e:a1:6b:31:8b:
ff:b5:cf:ac:dc:d6:bf:b0:58:69:b3:46:75:0a:96:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:30:A9:DD:B1:E7:4C:49:BF:03:0A:74:6A:35:AF:93:89:42:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63327763-5634-44d1-979c-6bf77ff83266.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:d2:4e:dd:51:1a:98:bd:45:05:03:3a:97:e5:30:21:86:a4:
65:64:1b:b0:74:d3:c1:ad:01:14:69:7b:6e:25:99:18:ec:1f:
68:09:bc:79:ff:0e:cb:51:52:81:c1:1f:b1:68:62:41:8e:c1:
9b:86:4b:d2:79:12:30:67:94:01:5d:7d:b3:b5:8d:d3:a5:68:
25:b0:5e:98:ce:44:0c:65:55:fe:42:8e:d8:40:e7:9b:89:48:
fb:39:56:44:cd:2f:17:cd:39:a3:15:88:48:26:41:39:3b:10:
30:be:41:4a:be:31:84:a5:5a:eb:dc:03:cd:84:dd:c7:c6:67:
ff:98:44:e6:a1:ab:62:9a:5b:dd:a5:ef:fd:90:1d:fd:ab:c7:
e8:de:a6:45:4d:78:c4:4c:21:3e:91:f0:f4:94:c8:36:5b:3d:
3e:87:db:41:7f:0e:69:e6:50:cb:42:cf:3d:22:f6:2f:50:ca:
05:2a:80:59:36:78:eb:50:74:39:75:09:f6:8c:38:01:8b:04:
9c:64:db:c3:04:c0:b5:02:38:0b:e3:d4:55:35:cd:68:59:55:
89:86:0d:29:cc:da:13:73:2a:13:63:7e:e1:cb:94:77:5e:fa:
d1:e3:94:5c:33:99:f1:1c:d2:55:db:32:09:6e:06:cc:5e:16:
03:9c:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:16 2025 by rpki-client