Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6477f743-96bc-4edd-b8ae-f8353faf0b67.roa
File: 6477f743-96bc-4edd-b8ae-f8353faf0b67.roa (raw, json)
Hash identifier: miu6+7Sccf3C5Ld9EgIAx3AvmjYgD0BIJu5NfESxuZw=
Subject key identifier: 82:05:5D:56:BA:62:66:DF:CD:7B:26:1E:F7:E3:E6:A9:55:12:DE:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06C4153BF57A3E41ADB105C2960426932EDA4FB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6477f743-96bc-4edd-b8ae-f8353faf0b67.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.50.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c4:15:3b:f5:7a:3e:41:ad:b1:05:c2:96:04:26:93:2e:da:4f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:76:73:45:82:53:91:a5:90:6c:88:5d:56:
85:cd:ee:38:df:29:4e:3b:2c:09:35:ee:52:57:ac:
55:11:76:b1:53:bb:0f:d2:17:c0:e9:09:1a:be:df:
9f:41:28:21:9a:35:9a:b5:71:3d:7d:67:bf:c2:e0:
f9:07:65:dd:48:43:e5:5e:91:92:8d:1d:20:0d:2d:
e8:62:4c:ce:4a:27:ac:68:02:8d:73:7e:bf:9e:31:
cb:b2:a4:95:2d:dc:66:61:f6:72:b6:c6:11:08:6e:
1e:c5:8e:09:14:e5:87:be:25:56:c2:df:17:89:52:
ea:4c:b0:88:4d:88:1b:33:c6:70:57:f3:9d:46:e3:
2e:39:1f:a4:84:38:c2:8b:38:d2:b1:3b:26:5d:4f:
f2:e1:5e:aa:43:b6:81:d2:3b:ff:11:8a:7e:87:75:
b6:f8:92:02:50:2c:7f:7d:29:bd:2d:90:b1:32:c8:
77:30:4a:7d:75:59:55:2a:f0:41:c8:c4:99:89:93:
ae:8e:41:99:e6:b0:1e:bf:27:8f:34:98:ef:3d:e0:
dd:86:4e:dc:07:92:61:d7:10:2a:a8:b3:23:ba:4b:
d2:7c:a2:6c:40:0c:0d:4e:d9:22:a9:87:50:47:37:
4e:bf:a8:5c:97:16:3a:5e:9d:8d:b0:0f:4a:12:9c:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:5D:56:BA:62:66:DF:CD:7B:26:1E:F7:E3:E6:A9:55:12:DE:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6477f743-96bc-4edd-b8ae-f8353faf0b67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.133.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c6:e8:7e:db:d6:38:05:59:9d:12:f9:5d:c2:0c:c0:6b:3f:
b0:8c:33:a8:1f:53:88:49:4b:d0:ba:74:e8:d9:e3:20:49:17:
de:14:69:d9:22:85:fe:de:eb:da:2e:6b:7b:ce:00:35:55:2c:
34:c7:30:d9:3a:49:59:49:b5:b3:34:6d:26:46:53:3d:7c:8f:
17:83:40:80:9c:03:21:f3:e2:c1:c4:df:dd:c5:30:98:71:de:
1c:2c:26:1e:30:ef:62:6d:d4:c3:44:5a:48:95:9a:31:9b:31:
9f:5c:a5:85:0e:81:5d:c9:84:3e:87:33:84:b0:59:db:cf:87:
cc:8c:f8:57:c7:51:66:e8:b7:9a:73:5e:4a:67:b3:4d:16:5b:
3f:61:f5:9c:da:0e:6c:4a:44:4c:11:92:6e:95:a9:f6:9d:54:
fd:96:db:fd:96:d2:e7:b1:73:eb:65:2f:52:1d:07:9d:ce:02:
2f:9a:e0:20:f9:ef:c5:5c:d6:94:db:dd:3e:de:86:08:f7:32:
da:2e:57:45:13:bd:89:7e:6b:e9:04:da:80:89:e5:93:a8:3e:
72:82:a2:3d:6e:0d:79:0b:45:50:8d:50:96:c0:25:fd:da:4d:
a6:94:8d:1d:30:3a:12:1c:fe:41:22:88:55:b7:fa:62:5b:3b:
53:5b:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:39 2025 by rpki-client