Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a18bd0-b834-489c-9bfc-0e666960a243.roa
File: 67a18bd0-b834-489c-9bfc-0e666960a243.roa (raw, json)
Hash identifier: xDecgsJ8sLkG0rBxnqv1i43YiNcZKP1/VMyRXuuSfLQ=
Subject key identifier: CE:81:F1:DF:22:69:A8:6F:73:A1:3A:EE:8C:78:FD:C8:BF:08:41:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 178A8B5B2E13700F65D3E7990649903582D5E1C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a18bd0-b834-489c-9bfc-0e666960a243.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.158.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8a:8b:5b:2e:13:70:0f:65:d3:e7:99:06:49:90:35:82:d5:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:12:ea:c6:42:8b:62:47:f7:41:fa:e1:b7:
1b:a3:ab:c0:99:b8:bd:b8:73:ca:4f:e4:b8:61:7d:
c9:d5:dd:e5:98:82:0c:f8:49:1c:a9:f3:f4:08:92:
8e:e6:3a:ef:9e:c5:af:3b:f7:f0:12:c6:1a:27:08:
54:3d:65:c3:d8:c5:de:f2:9b:06:83:93:0a:b5:d2:
a8:a7:f0:40:2b:95:a0:1c:b1:30:84:1c:6e:75:ca:
1c:a5:9f:28:b4:c1:91:03:0a:50:07:cc:f0:f5:1b:
4e:f1:f8:ec:36:15:cb:b1:36:75:40:2a:78:dc:3b:
39:0d:4c:04:94:02:87:c9:46:63:e7:dc:e6:c4:f7:
1c:3f:ee:f5:71:c9:c0:56:32:52:c6:3b:86:24:8f:
ea:b2:06:52:32:90:5b:10:64:fd:c9:d1:07:44:c7:
96:8e:da:20:dc:dd:1d:e8:39:55:7f:e5:c1:25:42:
2b:48:47:fc:ef:71:97:a9:12:9d:c3:3a:bb:fc:9d:
8e:41:bb:f3:58:69:6d:f7:43:73:b7:ae:e0:f1:ac:
c3:f5:e2:b6:77:c4:27:2a:81:13:07:b4:41:f1:95:
88:99:f8:c1:a0:73:3d:64:59:e9:55:c2:b0:4c:c9:
87:31:45:4a:fe:9e:18:84:02:11:be:91:bf:b8:d7:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:F1:DF:22:69:A8:6F:73:A1:3A:EE:8C:78:FD:C8:BF:08:41:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67a18bd0-b834-489c-9bfc-0e666960a243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:9a:88:a3:2a:08:42:55:3a:92:f6:e2:05:fc:12:9a:e0:84:
c6:f4:14:f1:6a:d5:a9:90:aa:5d:a9:e3:2e:8b:db:83:4d:8f:
5f:08:0a:a1:e6:01:bf:7e:77:2f:c1:2d:1e:69:36:16:78:77:
14:e5:12:31:67:cb:93:c6:b0:dd:a4:d9:2c:22:0a:89:3c:9f:
83:c1:4a:4f:cc:1d:e0:08:27:42:87:e7:d6:c7:67:81:b4:c5:
2c:a3:42:89:2f:2e:bb:75:d1:83:e4:f3:19:df:6e:0f:9f:17:
59:46:82:5e:5d:fc:2d:36:b9:24:23:b4:2c:8f:78:34:68:5b:
77:db:9c:eb:c0:2b:e8:d6:6e:c4:02:0a:e2:df:49:39:ba:0d:
79:11:40:8c:eb:b0:47:c4:5e:37:a4:ce:58:a7:2e:84:41:a8:
80:55:2b:91:35:c9:73:cf:20:6e:50:f4:09:84:c7:6e:60:4f:
3d:35:65:5c:6f:46:1e:c7:2f:86:18:58:c4:59:a6:9e:49:ed:
56:70:04:7e:f6:a2:00:1f:22:8f:24:f1:bf:c5:ba:3d:2b:7b:
8f:4a:93:f0:4f:59:c1:e4:d1:d2:8d:aa:a5:27:f2:a7:46:2e:
f6:c9:37:05:72:89:68:1c:af:be:d6:df:d1:95:0b:f4:d0:8d:
39:6f:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:43 2025 by rpki-client