Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ce07ede-7a88-4f68-aa4f-c349f9fd6ba5.roa
File: 6ce07ede-7a88-4f68-aa4f-c349f9fd6ba5.roa (raw, json)
Hash identifier: j/OW4Bw2P89VZ9ggiuapwMfDDVD3MQ4auG0wnNNexrA=
Subject key identifier: D2:74:8E:63:62:2A:D5:0C:43:DE:61:15:ED:E2:21:2C:07:C8:4F:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F9A5FCB1A39E50E4529C6C919D741FEC5A51479
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ce07ede-7a88-4f68-aa4f-c349f9fd6ba5.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.152.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9a:5f:cb:1a:39:e5:0e:45:29:c6:c9:19:d7:41:fe:c5:a5:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:d5:19:be:a8:cc:00:10:03:7c:ab:b3:58:
e0:82:28:bc:5f:2a:40:1d:ab:15:4f:9a:97:b8:9c:
7d:28:fc:e8:87:29:9d:68:74:7b:c5:fe:91:f8:9a:
f5:d4:9c:12:6d:5b:45:e5:c6:40:b4:77:1a:04:a3:
0d:40:00:e4:1b:ff:50:2f:70:8f:27:d1:2b:a0:5c:
1f:3e:53:f9:40:2f:e2:bf:64:05:2d:9c:3a:e3:95:
58:9e:ae:38:1c:84:72:d2:6d:0c:85:db:21:b4:67:
f9:7e:c4:dd:2a:0c:cc:09:25:d2:4d:9c:47:f7:64:
2d:06:43:dd:99:d8:09:54:7e:cd:25:92:85:74:28:
33:38:4c:d9:cb:58:1b:2e:f9:fb:b1:ec:b5:91:ca:
95:63:46:c4:9c:be:a5:99:bd:4f:0f:05:db:5c:c0:
11:ab:6e:be:86:a7:87:7a:01:82:f6:bb:c9:1c:f0:
4b:b6:9a:e2:c4:8b:6c:0d:8b:cd:96:1e:ef:ee:8d:
13:d5:16:93:1c:a0:2e:1c:9b:5c:25:db:37:b2:bc:
f8:34:b2:38:01:32:73:0d:80:c5:ae:ad:31:14:e9:
4b:ec:13:91:e0:61:73:39:c9:d8:fe:63:4f:9b:61:
d7:f0:e0:25:1f:57:df:5c:9e:3d:e4:cb:f7:ab:11:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:8E:63:62:2A:D5:0C:43:DE:61:15:ED:E2:21:2C:07:C8:4F:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ce07ede-7a88-4f68-aa4f-c349f9fd6ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:8d:25:51:7c:43:30:50:41:91:d8:ba:15:9d:2e:80:1e:69:
e4:3e:91:83:5e:55:88:16:71:98:2e:54:29:41:2f:52:b0:ff:
89:f9:f2:6d:bb:d1:25:f3:bc:4b:23:f9:a7:fd:67:3a:34:d1:
39:47:38:1f:7a:5a:f6:dd:7c:e6:22:02:96:6b:54:7f:7e:65:
87:17:a8:90:78:41:7d:78:4e:c7:cb:e2:68:4c:3b:41:a2:f7:
f6:01:1b:7f:49:7a:29:dd:e6:cf:51:08:7f:32:16:bc:21:63:
3e:db:c2:6e:7b:b5:8b:77:ed:b6:e6:4d:68:fc:94:ca:64:f3:
15:10:b6:08:82:61:dc:08:dc:62:8e:ae:95:8e:bd:01:f2:59:
03:8a:da:5e:82:e1:3a:4e:48:b2:25:92:85:7e:ae:15:ac:35:
6d:fd:22:db:58:a0:b7:e8:e9:18:9e:49:e5:e6:b2:7b:fb:c2:
3b:1c:47:08:98:a0:8c:8c:b3:b2:fa:5f:1d:92:ea:7a:92:11:
56:07:b5:75:0a:72:b6:af:9b:c4:fd:c6:14:f7:e9:2c:49:c1:
d9:56:ff:9a:25:f7:c5:a7:69:fe:5b:fa:83:a0:47:89:68:79:
68:f7:23:ea:61:82:1e:8e:1a:4d:15:94:29:3d:2a:6a:0b:73:
79:bd:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:26 2025 by rpki-client