Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/838ee456-d234-4ba9-891e-4ea50a4ccf78.roa
File: 838ee456-d234-4ba9-891e-4ea50a4ccf78.roa (raw, json)
Hash identifier: YRgbhhaLKGeILMeClR2Bul0nSjuB2OF5b8JCcTsAFVM=
Subject key identifier: 99:E3:5D:A8:41:28:2A:7D:5C:0D:C9:F5:92:32:59:43:5C:6F:61:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D54E8C10959E4319213C2E2C8E56BC3D506846A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/838ee456-d234-4ba9-891e-4ea50a4ccf78.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:54:e8:c1:09:59:e4:31:92:13:c2:e2:c8:e5:6b:c3:d5:06:84:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:bc:16:49:11:f4:01:58:44:5c:76:38:17:
24:44:25:0e:fd:8d:1f:a4:19:dd:9b:41:87:de:e4:
84:c0:41:9c:9e:de:44:b6:25:4b:92:33:51:89:3b:
de:78:47:f0:eb:4d:63:17:f2:25:cf:c0:35:d8:2b:
7b:74:19:e7:57:60:3d:0b:3b:73:1d:68:5a:49:80:
cb:68:f0:ee:7c:b6:4e:bc:9e:4b:54:e0:83:92:21:
25:9a:f0:1c:70:bd:85:4a:b8:e4:af:35:55:67:8b:
11:f2:29:e0:5d:8d:4a:d5:e9:cb:b3:42:be:d2:99:
59:76:d3:e7:20:00:af:58:82:6e:44:6b:f2:80:5e:
82:ad:62:6e:41:f3:33:b9:09:e4:14:ee:7b:d2:30:
8c:0c:9b:aa:92:9f:b7:c3:ec:a1:22:c2:97:40:82:
43:f5:e5:54:91:c4:c9:ec:a8:a6:20:40:54:d8:94:
be:3d:04:64:7e:4f:0e:a1:54:18:84:67:9d:5d:cf:
8b:b8:4e:ad:cd:50:b8:97:e7:bb:f7:c1:4f:0d:cc:
0c:48:4b:b5:7f:f7:02:be:f2:c3:74:35:53:48:24:
56:0f:e0:a7:d3:d0:00:05:41:9a:41:d7:79:03:45:
84:89:8a:c9:cd:fc:06:a7:d5:20:12:bc:59:d1:ac:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:5D:A8:41:28:2A:7D:5C:0D:C9:F5:92:32:59:43:5C:6F:61:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/838ee456-d234-4ba9-891e-4ea50a4ccf78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7c:31:cf:a8:5d:7c:85:23:34:c2:23:a9:ab:e7:ec:ab:c4:
5d:d3:2b:9c:f0:66:6b:d9:5a:84:f2:d1:ea:e4:ff:94:18:69:
24:bd:a1:42:5c:c9:7b:ed:c1:d5:c6:27:f3:3d:1d:00:24:bb:
0d:2b:e2:1e:fb:a6:ba:cc:7c:76:a3:9a:4a:fc:85:56:2b:26:
e8:83:81:df:3b:ab:b4:d0:0e:e5:92:bb:d3:9c:f2:16:08:b8:
94:82:de:52:89:e3:f7:d3:36:44:02:86:54:8b:49:a8:a7:17:
c4:1f:87:f9:46:85:04:91:62:89:62:28:81:74:5b:2b:e0:3f:
ca:57:78:31:87:24:62:67:4a:79:fa:d9:3b:1e:52:db:54:73:
4c:d1:f4:51:f0:de:1e:9a:8e:28:15:75:70:b1:ac:a1:91:5f:
17:d7:1e:e5:42:52:ae:70:79:80:13:34:b2:0f:76:38:ea:75:
76:07:9b:ba:4b:1d:da:9f:8d:7f:08:d9:2c:33:aa:e9:8b:06:
b3:d9:c1:a3:f7:09:a5:52:f0:2b:75:e5:b5:dc:52:84:92:5d:
6a:66:4d:69:e9:6f:d5:10:49:e8:9b:4d:64:3d:c1:64:1a:18:
1e:8f:0f:c9:43:5b:b6:6d:6c:33:34:09:fe:fb:10:21:3c:ec:
70:9d:4d:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULVTowQlZ5DGSE8LiyOVrw9UGhGowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA0MDAwMDAwWhcNMjUwMjA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTE1M2QzNTAyODkxMzAyNWU3ZWYyYjkyMTA0MDdkODUy
NGFkNjM5OWVlOWJkZGVhYWJiN2FmZGRiYTM4ZmRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkZLwWSRH0AVhEXHY4FyREJQ79jR+kGd2bQYfe5ITAQZye
3kS2JUuSM1GJO954R/DrTWMX8iXPwDXYK3t0GedXYD0LO3MdaFpJgMto8O58tk68
nktU4IOSISWa8BxwvYVKuOSvNVVnixHyKeBdjUrV6cuzQr7SmVl20+cgAK9Ygm5E
a/KAXoKtYm5B8zO5CeQU7nvSMIwMm6qSn7fD7KEiwpdAgkP15VSRxMnsqKYgQFTY
lL49BGR+Tw6hVBiEZ51dz4u4Tq3NULiX57v3wU8NzAxIS7V/9wK+8sN0NVNIJFYP
4KfT0AAFQZpB13kDRYSJisnN/Aan1SASvFnRrEBFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmeNdqEEoKn1cDcn1kjJZQ1xvYQ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgzOGVlNDU2LWQyMzQtNGJhOS04OTFlLTRlYTUwYTRjY2Y3OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtU9MwDQYJKoZIhvcNAQELBQADggEBAG98Mc+oXXyFIzTCI6mr5+yrxF3T
K5zwZmvZWoTy0erk/5QYaSS9oUJcyXvtwdXGJ/M9HQAkuw0r4h77prrMfHajmkr8
hVYrJuiDgd87q7TQDuWSu9Oc8hYIuJSC3lKJ4/fTNkQChlSLSainF8Qfh/lGhQSR
YoliKIF0WyvgP8pXeDGHJGJnSnn62TseUttUc0zR9FHw3h6ajigVdXCxrKGRXxfX
HuVCUq5weYATNLIPdjjqdXYHm7pLHdqfjX8I2SwzqumLBrPZwaP3CaVS8Ct15bXc
UoSSXWpmTWnpb9UQSeibTWQ9wWQaGB6PD8lDW7ZtbDM0Cf77ECE87HCdTQs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:09 2025 by rpki-client