Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d26bb83-06ca-469a-b715-83b4a556470e.roa
File: 8d26bb83-06ca-469a-b715-83b4a556470e.roa (raw, json)
Hash identifier: vqFjv2HssxTD+tKqp7cHtfAeWBhadRDaaplN2qQFo8g=
Subject key identifier: F0:B9:0B:77:82:69:B8:FE:7D:A5:A1:79:33:26:F9:31:1D:FC:43:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0945410CAEAEFA07D4A933FEA3C0A8F59C950089
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d26bb83-06ca-469a-b715-83b4a556470e.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 157.52.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:45:41:0c:ae:ae:fa:07:d4:a9:33:fe:a3:c0:a8:f5:9c:95:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=ae1f7149d4b2599afdcb5a893cdb8d75ab197d40eed27147213a74e625aef164, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:23:91:10:c4:cc:8d:05:a3:a1:ca:d5:e9:
43:45:60:b0:2a:3d:02:57:a1:7d:e0:ee:27:be:be:
01:42:ba:5f:29:f7:8c:0f:03:76:56:36:ae:21:37:
b5:4b:1d:ed:c6:cf:2a:32:85:03:7f:c7:0f:93:73:
2b:0f:a9:c8:5b:e2:af:17:54:2c:d3:c5:5b:74:26:
c4:b7:c3:90:bd:a8:7b:7a:c5:0f:08:4a:9d:69:f4:
c8:b5:a2:04:d3:45:08:38:74:16:af:bb:dd:b6:bf:
8b:f1:5f:33:ce:44:46:40:ec:53:04:11:25:cd:29:
48:85:7d:15:49:43:76:b2:1c:fc:b7:b5:30:6c:63:
73:7b:6d:43:53:a1:f6:52:70:89:66:ce:01:e8:26:
4f:75:5c:06:bd:f7:d1:9f:25:37:48:b9:fd:9f:a3:
3d:d6:f9:29:ab:71:ff:0e:44:f9:17:1f:88:ae:b8:
1e:96:fa:a7:2e:fc:6b:24:1b:81:60:29:0c:7d:e6:
76:27:d4:a4:11:fd:bf:c9:0a:41:bd:8a:19:78:4a:
34:6e:ef:7d:3a:b2:7a:7c:ce:ad:a3:e9:9d:65:38:
82:c3:d4:10:86:de:2f:2e:ab:ea:32:e0:1e:6e:00:
e7:89:44:e0:05:24:81:1c:cf:9e:0e:89:69:ee:94:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:0B:77:82:69:B8:FE:7D:A5:A1:79:33:26:F9:31:1D:FC:43:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d26bb83-06ca-469a-b715-83b4a556470e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.52.128.0/17
Signature Algorithm: sha256WithRSAEncryption
18:73:9f:14:1c:b7:12:1b:56:39:13:94:df:96:1d:e5:d1:e6:
4a:d1:21:08:ad:28:e7:83:53:ef:72:84:36:e3:d5:d4:76:04:
bb:89:ed:08:85:47:b2:57:38:24:ef:86:1c:c4:7e:0c:99:ff:
b2:30:25:27:e0:38:08:29:ad:46:cb:af:a8:5d:87:cc:83:bb:
73:b0:e2:8f:bc:0f:6a:db:42:c2:35:a5:8b:64:cb:d7:f8:80:
ba:88:26:e5:c3:41:5b:78:04:ad:8f:ea:70:25:25:28:ed:c7:
80:29:90:5d:81:8d:26:8d:27:6a:74:61:09:9b:ae:33:69:80:
ee:92:ce:41:08:2f:88:5c:be:b8:03:4e:d4:46:01:5f:99:aa:
be:84:ea:db:d4:9b:18:77:12:0d:bc:06:e5:91:21:3b:a0:c9:
56:25:5e:01:f7:90:27:8d:21:bb:2e:db:64:93:e9:b7:3d:c3:
0f:4f:f4:8f:a2:6e:4b:ad:ee:64:14:64:39:3d:c8:cb:ef:d5:
46:a9:bf:3a:8f:5a:c1:5e:3e:6f:df:74:66:23:0e:61:72:7d:
70:63:d1:25:42:6e:a2:a7:8c:97:99:ac:f3:a7:21:4a:87:65:
fd:5f:cb:56:01:4d:fb:c8:67:83:53:5b:86:ad:10:0d:71:61:
9a:3f:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:49 2025 by rpki-client