Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a41acab8-2ea6-42e6-8365-6f71c779c6e0.roa
File: a41acab8-2ea6-42e6-8365-6f71c779c6e0.roa (raw, json)
Hash identifier: Z5AYwQqBVCFLqBsV8r6RDruYkhfXNCDH+GbQAeeTqgw=
Subject key identifier: 68:DF:D2:91:89:7C:0B:E0:AA:A4:AB:20:DA:87:A1:A5:E1:34:01:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B85535CFC547C63877DB0D93E1CF07242FC9731
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a41acab8-2ea6-42e6-8365-6f71c779c6e0.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.50.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:85:53:5c:fc:54:7c:63:87:7d:b0:d9:3e:1c:f0:72:42:fc:97:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=ff8b189680b4d3d7a4d80c7f1da1d07fae9ef107ae22a596c46cd0d1300c076f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:96:57:55:8f:6f:df:59:51:b3:30:dd:da:
bb:00:cb:49:23:86:e4:c0:21:13:be:64:ee:a3:b5:
84:b1:37:bc:5d:c8:16:55:5d:e3:de:d3:d8:a1:94:
e7:5f:08:c9:dc:5c:34:bb:4e:3a:3e:94:01:03:49:
c9:25:0f:8c:20:80:a6:cb:83:05:7c:4e:7c:96:e8:
9b:92:d3:0e:bd:73:94:af:1e:00:77:6f:8c:28:c7:
ac:dc:d6:4c:93:a3:32:4c:e7:98:e8:da:f3:8e:4e:
93:23:4d:56:32:1d:75:dc:c2:88:a5:ee:bf:ea:fb:
97:ff:0b:e5:ba:3b:65:88:d6:e4:e3:0a:8e:17:47:
b5:04:e7:10:64:b0:be:68:6e:fd:12:23:f8:e2:25:
ff:35:e8:6a:ec:35:5d:fc:75:56:50:00:16:71:16:
94:8b:b6:9d:ba:a5:68:a8:f5:79:ad:35:aa:82:ea:
97:d5:dc:07:14:e3:b0:9a:75:5f:4c:ec:13:f9:92:
5d:96:e4:f4:7f:92:4f:8d:04:47:29:e8:b2:00:01:
73:81:8c:83:15:43:0c:ed:ca:f7:fb:81:a1:cb:9f:
62:33:35:69:6c:33:2d:39:00:5a:c1:bb:d0:1a:7b:
a3:ef:8e:90:10:ea:34:6d:2f:3f:e6:5d:a2:d0:b3:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DF:D2:91:89:7C:0B:E0:AA:A4:AB:20:DA:87:A1:A5:E1:34:01:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a41acab8-2ea6-42e6-8365-6f71c779c6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.192.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a5:f4:56:da:c5:53:95:fa:db:75:0b:f4:40:92:aa:ac:16:
2e:63:0b:fe:cb:5c:56:db:6c:0a:df:26:d3:50:32:4c:81:dc:
4a:30:73:ad:c1:bb:b5:46:79:5f:d9:e7:75:bf:47:7c:24:e5:
16:3a:e8:f1:72:e8:c2:45:a2:1d:cb:b2:1c:be:27:36:1f:ee:
63:95:8d:03:cf:11:7e:f1:ed:6f:23:e2:96:c5:78:4c:8e:36:
a7:00:45:dc:35:9f:16:16:5b:32:d6:9d:e3:8e:e5:df:6a:a6:
35:69:c8:7a:6e:51:8b:e7:ff:1e:5f:05:2a:1e:03:d8:65:41:
ba:a8:2d:5a:4e:39:3b:a7:29:91:4d:ee:0d:54:a7:66:3a:0d:
13:fd:03:8f:5d:8b:b3:0d:de:1e:2f:3b:c8:b2:98:66:f9:a8:
ae:81:b8:45:71:fb:bf:02:48:05:61:d7:8d:31:24:cb:6f:c5:
64:f0:e2:f5:2b:36:46:d2:df:fc:8c:fe:1a:b3:68:87:fa:d9:
a9:35:0b:a6:f1:5a:67:5e:e4:08:ea:ce:ed:c2:da:dd:13:25:
58:00:c3:88:42:2a:ab:7f:3a:de:36:a5:5f:f4:fe:e6:6f:e4:
8e:33:cc:60:ec:2c:e4:b0:16:d6:1d:3b:2e:51:e5:09:1f:ae:
2c:5c:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:43 2025 by rpki-client