Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbe96c5b-ae11-42b2-8a00-19c111bad136.roa
File: bbe96c5b-ae11-42b2-8a00-19c111bad136.roa (raw, json)
Hash identifier: IjR3edS7/VcU66W7YDA/WSHS1GgksjBBcTLVCwpDnFM=
Subject key identifier: D5:6F:64:E8:4F:67:5E:67:9D:44:51:E8:E3:B2:24:33:FA:52:72:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 642C437E6A6F545B44739904B05ABFE551FB6205
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbe96c5b-ae11-42b2-8a00-19c111bad136.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.192.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2c:43:7e:6a:6f:54:5b:44:73:99:04:b0:5a:bf:e5:51:fb:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:4d:a2:9a:fb:63:f1:62:2a:3f:64:4d:35:
03:f2:e5:01:e7:8c:ed:b0:67:db:74:af:85:db:9f:
0c:d0:25:ed:82:bf:97:9d:cc:0e:ba:3a:9f:ba:b8:
c7:3d:c1:f9:67:d9:f0:74:02:aa:7b:b9:07:c4:cf:
a4:d5:fd:8e:85:73:d0:f6:6d:4c:8b:fb:ea:dc:b1:
5b:72:61:9f:b8:fc:65:7c:0b:a1:80:c4:a7:73:31:
7f:8f:7b:a5:90:40:40:cf:e8:f2:ea:af:e2:e0:e6:
c7:a0:66:f9:17:ce:b0:59:df:de:50:4b:1c:54:32:
d5:b0:0f:33:18:84:ee:c1:04:a9:bb:74:c6:97:64:
38:cc:b5:8d:e3:53:4c:7c:f0:e9:9a:40:14:e8:7f:
d8:85:02:cb:7a:c1:ad:71:3d:e5:8e:d9:dc:28:43:
ef:7e:b8:82:b5:89:6f:7d:99:a4:9b:1d:49:ac:f3:
88:f8:eb:ad:e0:4d:39:37:02:cc:09:26:6f:71:2a:
ad:46:a4:a7:62:dd:bb:81:19:1e:22:e4:8c:d8:21:
9f:33:8b:34:49:9e:19:47:6b:c8:92:cd:e1:1d:2c:
54:9b:fb:68:7f:5e:55:d0:88:69:68:74:c1:f9:9d:
a9:63:c4:af:82:0b:f7:39:5d:9e:05:73:33:03:b2:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:64:E8:4F:67:5E:67:9D:44:51:E8:E3:B2:24:33:FA:52:72:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbe96c5b-ae11-42b2-8a00-19c111bad136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.192.0.0/13
Signature Algorithm: sha256WithRSAEncryption
c6:e4:49:00:89:b7:2b:20:72:d2:0a:23:ae:33:6d:ad:74:2c:
b8:59:01:5d:b1:59:51:61:25:76:59:9c:83:d1:86:e5:64:7e:
29:89:34:d2:53:d5:06:d1:e3:b5:5c:c7:e1:16:9e:eb:b1:a8:
2e:a5:df:b3:78:0c:57:f8:e9:77:08:42:8e:0a:63:c4:b1:89:
49:1e:f1:bf:d7:99:b4:14:e5:d4:2b:e1:42:93:b0:84:24:a0:
b4:23:42:06:f8:ce:a8:d2:f6:e1:06:87:c2:cb:df:71:89:bc:
d8:11:77:03:4b:dc:36:aa:58:24:ad:7a:12:d0:5a:24:f9:cd:
00:42:3e:f6:7e:3b:07:e0:84:13:92:fe:24:87:be:f2:a5:4d:
65:19:dd:64:94:74:8e:d6:12:e4:4c:21:52:35:7f:83:6d:3d:
ee:a5:33:38:50:1c:62:9f:31:62:87:7e:70:37:c6:8f:ff:9a:
97:bf:f4:e6:55:2c:7b:90:b9:aa:83:be:80:97:02:73:61:68:
be:f6:42:85:2f:32:01:36:62:1a:49:16:d7:12:17:c5:af:23:
d7:17:76:b9:a6:eb:dc:9b:10:17:cd:81:2b:f0:c4:b4:b3:79:
82:1e:26:d6:54:b6:32:11:58:ed:6f:4b:fe:bc:c3:08:ad:81:
7c:af:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:46 2025 by rpki-client