Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc2b36fc-3c56-4dd3-9b37-d03766cb89f1.roa
File: bc2b36fc-3c56-4dd3-9b37-d03766cb89f1.roa (raw, json)
Hash identifier: qoxhUHisYGsgJw5lrFh4n9jOkWeq5f+glmEbdS9ju14=
Subject key identifier: C7:80:F4:6D:22:BF:7A:5D:7D:76:6F:0D:63:B6:77:37:02:1F:38:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3935CB7DED42D494EC1340BEEF8EE2EA4987EA3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc2b36fc-3c56-4dd3-9b37-d03766cb89f1.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.176.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:35:cb:7d:ed:42:d4:94:ec:13:40:be:ef:8e:e2:ea:49:87:ea:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:e1:95:44:1d:10:1f:a3:25:35:2c:e6:05:
d6:e3:4f:78:bd:f6:b8:0a:ec:b0:6e:72:f9:b1:26:
6a:9f:15:6c:c6:2b:6d:66:3a:6a:7d:aa:93:1d:ff:
dc:98:46:ab:e9:0c:14:ff:77:1c:8a:d1:1b:fd:64:
61:ee:d3:d9:a6:a4:1e:de:b3:99:ad:6a:2c:cc:68:
24:da:14:f0:0b:bc:02:eb:25:11:5e:e3:13:18:f8:
b1:3a:85:0b:98:37:38:06:1c:50:6b:26:e0:70:5f:
c0:b4:58:d8:08:7d:2d:df:b2:30:17:f7:88:a5:1f:
d4:29:56:f3:08:16:30:04:66:38:6d:b2:30:06:1b:
e3:7d:14:b1:80:25:9e:dd:69:08:92:bf:de:0b:bf:
1d:5a:db:da:2e:60:90:7c:3f:cb:60:d6:a0:62:3a:
8a:d4:6a:01:cc:99:01:3f:5c:f8:2c:55:b5:24:09:
83:96:a1:57:00:a2:c1:9d:6e:e5:54:8c:11:ce:24:
3a:e7:78:17:72:ea:eb:d6:31:b3:cb:87:63:6a:62:
1b:64:20:78:2c:5f:7d:f6:4e:56:d9:e0:2c:59:51:
7e:b6:8e:54:23:03:08:54:22:9c:38:06:0e:b8:62:
2b:85:25:78:54:1d:ac:7b:cd:a8:b6:cc:e5:14:c3:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:F4:6D:22:BF:7A:5D:7D:76:6F:0D:63:B6:77:37:02:1F:38:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc2b36fc-3c56-4dd3-9b37-d03766cb89f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:3d:eb:8b:a2:53:7d:37:2f:40:d6:89:1b:dc:c6:91:d3:fd:
77:cf:17:02:43:04:f8:1d:89:64:b3:9e:e2:c9:39:4c:99:a0:
1b:db:a3:c7:68:3a:ce:aa:2b:c1:ec:0f:1a:31:ef:6e:f7:82:
c7:1f:ea:ac:c8:fd:5c:3d:10:72:e7:e6:40:e3:49:54:69:3b:
71:dd:92:c9:18:b2:7d:c1:46:3f:1d:f2:66:d9:a1:cc:ef:ef:
cc:24:49:f3:01:77:f0:fb:98:ac:7a:68:93:93:f6:dc:08:64:
6f:58:74:38:6d:03:fd:1c:56:30:69:0e:95:00:30:60:a5:df:
fc:9b:82:a4:02:f8:77:96:de:48:80:ad:84:5f:cd:f4:90:0f:
b7:58:ce:cd:6c:b2:e8:bf:2c:77:4a:81:63:48:97:11:51:37:
5b:e6:a7:49:6f:0d:62:f1:28:6a:af:9a:3e:17:c1:1b:8d:bc:
e7:cd:07:2d:0c:7d:b4:46:48:5b:21:85:53:1e:07:43:64:75:
ae:65:24:7f:d6:32:93:e3:62:82:be:12:3b:9e:c5:1a:bd:28:
b3:87:eb:fd:7f:8c:eb:b8:ba:18:a2:b5:02:f5:13:df:b9:e3:
9c:09:5b:a4:50:19:df:7e:5e:40:fd:33:99:60:f6:3c:f1:c8:
88:83:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:11 2025 by rpki-client