Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0a263ff-7c52-49ec-b7f0-7f492bfd3666.roa
File: c0a263ff-7c52-49ec-b7f0-7f492bfd3666.roa (raw, json)
Hash identifier: mqLSNUrt4cpaK1qDqx/c5S9KWOERpbrT1AUdHgyKkoc=
Subject key identifier: E7:2A:A0:D5:FD:CA:E7:01:1F:5B:21:CB:8E:96:39:1D:5C:9A:E6:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A224CD2A7CA7713845CBE0BFDD08FA0A86E7A6A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0a263ff-7c52-49ec-b7f0-7f492bfd3666.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:22:4c:d2:a7:ca:77:13:84:5c:be:0b:fd:d0:8f:a0:a8:6e:7a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:54:7e:f6:29:1c:ee:45:1c:12:1c:36:2d:
91:f6:6d:8b:0a:59:88:0b:e9:ab:9f:bb:08:0c:55:
08:e1:10:a7:09:c7:ff:90:54:65:a0:87:0a:d4:63:
7d:eb:21:60:d3:e6:f4:13:bd:17:fa:7a:fb:b1:3f:
72:59:73:ee:87:5d:29:8e:f7:70:8e:42:8b:20:59:
17:66:f6:67:c8:8c:c3:68:0c:70:43:56:7f:d2:4b:
c3:ad:1e:67:17:19:bb:ac:59:e1:bd:a3:92:18:2d:
37:e0:b6:34:bc:ea:e0:39:4d:43:fe:ee:e2:6c:c0:
31:41:42:00:8a:95:f6:d5:ab:c4:d5:dc:32:e5:55:
2a:a2:4e:68:ab:72:f5:9d:73:cf:4e:05:fc:2f:b9:
85:f0:df:b3:cf:8e:e9:d7:16:7a:33:b0:f8:9e:47:
8b:93:d1:c5:72:e5:8e:62:06:24:b8:f7:ac:c5:25:
b5:31:8d:28:4b:d2:17:8b:c3:94:97:40:07:0f:3a:
32:e3:86:b9:2f:4d:b5:d8:f7:c3:f5:a8:54:66:34:
49:d4:f2:6e:4f:5d:94:6b:0b:b2:67:d9:18:79:6e:
43:d7:24:7b:e5:f5:f2:54:23:8b:43:bc:59:2c:4a:
9a:1a:44:48:20:ce:3a:69:a1:cb:69:95:07:45:8b:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2A:A0:D5:FD:CA:E7:01:1F:5B:21:CB:8E:96:39:1D:5C:9A:E6:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0a263ff-7c52-49ec-b7f0-7f492bfd3666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
10:b2:66:82:1c:82:a3:e3:a8:db:ca:94:6b:84:37:15:8d:0b:
fb:7e:9a:8e:36:b3:3d:cd:f9:ef:ae:ce:62:2e:89:04:a9:78:
2f:39:af:07:19:22:38:4d:0e:56:f5:ec:df:6e:56:63:9a:cc:
9e:12:c0:ed:c0:45:3e:fa:e9:b9:f4:e8:7e:08:c4:18:70:67:
48:e1:64:7d:d1:08:64:f3:d4:67:33:55:ae:7b:a6:c2:68:f6:
73:9e:b2:07:53:9d:28:9c:70:59:9c:b1:13:3a:60:5e:9f:94:
71:29:13:cf:15:37:cf:0c:ec:e5:7b:01:c1:19:e5:c9:3c:d9:
e7:6f:93:4e:c8:5b:db:d5:ad:61:ca:26:30:55:8b:6f:59:1c:
9b:0e:4e:19:b7:c8:59:29:c9:f8:3a:7f:4f:e1:6b:50:c5:c0:
4e:d2:7a:ea:c8:bb:4c:25:e4:86:de:d5:27:1f:90:9a:1c:cd:
5d:0e:f0:81:32:bb:dc:8a:60:f6:ff:63:23:01:f5:0b:f3:70:
57:a1:52:15:e5:41:29:ef:fe:68:db:2c:19:21:1d:2d:47:49:
86:8b:85:d9:b6:3c:8f:cb:ca:8d:a4:10:64:cc:7c:27:92:cd:
fa:27:04:13:3d:ce:e4:2c:1e:63:31:fe:31:86:6b:47:ba:17:
50:ff:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:51 2025 by rpki-client