Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c76e72-5a35-49a7-b084-28f3969b5618.roa
File: c3c76e72-5a35-49a7-b084-28f3969b5618.roa (raw, json)
Hash identifier: Uy/MT/1zbHgWIxTbH/xdVTdJIhcwplE4GyuXvJvVPvo=
Subject key identifier: CE:1B:5C:30:84:78:2B:03:17:F6:07:F0:F0:0A:2A:86:E8:A5:1E:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6563C467D29306D21D6762E096926946213666C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c76e72-5a35-49a7-b084-28f3969b5618.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:63:c4:67:d2:93:06:d2:1d:67:62:e0:96:92:69:46:21:36:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:2c:38:db:0e:3a:5f:b6:aa:87:b5:07:b4:
08:76:a5:4a:68:76:4d:90:72:9f:f7:05:15:15:86:
28:eb:ae:79:71:12:21:81:6a:d7:dc:04:ee:1f:0b:
29:54:25:5c:56:08:ee:95:7e:38:17:60:13:64:ce:
c0:5f:aa:f8:db:6a:88:55:97:a1:1d:4d:37:35:e1:
c6:a6:bc:3f:c0:b0:57:d0:ae:4c:6d:4e:91:bf:f4:
96:36:3f:6f:02:8f:41:dc:c5:2d:c5:e5:cc:86:a0:
b4:5f:c3:27:ab:82:fa:30:ba:17:ef:64:6b:8c:8b:
a8:29:37:e2:f7:3f:9b:22:19:f3:21:f9:51:c5:6c:
39:a3:6f:91:35:96:9e:20:9e:e6:df:59:0c:0a:3c:
a5:a4:2b:3e:a4:5c:56:17:5c:13:87:78:0f:82:e4:
ef:52:e3:08:c6:f3:f5:7d:3b:ad:34:31:62:9d:28:
95:4a:fa:ed:63:b7:6c:38:f7:5b:33:30:eb:89:9e:
2f:00:d6:f1:6a:71:21:0d:26:44:a3:6f:f5:9d:af:
d4:75:e4:f6:7c:7f:55:63:f6:c5:80:bb:a6:94:9b:
39:14:a0:9b:eb:93:44:be:07:c1:33:92:c2:24:55:
2c:03:a8:33:35:1f:4a:fe:53:41:fa:60:99:47:bc:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1B:5C:30:84:78:2B:03:17:F6:07:F0:F0:0A:2A:86:E8:A5:1E:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3c76e72-5a35-49a7-b084-28f3969b5618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:8d:6f:ed:fb:c5:fb:42:c7:5e:ed:2d:bb:79:0e:f1:26:be:
b5:c3:86:dd:73:d2:97:61:90:5d:b6:dd:b3:18:f2:3a:d3:fc:
7d:48:a6:69:a2:23:34:b5:05:5d:d2:16:9a:34:d9:62:d4:a2:
cb:fa:65:bb:1a:6b:bc:7a:ee:45:d2:5d:92:b2:80:30:26:50:
4c:bb:08:87:48:66:a9:b4:d9:77:f1:4b:7f:52:a2:af:f6:ec:
74:98:f7:8a:f5:e9:3d:89:e6:a1:c2:8e:0d:07:17:dd:d0:70:
7f:e9:f4:21:aa:51:b4:d8:0e:07:08:d9:94:df:ae:13:c9:85:
de:b6:66:0f:57:0d:f4:25:18:95:99:78:d6:db:59:7b:ea:1a:
0a:23:be:e6:3a:75:82:79:ba:50:e5:dc:d3:d1:f8:c6:c5:fc:
6c:24:ed:68:ce:e0:65:76:a7:ba:43:68:63:08:0d:77:a9:3b:
e5:6e:7a:bc:ec:81:34:44:89:44:b4:f6:16:c9:95:48:b8:79:
8f:f4:08:8f:ae:83:4b:e0:cc:b4:d1:24:d4:21:33:57:86:70:
a1:be:51:9e:9b:dc:32:72:91:9d:e6:24:12:92:31:32:b6:06:
3c:b5:56:c9:92:a1:80:20:09:40:ce:cf:e2:f4:49:15:11:eb:
3f:97:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:33 2025 by rpki-client