Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa
File: c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa (raw, json)
Hash identifier: RZPeviuP7xAOdLUEdxR5xeCkbKCXwP3W0Uj+bfLdfQM=
Subject key identifier: FD:B5:36:3D:96:FD:99:28:BA:53:CF:2C:EE:DE:6D:64:D1:96:E6:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09356F877F97E5B69A8FDAB10009B7C980BF0EFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:35:6f:87:7f:97:e5:b6:9a:8f:da:b1:00:09:b7:c9:80:bf:0e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:ae:7e:fd:95:9d:72:7b:47:c7:e1:31:75:
fe:cf:c7:8a:fc:cd:e7:e7:3e:35:b1:4e:2f:79:e8:
3a:02:45:d7:9d:a9:5c:99:24:44:5c:47:08:c7:22:
f8:a4:95:74:14:b3:46:78:c9:0f:0a:34:05:12:58:
97:92:19:f8:9e:f7:9e:ba:3c:40:5d:79:9f:36:f4:
75:30:c1:63:21:c4:54:8e:e0:c9:fa:f9:03:e6:63:
dd:89:ed:4a:27:a0:59:d0:01:9d:15:27:8e:2e:b6:
8d:56:16:b4:bf:8c:bd:7d:d1:7b:b9:8b:e7:f5:75:
ef:7b:31:1b:e5:d6:aa:02:52:c0:07:54:dc:b2:51:
ab:f0:d7:82:64:43:6d:4b:5e:12:f2:17:6c:d8:c1:
a5:92:1f:60:4e:8b:99:75:fa:96:fe:81:60:38:fc:
8f:02:cd:30:36:f3:f1:05:1c:6d:85:9b:f3:02:cc:
0d:84:87:71:1b:47:29:d8:a3:77:fb:dc:7e:94:7e:
ca:c9:0c:f4:3a:3e:6c:15:11:f0:77:bf:92:17:cc:
6e:f6:48:f0:d9:53:b4:c6:03:88:2b:1f:4b:45:df:
36:14:38:64:32:6b:d0:37:bc:5e:c2:2c:af:06:17:
d9:b4:b3:47:61:43:7c:60:bd:d5:c1:c3:23:d9:0c:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:36:3D:96:FD:99:28:BA:53:CF:2C:EE:DE:6D:64:D1:96:E6:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c5bc2704-8cf2-4573-9ad5-88a45c468aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a7:5f:13:73:68:9d:d1:ff:ac:ba:38:cc:89:b9:3b:01:37:
5b:45:e4:30:ce:67:a3:f6:b4:15:a1:fa:43:7f:a7:98:70:04:
25:b9:3f:1b:b5:8e:c6:bd:ff:eb:c1:56:64:fb:30:cc:65:eb:
ad:2f:ef:12:ff:1a:31:b6:7c:c9:c9:2c:24:de:29:40:0c:3c:
bc:18:07:76:0e:db:ff:49:3d:8a:c6:b6:71:47:43:96:da:ee:
89:c2:d9:06:05:cf:2a:af:95:21:b0:b3:fb:f1:b5:f4:a2:94:
3a:02:b9:7a:17:d6:04:25:fd:02:65:8e:92:30:19:93:f1:fd:
74:84:db:ff:61:b1:c7:7e:71:4b:89:0c:5f:a2:e3:9c:3a:ed:
10:8d:ab:41:93:89:c8:b2:27:0b:95:59:f7:02:f2:80:22:a3:
96:6a:c9:a3:e5:40:4f:08:da:78:9b:10:be:2c:be:2d:71:15:
82:da:52:45:35:cd:34:f1:43:48:44:c3:b7:98:d2:7b:5c:04:
0a:46:46:46:e7:b6:0e:17:44:cb:d2:2d:31:84:12:ba:49:fa:
2a:27:73:49:76:5a:42:b0:d8:c4:cd:e7:4d:c7:ff:d6:e8:89:
de:6f:cf:10:d3:0a:ed:d6:fd:ab:45:2e:b7:14:52:3e:7e:d8:
49:39:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:55 2025 by rpki-client