Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c980e733-b595-402a-8c0b-b8b1c1042f3c.roa
File: c980e733-b595-402a-8c0b-b8b1c1042f3c.roa (raw, json)
Hash identifier: vIKfDA3rKzID+jifW/Ty5KEUJsJkL5lxgCnV5EyqO7o=
Subject key identifier: D3:00:0F:09:46:6F:ED:39:85:96:8B:7C:38:40:5C:EC:F1:E6:E1:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3E63F0D12B40FA858F94802F7E7DDB30023673A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c980e733-b595-402a-8c0b-b8b1c1042f3c.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:63:f0:d1:2b:40:fa:85:8f:94:80:2f:7e:7d:db:30:02:36:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:8a:b9:86:0f:ec:09:cc:f2:1a:4a:0a:90:
69:ce:48:6f:e8:bb:8d:5b:18:d2:2d:26:00:52:4d:
46:1c:15:f9:3e:d9:f3:a2:7e:f1:5b:6e:5f:32:b6:
0b:ac:33:c6:03:fb:97:40:32:e1:d1:79:9f:17:14:
06:75:65:41:8b:43:12:7b:9f:b6:3b:8e:a1:39:ea:
c4:6a:71:40:ba:a5:b6:7e:85:5b:85:45:f1:37:f4:
15:91:ed:e7:37:be:70:72:46:0d:d3:b2:52:48:2a:
06:ee:ee:1a:76:f0:fa:94:26:86:ca:d0:f1:b0:43:
5a:12:ea:d5:ae:d4:88:51:62:cb:11:72:89:3e:63:
a2:01:d3:cc:11:00:4b:80:34:2d:7a:eb:f4:ef:ad:
32:1b:cc:3d:66:a0:33:b7:62:f8:77:26:8d:d1:0e:
61:a2:f5:4b:f2:4e:6a:a2:3c:21:8f:1d:af:32:58:
f0:e8:5a:c2:4e:ec:c5:cb:2d:6b:62:54:78:45:81:
5d:62:dc:bf:79:e9:da:78:2c:2f:25:cd:3f:c1:99:
ac:da:42:80:5d:7a:cb:60:0d:3a:50:03:b2:0e:2d:
76:26:c6:b8:55:e6:f8:b7:72:04:58:d5:f3:c4:c5:
05:79:2c:9d:73:27:16:72:97:99:87:56:13:93:42:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:0F:09:46:6F:ED:39:85:96:8B:7C:38:40:5C:EC:F1:E6:E1:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c980e733-b595-402a-8c0b-b8b1c1042f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.206.0/23
Signature Algorithm: sha256WithRSAEncryption
02:a3:95:fb:a2:21:ff:07:c7:39:e9:5d:93:78:81:5c:68:cc:
c6:cf:31:d9:d7:03:39:e9:82:bd:ba:77:9f:a9:47:43:3a:9a:
63:33:21:f8:58:77:f9:11:4f:eb:4f:bf:43:9e:bd:95:4b:6e:
54:0e:c2:c5:75:97:1a:e0:ef:ba:f6:32:01:25:14:e1:20:48:
e5:35:ae:41:8b:5e:b1:45:29:9d:f0:29:85:b3:06:9e:7a:cf:
d3:63:6b:04:df:d5:56:b7:4d:ad:0c:be:81:76:81:a2:20:dc:
b7:c9:0a:74:6f:04:a7:04:6b:e5:49:9c:5b:59:f9:bd:5d:77:
ef:30:bb:f6:bd:70:27:a3:19:5e:f5:14:0b:e2:18:74:c2:24:
4e:7e:61:7f:8f:48:cb:a6:ff:76:f7:c8:16:62:3d:69:22:4e:
02:d2:98:7a:6f:26:81:78:27:eb:62:72:34:ab:79:a5:8c:b4:
bb:a3:9a:70:84:40:02:c3:4a:0f:a4:bc:fe:c1:a7:73:ec:95:
36:c0:42:85:e3:41:1a:03:21:76:b3:29:3f:c7:54:a5:b6:2a:
9e:2c:38:07:59:d6:0f:db:dd:b4:bf:20:ab:aa:a7:56:0c:2b:
63:90:c4:49:2c:cd:66:e6:4a:2f:63:d7:a6:55:a0:e5:e2:6c:
01:a7:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:16 2025 by rpki-client