Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccae7a8d-447f-4392-9d91-8c55dc34887b.roa
File: ccae7a8d-447f-4392-9d91-8c55dc34887b.roa (raw, json)
Hash identifier: tV3Y8MK0+m7wxKCVYBVsrck8n4ne++LCfUJs40ELs0Y=
Subject key identifier: 02:61:3A:B7:D2:D7:FF:FF:BD:E1:5F:E9:18:A4:47:6D:A2:0B:95:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 326F889E25BB71CB713F245257371CE7DE98E1E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccae7a8d-447f-4392-9d91-8c55dc34887b.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.50.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6f:88:9e:25:bb:71:cb:71:3f:24:52:57:37:1c:e7:de:98:e1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:9f:25:ba:e9:77:84:c4:3d:1c:d0:74:a6:
c8:c1:c7:aa:5f:8d:19:f1:18:12:3e:2d:c7:48:2f:
27:88:13:ed:c6:ac:e0:e6:73:15:45:f8:16:e0:b9:
1a:86:76:15:41:43:19:f1:d8:35:9e:e0:17:b2:65:
88:9b:6d:01:96:24:c8:77:43:ef:31:25:f5:50:30:
76:7d:f8:72:36:6c:15:69:81:0b:03:0c:7c:c4:1b:
dc:51:69:2c:5a:96:8b:1d:72:69:c9:b9:d8:f2:a5:
eb:a3:9c:4c:6d:84:6f:07:c8:ac:ea:26:e1:4e:b0:
c1:d1:d5:71:68:38:4a:d6:98:e2:76:b3:a2:9e:1f:
f5:01:e5:a7:0e:3d:6e:19:e7:4f:d3:a1:58:6c:48:
6b:b8:52:18:11:de:2f:c8:bc:c6:ef:b7:0d:e0:f1:
5d:c0:b1:6d:be:27:1d:38:87:07:0b:b7:0f:1c:9a:
9f:f3:ae:48:37:e1:7e:9f:73:08:43:b6:99:8f:ed:
16:1d:8a:63:57:4b:18:c1:0d:48:10:27:75:6b:f0:
fd:ec:7f:db:df:d7:42:20:51:37:ec:03:58:ee:52:
65:27:e6:7d:e7:0d:31:2f:f6:6f:d1:9f:48:30:69:
2d:09:6f:4e:f4:4d:97:ae:4d:fd:84:dd:e4:d0:dd:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:3A:B7:D2:D7:FF:FF:BD:E1:5F:E9:18:A4:47:6D:A2:0B:95:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccae7a8d-447f-4392-9d91-8c55dc34887b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:61:82:0e:9f:e2:03:3a:e7:74:55:2a:88:0c:95:52:31:f6:
c5:aa:a6:fa:35:16:92:ed:24:20:a7:eb:cf:a0:ed:b5:c8:ac:
6f:1d:39:80:f4:b9:3a:ca:a5:b5:1c:0a:55:15:05:b7:79:39:
2f:6a:da:f8:15:e9:26:d6:43:5f:43:d4:f5:17:0e:fb:07:f8:
dd:a3:73:fe:d6:f4:39:d6:4f:42:a1:fc:77:d1:2b:c0:29:dd:
6b:08:05:5e:49:3b:98:23:44:f8:dc:d8:1a:43:01:5f:79:aa:
2f:23:5b:b9:2d:ed:b0:39:89:69:a1:69:6a:f8:5b:f1:3e:68:
25:36:21:c8:c5:53:96:89:56:bc:bd:ce:9e:02:66:26:65:27:
05:1e:6b:d0:a2:05:69:d8:04:79:52:7e:6f:92:ed:f6:18:67:
4a:83:2a:f3:bc:f7:21:4f:d0:8f:ef:7c:a7:54:5d:8f:e5:bb:
02:58:7e:c3:1d:cb:c6:e8:da:09:2d:2d:33:6d:65:c8:ea:66:
97:4f:d7:a1:f3:89:1e:22:58:f7:4e:13:b9:96:ff:1c:42:c0:
fb:b4:d5:8d:65:9d:ac:91:19:24:b5:2c:3b:45:1b:fd:4f:9b:
8f:40:8a:43:ca:7a:be:ee:c7:e3:5c:e2:2f:54:fa:44:0d:72:
92:80:8a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:01 2025 by rpki-client