Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf58273c-7386-4763-b991-86046a4d81ea.roa
File: cf58273c-7386-4763-b991-86046a4d81ea.roa (raw, json)
Hash identifier: h/xm8qaxdsEgOwWbwm9PNgNmWa3PUdNGBxsJ965E0Ys=
Subject key identifier: AE:B1:9B:DD:89:BC:A3:2E:04:88:98:C4:41:18:22:E2:74:82:1D:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3104B5A13BFE9A1182C7B89339162AB6F90B5869
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf58273c-7386-4763-b991-86046a4d81ea.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 150.102.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:04:b5:a1:3b:fe:9a:11:82:c7:b8:93:39:16:2a:b6:f9:0b:58:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:89:ee:a0:57:4d:73:27:1e:27:d1:c0:56:
14:7c:af:1f:fc:64:fb:8a:21:38:ad:58:17:3f:1c:
8b:b8:c5:4b:1d:47:4a:16:e6:3f:e2:a4:85:12:94:
8e:4f:00:e4:ea:8b:cb:6c:b6:f2:6f:61:9c:49:17:
b7:e8:10:57:9f:16:e0:35:64:ef:3a:ae:0a:22:e5:
cb:27:3e:c3:ce:4a:ef:f8:35:ad:03:95:aa:34:c6:
a2:6f:6a:66:80:de:6a:7e:c2:c5:09:2f:73:57:78:
d9:e8:e0:57:2e:00:bd:85:b8:78:b0:28:16:6a:d5:
0a:32:a1:84:92:8f:b7:c1:11:c8:cf:15:39:e7:4f:
ac:e8:43:5e:61:2f:82:23:f2:a3:96:85:0f:b7:34:
ed:77:f8:dd:23:79:2d:bf:4d:0f:98:b1:e0:e3:69:
d7:db:7f:5d:95:69:59:d8:e2:54:53:05:0a:e2:e4:
10:7e:a1:eb:bd:a7:d2:f2:83:5b:55:e7:42:a9:f6:
22:3d:dd:fa:45:5f:ca:3e:6d:9b:dc:65:af:24:1a:
3f:da:fd:d0:96:55:d6:19:63:09:fe:c2:25:af:0b:
66:0b:b4:74:b2:da:3a:de:1f:7f:bc:49:30:58:54:
c2:72:27:0b:08:ae:47:89:07:87:a8:9b:32:89:cf:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:9B:DD:89:BC:A3:2E:04:88:98:C4:41:18:22:E2:74:82:1D:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf58273c-7386-4763-b991-86046a4d81ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:74:c0:0f:4c:bc:b0:27:0b:e7:cb:28:ab:26:96:7f:f3:89:
cf:42:dc:b0:51:23:f3:31:24:f6:9e:e8:a7:3c:f7:f3:62:8c:
c1:e7:e6:d2:22:75:f2:bc:2f:e9:4e:5b:a8:22:3a:d5:84:2b:
9d:8f:0d:e2:5a:dc:ed:f0:aa:b0:71:d4:5f:4f:a5:13:0b:5c:
cd:a5:5f:1e:dc:af:c3:cc:ff:34:f7:d0:36:94:9e:aa:d9:2a:
11:66:16:e4:bf:62:8f:2c:18:1b:e0:3a:67:9d:ae:f8:2e:c3:
3a:4e:78:54:b0:a2:da:62:12:87:07:66:43:94:03:da:33:95:
de:1c:9a:eb:42:b2:7a:f6:89:3c:e1:d0:83:f7:30:09:05:d1:
f6:0f:22:95:ee:00:e7:c3:2d:7b:51:4e:03:5a:bb:18:7d:07:
f1:99:e1:b2:10:1f:5c:e1:97:3f:1a:c8:0b:6d:71:0e:02:28:
a3:d0:9f:c9:8d:cc:ae:1a:0d:cd:09:5b:e8:b1:4e:db:92:32:
07:4a:5f:82:49:74:72:12:77:89:3f:55:2d:0b:3f:39:54:a4:
03:b6:ed:12:07:2a:36:03:15:f6:23:da:44:1e:96:03:b1:23:
6b:cf:e1:88:b2:0b:8b:38:30:31:a5:0b:67:82:f9:2c:ff:bb:
0d:2d:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:55 2025 by rpki-client