Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16c2c95-3fae-467c-945e-988d7ed7e01d.roa
File: d16c2c95-3fae-467c-945e-988d7ed7e01d.roa (raw, json)
Hash identifier: XWRlCq5n/7i15W5j+Oel2c0zec4bG5x68qoe/7OhNIc=
Subject key identifier: 55:4D:0E:0A:08:98:75:C6:EC:C1:A9:AE:87:4D:3A:D5:31:D3:FD:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E3B0EA43F2552104AF2F78F54F98DFDB865CAB2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16c2c95-3fae-467c-945e-988d7ed7e01d.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 14618
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3b:0e:a4:3f:25:52:10:4a:f2:f7:8f:54:f9:8d:fd:b8:65:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: serialNumber=ef39ea722297755e7877cc23e8b7c53c19162703092db099f612da0830428f28, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:66:f6:24:bf:8f:9c:ed:c7:5c:b6:a6:ef:
b9:2d:a1:84:d6:d8:07:ae:af:d0:48:d5:2b:33:eb:
60:81:5f:4a:20:95:c2:cd:a4:dd:b0:98:38:3a:d7:
7d:a1:cf:b0:26:e7:9a:5e:34:d1:ed:86:80:74:8d:
89:e9:18:c5:fb:64:c5:3a:4a:87:dd:a2:ae:32:1a:
73:b6:5a:f8:3d:9c:69:c2:a4:18:0f:4c:ff:94:12:
22:f8:47:00:43:c6:ce:c8:71:98:11:14:12:53:d4:
79:27:23:b9:c7:23:78:d7:ce:e3:c8:ee:6b:6f:77:
d5:3a:46:9e:b1:1a:c9:2d:1a:0d:fe:f0:30:c6:49:
b6:ac:e0:0a:f3:18:e8:29:90:12:95:80:08:f5:11:
51:b9:a9:45:7d:1b:5d:f5:05:72:23:cd:a3:9b:47:
63:64:eb:76:4c:e5:67:a2:d7:99:47:91:f0:3a:f2:
63:15:bd:8c:5e:f5:ce:b5:4f:6c:5a:d2:11:d3:a6:
09:b5:5d:9f:4d:84:e2:63:14:ab:a9:db:9a:be:bb:
1b:50:f7:64:f4:89:f4:2b:5d:6c:63:37:e8:25:ed:
c8:e0:4c:52:04:3f:7d:14:d0:a0:26:c6:02:e9:d2:
8c:56:b9:22:f0:44:a8:b9:61:43:97:d0:10:3a:70:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:0E:0A:08:98:75:C6:EC:C1:A9:AE:87:4D:3A:D5:31:D3:FD:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16c2c95-3fae-467c-945e-988d7ed7e01d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f0:0a:94:32:6c:db:dd:de:64:55:d5:87:23:de:96:be:fc:
f6:62:52:ee:b8:b9:3e:8a:46:d8:ff:dd:3d:03:60:67:07:66:
c3:7f:e4:68:c8:bf:0d:3d:a8:67:78:c3:b4:91:9b:fc:6f:c9:
be:8f:8b:35:48:77:b4:bd:61:34:a7:5e:d5:70:a6:6f:ee:7a:
d4:42:58:74:de:47:7d:23:94:31:88:4c:a5:7d:76:58:16:c8:
d6:57:9c:23:1a:23:0b:41:9c:dc:c4:68:bb:00:cc:10:45:02:
3d:2c:bc:fc:5a:ce:f1:c4:cb:3d:5c:02:84:05:af:08:f3:4c:
ca:73:4e:22:60:05:11:58:b9:f4:06:b8:f4:ae:03:e5:cb:95:
91:5c:70:52:69:03:50:7b:ed:42:99:f1:1c:48:3a:8b:08:86:
e7:12:0c:76:03:79:aa:b4:ea:b6:00:e5:55:7c:9f:0b:87:19:
57:98:d7:6a:47:8a:de:7c:72:8c:9a:4e:e5:e3:d1:c0:aa:b6:
d4:b6:43:24:af:3d:42:8d:a0:27:12:de:5d:b5:4e:7f:89:06:
1e:19:ad:67:06:72:10:36:10:7a:65:82:7a:47:70:67:34:a6:
a3:9e:d7:3f:72:51:de:68:7f:60:2d:72:2d:25:bb:7b:2a:3a:
40:0c:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:52 2024 by rpki-client on console-fra.rpki-client.org