Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2d321f7-cc29-41af-bdf7-6ea9cfec7605.roa
File: d2d321f7-cc29-41af-bdf7-6ea9cfec7605.roa (raw, json)
Hash identifier: YK3lrV9hXBYssjS/5qod0xxHgNnnPvWHBzZP98LALho=
Subject key identifier: 66:56:F5:F0:E6:63:37:85:95:9A:AD:DB:36:80:8D:BE:2C:3A:A1:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04D1508E3BC2A2AFE6A09D37C0F9E37A04E6E6CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2d321f7-cc29-41af-bdf7-6ea9cfec7605.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 13.134.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d1:50:8e:3b:c2:a2:af:e6:a0:9d:37:c0:f9:e3:7a:04:e6:e6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: serialNumber=bb4dbb7928aa4c9e3b0c6faf247d9dc27507718a51b9ea4bbaab3804b7d47e39, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:60:b5:3e:65:96:3d:1d:2a:ad:6a:bf:9d:
7f:ca:44:e7:17:10:44:8a:39:31:65:0d:a4:53:4d:
2d:24:80:fd:3b:1e:a3:49:d7:53:50:a0:5a:73:5e:
ef:a3:5b:ca:d3:a5:37:2d:54:09:b1:27:d3:11:f6:
10:f5:92:dd:85:d0:da:73:b0:1a:45:99:67:34:ba:
77:c8:c1:3a:86:9d:82:9f:c2:52:a1:a3:37:c1:20:
f9:e0:67:82:97:e0:89:2b:82:11:20:80:01:26:54:
0b:21:63:f1:e0:10:94:49:ff:0c:0d:23:81:d5:88:
e9:2c:ea:3a:87:5b:0d:1a:6e:8b:e0:e1:56:ca:5f:
23:34:4b:4f:94:80:a8:14:b3:25:6f:86:98:24:b7:
7f:5d:48:8d:25:34:9b:69:34:b8:e0:4f:78:8e:f8:
b0:43:1b:93:f6:aa:6a:de:0d:a5:fe:4f:f7:a8:7a:
6c:77:b5:a1:e0:cb:bd:c4:e7:60:57:6a:c2:0a:d5:
f2:c4:b0:3f:b2:2b:2b:fe:23:d3:a0:9f:62:f5:6f:
52:ec:7e:f0:2f:56:9c:75:d2:bf:f6:2f:71:9c:1a:
23:b8:cc:6d:2d:9d:23:d9:14:7f:b2:42:c0:b5:90:
f0:c1:a0:14:b4:7b:a9:4e:3a:fb:c6:c4:39:fa:f8:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:F5:F0:E6:63:37:85:95:9A:AD:DB:36:80:8D:BE:2C:3A:A1:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2d321f7-cc29-41af-bdf7-6ea9cfec7605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.134.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c5:44:78:a0:30:f4:92:48:fd:71:7d:13:b6:71:c6:18:5a:4d:
45:68:dc:fd:d1:34:95:7a:a5:7b:97:3b:0d:bd:0c:56:b8:b7:
89:f8:7b:d1:03:a4:be:a1:2c:20:05:83:cf:34:35:d1:07:66:
74:28:04:63:72:f1:a4:5c:1b:35:8a:66:d9:cc:2b:54:9f:74:
91:af:a8:61:78:94:bb:28:86:54:dd:51:b3:ab:19:d1:ec:dd:
09:66:bb:5f:b5:47:7c:f7:ed:f9:b2:0e:00:35:5d:f7:89:5b:
cf:7c:cf:a5:c4:c0:6f:c6:94:19:da:1e:dc:ce:ef:31:7c:a9:
da:85:ac:f8:d5:98:bc:14:18:41:30:86:f4:5c:99:3d:e8:80:
af:cf:2f:4d:3d:f3:d5:65:35:88:bd:51:73:f1:27:91:ab:42:
cd:51:bc:7d:5c:9c:b9:79:e3:07:43:ca:d1:ad:39:63:6d:e9:
10:e2:64:51:82:03:16:61:1d:93:df:88:be:f8:4e:25:b7:af:
30:d5:0e:77:40:8f:59:09:a7:f8:fb:68:dc:0f:21:64:60:e9:
4e:e5:bb:bf:4f:2d:60:80:97:6f:c9:d0:22:ce:3f:4f:ce:59:
ba:3b:3b:f3:69:ea:a1:c6:33:fe:15:09:74:1d:c8:4e:2a:5c:
e4:35:41:41
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBNFQjjvCoq/moJ03wPnjegTm5s0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMTMwMDAwMDAwWhcNMjUwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjRkYmI3OTI4YWE0YzllM2IwYzZmYWYyNDdkOWRjMjc1
MDc3MThhNTFiOWVhNGJiYWFiMzgwNGI3ZDQ3ZTM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv62C1PmWWPR0qrWq/nX/KROcXEESKOTFlDaRTTS0kgP07
HqNJ11NQoFpzXu+jW8rTpTctVAmxJ9MR9hD1kt2F0NpzsBpFmWc0unfIwTqGnYKf
wlKhozfBIPngZ4KX4IkrghEggAEmVAshY/HgEJRJ/wwNI4HViOks6jqHWw0abovg
4VbKXyM0S0+UgKgUsyVvhpgkt39dSI0lNJtpNLjgT3iO+LBDG5P2qmreDaX+T/eo
emx3taHgy73E52BXasIK1fLEsD+yKyv+I9Ogn2L1b1LsfvAvVpx10r/2L3GcGiO4
zG0tnSPZFH+yQsC1kPDBoBS0e6lOOvvGxDn6+OGvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUZlb18OZjN4WVmq3bNoCNviw6oSgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QyZDMyMWY3LWNjMjktNDFhZi1iZGY3LTZlYTljZmVjNzYwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwENhjANBgkqhkiG9w0BAQsFAAOCAQEAxUR4oDD0kkj9cX0TtnHGGFpNRWjc
/dE0lXqle5c7Db0MVri3ifh70QOkvqEsIAWDzzQ10QdmdCgEY3LxpFwbNYpm2cwr
VJ90ka+oYXiUuyiGVN1Rs6sZ0ezdCWa7X7VHfPft+bIOADVd94lbz3zPpcTAb8aU
Gdoe3M7vMXyp2oWs+NWYvBQYQTCG9FyZPeiAr88vTT3z1WU1iL1Rc/EnkatCzVG8
fVycuXnjB0PK0a05Y23pEOJkUYIDFmEdk9+IvvhOJbevMNUOd0CPWQmn+Pto3A8h
ZGDpTuW7v08tYICXb8nQIs4/T85Zujs782nqocYz/hUJdB3ITipc5DVBQQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:46:40 2025 by rpki-client