Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d8c4bc-9970-4ae7-9feb-26601162014a.roa
File: d6d8c4bc-9970-4ae7-9feb-26601162014a.roa (raw, json)
Hash identifier: wessq6bZh7zEYZMfPNWYVD+4OrkzVMJ61Tnw7b36aw4=
Subject key identifier: 97:D3:94:44:0D:18:75:71:4C:40:28:46:79:E6:2F:71:3F:24:F8:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65E0E6A399FDDDBF9FC0D4FC9B636453D284A9B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d8c4bc-9970-4ae7-9feb-26601162014a.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 149.98.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e0:e6:a3:99:fd:dd:bf:9f:c0:d4:fc:9b:63:64:53:d2:84:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=dbd92472621f68679da6e025feef547bdb6b4bf3b057115ae165f94973bc3594, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:0e:75:5e:c7:90:d8:ca:c4:00:1d:80:bc:
33:01:66:f8:14:cf:6b:5a:16:31:87:95:6a:0e:ae:
3c:33:87:79:a4:b2:f5:e5:5e:15:d2:09:7c:4b:d9:
07:e7:6f:5b:20:9c:10:5b:18:96:53:66:6e:00:8e:
5c:6f:ae:89:2b:a8:0a:c9:90:56:8c:1b:b0:98:fa:
ff:28:ab:0f:d8:4d:99:64:15:b9:30:53:2d:c9:65:
b0:de:b6:56:d8:04:69:34:5e:99:1a:72:5b:7b:63:
8c:33:68:36:4f:4f:43:9b:c8:8c:23:ae:4c:95:71:
58:4e:40:c3:ae:33:38:4c:8e:f9:d2:33:8e:46:94:
52:d0:45:4e:ec:82:41:9a:f0:5b:7f:46:6a:07:64:
95:53:ed:7b:ba:82:33:1d:df:44:c4:e7:5f:7d:56:
92:38:36:b7:4a:f1:b3:19:cc:59:55:7b:17:b3:0e:
bd:cc:a5:f9:a3:24:88:62:5a:62:4d:ae:ab:04:11:
33:c1:e9:fe:77:b8:b5:ea:b0:5f:5b:90:01:93:a1:
53:9a:78:88:85:3a:e9:3d:a0:ab:6d:e9:c2:0c:28:
96:2b:1f:57:8d:ab:e1:85:5e:5d:b0:9c:ac:67:27:
35:d6:eb:60:2f:15:dd:91:fe:f0:21:ff:03:56:d9:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:94:44:0D:18:75:71:4C:40:28:46:79:E6:2F:71:3F:24:F8:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d8c4bc-9970-4ae7-9feb-26601162014a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:10:2f:6d:89:8f:c2:c3:6c:43:a2:21:51:75:25:aa:5d:35:
60:ee:da:da:22:59:69:28:3f:b2:76:e5:e6:ab:b9:8e:b1:b0:
43:fc:ae:cf:fb:d5:0d:2f:03:3c:2f:35:68:dd:bc:56:d8:96:
9f:d5:ad:21:69:78:e3:4e:7c:f1:18:e9:27:f1:a3:f1:ef:09:
42:df:f0:f1:80:86:62:30:18:c9:49:a1:37:e5:8f:ba:95:0d:
69:b3:c4:b4:a3:70:88:35:ca:b4:44:6a:51:27:85:b0:3b:7c:
8b:3a:f6:c5:07:1b:8b:ce:8c:6a:1e:ce:c6:17:51:72:bc:93:
99:fd:ae:ab:7a:ae:44:b4:46:b9:47:a2:12:cf:22:a5:e6:0c:
c0:2f:c8:dd:2d:9e:d7:1b:16:ea:fb:a0:46:1e:dd:d5:30:e3:
dd:fe:1b:a2:bc:1a:f0:86:b7:e9:ab:00:cc:5e:44:e0:85:50:
42:75:f3:40:e7:0c:04:89:4c:32:dc:85:bf:cf:df:c7:8c:02:
7a:4f:84:0f:ff:cd:1b:39:56:60:65:1b:ec:dc:0e:3b:e1:89:
23:6b:e0:f2:07:37:56:a0:43:51:e3:fd:d2:44:9b:03:7c:91:
76:52:77:cf:ea:7e:2e:e5:b3:14:d3:6d:c4:17:84:24:aa:43:
22:42:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:42 2025 by rpki-client