Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de314d83-8269-4a4f-a762-a2b063e9a2b2.roa
File: de314d83-8269-4a4f-a762-a2b063e9a2b2.roa (raw, json)
Hash identifier: +2i4V5YIjvFnIgM0p8SHJihehgc3UYXdA0bTvqbrKas=
Subject key identifier: C3:A2:4B:72:11:17:86:5F:8C:E1:DE:D0:0E:9B:B9:6C:FB:30:0B:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 419E1E9595241D84C3814E93869073CF13D2B7A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de314d83-8269-4a4f-a762-a2b063e9a2b2.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 198.211.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9e:1e:95:95:24:1d:84:c3:81:4e:93:86:90:73:cf:13:d2:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:4a:39:ed:2a:ba:16:9a:93:f0:10:a8:88:
4c:e0:fe:f6:b3:36:34:d1:a5:1a:3e:34:80:28:2f:
96:16:e4:0b:5c:ec:34:d8:f2:07:c3:de:25:17:8f:
3d:84:15:23:b9:a9:5d:21:b6:d1:89:1c:7c:e7:bc:
29:16:68:1a:30:b9:33:8b:80:23:5e:d2:f0:10:9d:
e6:2f:f3:c0:ec:f1:2e:4d:46:dd:1c:eb:5c:f1:b3:
8c:05:d3:d6:16:7a:f7:5f:48:60:f1:2e:51:a8:4d:
2f:7d:f9:0d:45:c2:3b:61:e7:c0:97:46:ba:c4:ec:
4d:ee:94:eb:bc:cb:40:33:f7:81:aa:3f:ea:dd:c9:
f9:35:89:7e:d6:b9:9b:fa:47:b8:95:bd:68:0b:1e:
ea:01:a6:ce:43:00:62:6e:02:47:a5:26:86:21:80:
0a:34:3e:19:bc:a3:73:e5:2c:bd:da:28:2f:d1:d3:
bf:f9:a4:37:e6:88:31:f6:a5:93:6d:87:78:34:36:
06:8e:e0:39:9b:91:4c:d8:e7:3c:9b:5c:42:69:ef:
fa:49:df:8d:06:c9:32:79:e1:01:83:44:38:0b:4e:
6a:29:84:d1:e8:f1:57:4e:81:c3:28:ab:bf:e0:c4:
8b:6c:68:e9:08:54:de:63:94:11:85:0e:9d:68:61:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:4B:72:11:17:86:5F:8C:E1:DE:D0:0E:9B:B9:6C:FB:30:0B:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de314d83-8269-4a4f-a762-a2b063e9a2b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.211.0.0/18
Signature Algorithm: sha256WithRSAEncryption
87:cc:1e:46:3b:e0:81:d2:ec:15:dc:c5:63:d1:9b:e0:1f:67:
0d:21:c3:e8:39:54:43:0d:4a:93:35:2c:bb:3a:dd:49:8a:bc:
ac:98:9b:7f:52:32:8a:3d:b7:22:2e:5a:88:b6:a4:b9:21:12:
8d:da:e0:d7:84:1c:dc:06:f7:74:89:34:80:56:4f:63:cb:b0:
99:30:70:f3:bb:b2:11:f5:6a:5c:e6:6d:58:58:80:d2:7c:64:
f6:68:92:b0:44:e9:61:b6:c1:9a:65:0b:56:50:f5:06:76:75:
1a:eb:08:28:1d:bc:2a:cb:e1:72:5d:ad:89:2e:4e:8f:4c:7f:
2e:dd:a2:7c:a1:ef:e3:c7:22:b4:2a:b1:11:b0:15:f6:4e:1d:
92:d5:d8:1e:c5:37:35:c6:fa:d2:48:3c:78:3c:46:d0:c9:a5:
b5:cb:3f:56:ce:bf:a6:50:61:a0:67:78:ee:76:29:9d:f3:a9:
51:6b:86:b0:e7:90:58:68:64:d9:69:d3:19:9d:91:82:cc:fa:
09:e2:5b:3b:37:a7:3f:90:d3:83:5d:42:20:a9:74:36:e8:8a:
ee:33:cd:50:e6:c3:72:d7:fe:27:ce:bf:97:7f:56:3e:81:e8:
15:27:b8:a3:1e:a1:0b:03:52:07:56:16:ed:00:42:04:af:9a:
ae:a2:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:53 2025 by rpki-client