Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfd04874-89fc-4c6e-95fe-ad17b0d1fbf9.roa
File: dfd04874-89fc-4c6e-95fe-ad17b0d1fbf9.roa (raw, json)
Hash identifier: mWyj2uSfLNtSXFNJpFsFPp3+B4TtVne5T/Yv3hYYKSE=
Subject key identifier: 22:33:A1:53:44:50:B0:5A:3D:39:01:9C:98:46:2B:A0:20:24:6A:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DE774281A50F738C598DC5E6DA1AE25DC4520
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfd04874-89fc-4c6e-95fe-ad17b0d1fbf9.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.49.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e7:74:28:1a:50:f7:38:c5:98:dc:5e:6d:a1:ae:25:dc:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=2ab227989ad847a779218a30d02360bdeebe96e1224590e9db68e723c7a526f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:62:10:b3:e3:c1:da:2e:4d:e3:8b:16:64:
e7:5e:02:45:5b:cd:45:15:0b:d6:e6:e7:bd:e7:37:
8c:d7:62:e3:23:c4:98:bd:ba:8b:39:a4:ad:d2:ea:
ae:bb:ef:fc:41:4a:6f:60:4e:59:7f:08:01:47:a1:
b7:68:ac:ba:fe:38:ba:62:bc:c5:e1:64:56:04:6a:
25:9e:ec:f3:c7:6c:9d:cc:c4:12:f9:71:c7:c7:80:
09:8b:71:a4:89:ce:a3:c6:f4:74:7c:50:f7:32:e2:
47:2b:e9:0f:4c:50:e5:72:13:67:50:34:33:da:95:
15:de:30:23:60:ff:b0:67:e1:86:0c:1a:77:12:f1:
53:a0:82:9a:52:eb:fc:21:8a:9e:1e:18:05:32:d6:
7c:59:ab:9a:52:ac:d2:66:d5:76:28:fb:e2:c7:e4:
d4:c6:97:be:d2:0f:66:60:de:21:e5:dc:dd:cc:61:
52:31:af:41:90:04:66:ea:e3:32:33:5f:09:55:6f:
3d:39:9f:8c:5a:ed:29:af:6c:dc:b7:1c:41:3d:4e:
46:72:58:59:7b:dc:70:14:dc:b6:29:13:6f:fc:15:
ce:1e:24:b2:30:21:bb:5c:3e:89:cf:4b:6b:36:7b:
a1:de:32:7d:0b:37:c1:09:bf:09:35:9b:d3:5a:43:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:A1:53:44:50:B0:5A:3D:39:01:9C:98:46:2B:A0:20:24:6A:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfd04874-89fc-4c6e-95fe-ad17b0d1fbf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.49.64.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:d6:e0:bb:d2:89:ae:b7:f5:9b:36:cb:8b:26:fe:b4:a0:11:
55:ab:46:e3:d7:8a:62:fb:ab:20:6b:c9:2c:2f:e8:44:60:9d:
5e:56:b4:ea:62:64:8d:c8:59:bc:25:d3:d6:1a:5a:64:9f:25:
08:78:41:37:df:b2:9f:b0:f9:1b:dd:78:e3:1b:0b:2f:9d:fa:
b1:8e:de:73:e7:62:19:db:b0:03:4e:76:5e:6a:f5:30:67:18:
fa:16:0c:2a:00:95:bf:5d:48:22:76:55:3b:cf:ee:30:9d:24:
a1:49:fe:7f:f0:0d:27:8b:72:59:bc:06:a0:7f:1b:3d:53:ee:
07:a0:6b:54:4c:8e:2d:31:4b:62:ef:40:4e:17:41:ac:57:08:
e6:fb:e4:1c:15:f0:27:10:ab:8e:df:a1:cd:b3:08:c0:74:9d:
12:f7:7c:66:c2:d9:1c:8d:d0:08:e7:5a:68:8f:24:c2:ae:b0:
99:84:1b:50:e1:7e:d8:16:7d:4e:c0:e8:e2:b5:cb:1c:cd:c8:
86:e8:bd:d2:ec:6f:03:01:59:fa:8f:48:30:3b:e2:bb:e8:55:
61:b9:86:d9:86:d7:e1:99:ba:94:60:27:03:39:f7:98:28:03:
b8:1c:ec:4a:54:b6:d7:95:bd:b8:44:12:85:0b:23:9a:77:65:
a3:84:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:46 2025 by rpki-client