Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0d2cfba-c6e4-46c2-9641-f58b7a95ae28.roa
File: e0d2cfba-c6e4-46c2-9641-f58b7a95ae28.roa (raw, json)
Hash identifier: /Z5A6IPXfuzuvxNWW22bmAMS9SwDWMTC7uRs1cnmbUw=
Subject key identifier: 3F:B4:87:DD:A8:91:71:2D:B1:88:E9:CF:E1:45:CC:61:8A:0C:9F:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 238DB7E4085C7E0D1CFD464D1485BA7B3D5A2E54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0d2cfba-c6e4-46c2-9641-f58b7a95ae28.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 68.67.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8d:b7:e4:08:5c:7e:0d:1c:fd:46:4d:14:85:ba:7b:3d:5a:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=83d99a215fc538a7924e10c89477cc1afb38e865de69492aefd39a4ed037e8a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:55:f5:d5:15:39:f6:46:4a:d3:2d:be:88:
f4:e1:fa:10:42:11:89:33:4a:34:3e:df:3e:e8:fc:
1d:2b:93:1f:8b:18:95:21:f7:a2:89:5b:a7:4e:56:
8a:4e:60:36:6e:06:20:c4:c3:0d:81:9e:8e:90:cc:
a3:ce:8f:f2:bf:6f:f5:79:3e:17:3c:af:03:1c:32:
fd:f0:a8:f0:b8:dd:25:84:45:44:4e:b8:39:33:56:
ad:c2:dd:05:18:ba:05:ce:f3:fd:44:fb:e4:3f:a8:
dc:60:0b:ae:06:3e:30:f7:ab:66:a5:3e:43:03:cd:
4f:af:c9:c8:0a:2f:2c:33:d1:ae:31:7e:28:0e:44:
57:74:1e:cb:4d:82:50:5e:48:44:55:54:d6:c8:4b:
c6:a9:e6:0d:34:41:55:dd:c4:b7:15:a1:63:d1:c8:
a9:43:f7:a0:5e:ad:01:a4:b1:7d:12:4a:6f:4f:25:
68:fa:14:2a:c6:fb:d7:87:91:b8:72:5f:b6:80:2c:
5b:84:e5:44:6d:91:6f:f6:81:0e:be:fa:19:19:37:
c6:ad:3b:2e:51:f5:41:90:c6:b2:78:f8:79:f3:dc:
06:ab:2e:db:02:ea:88:55:c2:c4:81:bb:2f:37:e2:
de:7e:2c:c4:41:1f:38:ea:8c:ee:0c:c5:0b:71:26:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:87:DD:A8:91:71:2D:B1:88:E9:CF:E1:45:CC:61:8A:0C:9F:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0d2cfba-c6e4-46c2-9641-f58b7a95ae28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
68.67.224.0/20
Signature Algorithm: sha256WithRSAEncryption
70:49:ee:ea:48:e9:62:25:0c:84:91:1a:03:ba:e6:b4:87:55:
4e:a1:7a:a1:cb:64:98:9a:13:f1:6b:62:ad:01:30:cd:d1:2c:
1b:47:ef:b4:2d:54:a7:6a:76:a6:62:d2:87:e8:22:bc:a3:46:
06:54:f4:1e:3c:8c:57:d0:6e:b8:da:d7:02:78:5f:dc:01:2e:
b7:ea:ae:3a:59:8f:e3:30:a3:f3:01:4c:60:c5:ef:61:47:5f:
fa:33:74:0e:33:54:ee:71:2e:8a:bd:74:b1:03:01:f4:fa:fd:
61:14:e2:19:3b:c2:0a:94:bc:53:26:d5:5b:7f:40:5e:2b:54:
be:ba:21:27:e6:2d:8e:69:4c:cb:83:da:d7:41:2d:b4:dc:92:
5f:be:62:9f:88:fd:4b:87:31:31:c3:74:ff:39:fc:64:13:95:
35:03:a1:9d:00:59:04:72:c5:4d:c9:f6:d0:79:46:c9:0f:f3:
44:7d:7f:c1:70:ee:43:d2:10:0f:ba:c3:10:7d:13:72:94:ad:
c9:65:11:aa:fb:95:cf:62:23:65:74:d2:b1:42:a4:80:58:1d:
b7:d1:66:2f:e3:04:89:cb:00:25:06:83:bd:b4:cb:13:98:ea:
a3:ee:38:77:ff:5d:35:52:f1:c0:73:31:ba:a6:82:e6:fd:a6:
c5:65:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:29 2025 by rpki-client