Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3147a83-429a-43e2-a736-d32b8497dae2.roa
File: e3147a83-429a-43e2-a736-d32b8497dae2.roa (raw, json)
Hash identifier: hUFQIN8teItbOdNLOWZnVflffS9Iw+ONmRE5X9XwHSc=
Subject key identifier: 14:B1:53:30:90:BC:C3:AD:EF:6D:13:57:AC:E3:81:87:C0:71:5D:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40F82FD7089214C34BFF0CC63E2266DD2E41D848
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3147a83-429a-43e2-a736-d32b8497dae2.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 143.206.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f8:2f:d7:08:92:14:c3:4b:ff:0c:c6:3e:22:66:dd:2e:41:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=0c68da7325ac30c71d314baf2a798f451167fb2f811cc213d823567d028dad83, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:98:b2:7a:ba:95:93:44:e9:67:ff:ea:43:
c2:54:bf:25:e8:ef:e3:f0:71:fd:f5:cd:dd:64:b7:
7f:cb:84:ff:2d:99:ab:9f:fd:22:68:fd:fb:40:24:
40:e2:d8:92:e4:96:1d:5f:2a:37:fa:5d:dc:53:6d:
7c:f3:f7:79:d9:b5:40:d4:2c:85:7b:ec:29:29:b8:
75:62:85:fc:c5:8a:71:c7:3c:2c:ed:56:e7:74:10:
c5:ca:03:11:fc:28:d9:9d:7a:63:be:f3:f1:ec:f1:
99:4c:b5:29:26:20:9e:d7:16:e7:72:11:44:b9:4c:
2c:b0:93:fb:f6:c9:d3:2d:32:c5:f1:7e:28:24:12:
f7:f4:03:fa:14:65:38:3b:f4:00:04:0f:56:80:a2:
d6:64:8d:a6:a0:fe:0e:16:09:0e:be:c2:bc:29:63:
d3:e2:e8:a2:f3:6b:59:a5:47:29:68:7d:60:f2:37:
8c:c7:3b:dc:50:a8:de:77:3d:2f:ed:f3:f3:d3:73:
20:28:56:4c:2e:4f:b6:ff:87:93:bc:2a:20:48:1a:
5a:b9:0f:ca:34:39:8c:5b:33:b9:0f:c9:dc:75:7a:
60:fc:e0:f7:b3:b8:1d:6d:19:b5:84:7b:10:c2:55:
6b:ca:64:a1:95:32:e2:d3:6b:3d:14:00:c6:f3:31:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:53:30:90:BC:C3:AD:EF:6D:13:57:AC:E3:81:87:C0:71:5D:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3147a83-429a-43e2-a736-d32b8497dae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:d7:d1:67:e4:a3:a5:57:5f:2f:27:1e:9d:e6:ce:41:a2:9c:
3f:44:e1:fc:1a:b7:f6:b8:fb:2e:0b:20:32:ba:a2:14:ea:b3:
cf:0e:62:20:5d:0a:ee:15:80:66:ed:44:26:31:e3:25:ae:ab:
c2:a4:9b:44:ff:71:f6:59:ae:62:b8:15:87:b3:a2:9a:8e:df:
83:2f:ce:5a:b1:7e:6b:99:b0:7a:04:f6:32:64:3e:c2:c0:d1:
d1:d9:90:8b:4b:c4:e8:e4:a1:81:c1:09:83:42:24:af:b9:63:
b3:bf:0f:4e:52:5c:a4:65:95:3d:21:02:37:21:93:03:62:3e:
6b:dc:85:8e:9a:96:51:8d:1f:e1:de:0f:89:0f:a5:51:b4:4f:
05:d4:27:e9:ac:82:5d:5a:ac:e0:ec:f3:19:83:87:09:96:06:
65:24:cb:8c:eb:83:99:a4:36:f1:05:85:09:42:14:91:c4:00:
f3:fd:36:59:9b:1f:d4:9b:71:23:04:fc:ed:03:04:49:80:33:
af:6d:33:cd:27:c4:6a:72:6c:77:9c:88:e5:71:c9:f2:a4:0d:
37:9b:9e:57:10:a1:be:a8:a7:cc:a9:6e:fb:fa:7c:62:e9:98:
41:9e:92:99:ef:36:2d:3d:bb:82:54:6b:2f:78:8b:15:59:79:
d6:8b:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:28 2025 by rpki-client