Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3572f29-c99a-4598-b84e-23c2f3a955c5.roa
File: e3572f29-c99a-4598-b84e-23c2f3a955c5.roa (raw, json)
Hash identifier: sKP7a4NmUVsn13Yg1CHnxu+4RrXjeAzlLp4gLSjslGE=
Subject key identifier: 08:B6:CE:B2:82:2A:74:6A:25:17:EB:0C:2F:77:19:E9:F1:03:C0:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69B9F18D25BC65E40796FEA6E28CF7913CC1AF15
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3572f29-c99a-4598-b84e-23c2f3a955c5.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b9:f1:8d:25:bc:65:e4:07:96:fe:a6:e2:8c:f7:91:3c:c1:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:36:4f:8f:6b:55:7a:10:69:0e:a7:88:fb:
ff:df:9d:d9:6e:19:bc:29:25:2e:3b:fa:37:e4:00:
9d:55:6e:8e:c2:ef:17:3d:68:4d:ca:43:2f:e1:0d:
05:fe:7c:e4:55:97:9b:38:43:12:0f:cb:27:e2:9e:
56:80:c8:31:87:c2:3f:ba:45:e3:08:0d:c1:36:39:
3a:37:d3:cd:ea:9e:10:47:3c:d1:46:a1:a2:33:9b:
7d:c6:ee:62:7b:6a:5d:a8:04:84:f1:c1:f8:53:03:
7f:1f:e5:fb:20:b7:e4:00:76:48:19:cf:b2:4e:15:
b3:63:b6:70:06:46:36:46:07:3a:57:40:91:33:b1:
08:0b:0a:32:7a:08:3c:ec:2e:cd:4c:ae:40:e8:8b:
42:be:b8:f1:3e:1c:95:2e:94:f4:bb:da:30:89:bc:
d6:f8:43:c6:c7:de:ab:ea:bb:5b:22:a2:ba:5d:cd:
50:0d:4d:6e:63:1f:0d:95:ac:5e:6b:e6:85:eb:2c:
f7:c5:16:3e:bc:d3:a1:08:2a:f8:dc:ea:8c:68:a6:
05:08:32:86:5b:0d:f6:be:a2:86:97:c7:60:ff:d2:
8d:c0:0f:62:7e:98:69:99:54:c8:02:e1:55:04:9a:
2c:bc:6e:e9:bc:b5:eb:32:36:fb:db:8f:bd:3c:5d:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:CE:B2:82:2A:74:6A:25:17:EB:0C:2F:77:19:E9:F1:03:C0:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3572f29-c99a-4598-b84e-23c2f3a955c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.16.0/20
Signature Algorithm: sha256WithRSAEncryption
06:53:94:6e:63:d0:24:aa:8a:0e:1a:79:e1:4e:8b:ce:8e:0a:
41:bd:fe:17:92:cb:c2:a1:11:d0:28:6a:b3:d1:af:e3:32:ca:
61:dd:c9:c3:1e:a1:a1:97:27:fe:10:aa:b5:56:9f:cd:83:92:
bf:53:f2:20:95:f3:05:f5:f8:48:fc:e2:da:5b:31:46:3b:7a:
9c:b6:42:f2:9c:c7:51:79:cb:87:72:22:f8:63:d9:e2:b5:32:
ec:13:a6:f6:2f:95:a0:c7:d8:6b:cd:da:b8:d7:19:a5:16:44:
19:ea:43:c6:68:ad:3e:27:fc:b6:90:7c:7a:83:e6:86:f6:80:
6a:96:0c:8a:20:fa:63:ee:da:96:f6:2e:8a:a6:5c:1d:04:d9:
5d:c9:80:53:cb:d0:31:82:4b:4d:b8:b2:ae:8e:e6:b7:57:6e:
4c:9b:87:03:6d:66:b8:c2:4a:3f:bd:83:3e:f3:c4:64:9c:d3:
49:d9:fa:2d:69:53:64:cb:70:ee:c5:db:bf:ce:ce:75:24:18:
53:f3:2f:89:bf:5b:cd:8b:16:a4:f7:11:26:17:f1:b1:e4:84:
28:0e:ca:2c:65:1b:69:30:21:22:f4:e3:0d:10:c6:91:9c:12:
6a:45:6a:3f:e9:26:fa:65:cd:43:8f:d7:d8:7c:6f:95:09:ac:
06:1a:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:42 2025 by rpki-client