Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8a1b1e7-bd6a-40f7-b716-918b55addd81.roa
File: e8a1b1e7-bd6a-40f7-b716-918b55addd81.roa (raw, json)
Hash identifier: Q7XvpSgY9V7b3BLhnWpLk4nyScH2Qh8r0HzRBcHBh/U=
Subject key identifier: 6E:FB:0E:71:1B:BD:87:1E:2B:C1:77:BF:75:D6:29:7A:90:9F:CD:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A809DB6C1A8877863045FB272FD663200E9DF4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8a1b1e7-bd6a-40f7-b716-918b55addd81.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:80:9d:b6:c1:a8:87:78:63:04:5f:b2:72:fd:66:32:00:e9:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:e7:33:e4:cd:62:11:93:71:59:b9:ac:07:
37:2d:1e:f3:04:06:d5:8d:9e:5f:51:64:47:90:73:
46:cd:b9:1b:73:c8:30:93:fd:3e:04:54:06:36:34:
41:ab:01:77:88:9a:ef:28:58:47:b4:87:1c:76:31:
56:16:5f:78:c3:60:82:3f:06:9b:30:9a:56:7b:7c:
c8:43:87:33:eb:4d:8c:ee:1a:43:d4:60:9e:dc:26:
6a:75:47:ff:97:d6:37:f8:f9:8e:c4:79:0a:50:40:
23:8b:e6:be:a9:16:63:c1:93:12:4e:82:c2:37:69:
01:e1:f3:3a:6b:c8:93:c8:9c:01:62:58:41:df:a6:
05:54:06:de:4a:b8:35:06:28:49:c9:9d:9e:40:40:
88:70:f5:70:b9:7b:96:09:eb:d4:8a:a4:d7:a0:a2:
3c:36:9a:43:fa:69:82:4c:a7:64:3f:a9:af:c9:80:
b4:5a:ac:31:d3:49:f8:13:68:0a:f8:85:83:01:a3:
d1:a9:09:36:88:6d:5a:bf:14:5e:ce:78:ed:f2:20:
d2:6e:10:c1:86:54:36:ab:65:f1:10:e9:6b:39:5c:
6f:74:c7:62:c4:17:47:37:db:13:bd:a7:72:76:9c:
71:8a:d1:1b:62:e6:76:8c:7f:70:e8:a8:de:8c:87:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:0E:71:1B:BD:87:1E:2B:C1:77:BF:75:D6:29:7A:90:9F:CD:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8a1b1e7-bd6a-40f7-b716-918b55addd81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
Signature Algorithm: sha256WithRSAEncryption
42:e3:34:5a:c3:cb:df:d1:df:d3:d5:0c:5b:7c:df:01:c2:83:
fa:eb:31:c7:84:f9:2f:64:9d:65:06:29:94:df:99:82:b9:0f:
e9:0b:3a:c2:56:7b:74:07:25:5c:d4:f6:cf:ee:22:a2:5d:81:
be:19:1a:ad:8c:ad:4a:76:61:12:e9:de:c0:7e:8e:4f:1f:b7:
16:ec:f8:33:d2:38:af:b5:ab:ea:7f:68:de:bb:9c:6f:cd:3d:
96:4c:af:eb:3c:1e:b5:f7:5c:ea:13:7b:e0:bc:61:91:88:da:
49:03:0d:be:76:0d:0c:f8:f9:4a:53:ed:bc:12:b3:99:97:2f:
18:71:60:18:dd:14:a4:35:74:7a:d8:59:80:58:7d:4f:8c:27:
ae:a2:68:3c:cb:2e:94:32:bb:2e:75:0a:8b:cf:a9:db:b5:3c:
9e:f4:a1:6b:f5:a9:16:ee:ff:fc:05:f3:a0:89:f0:96:48:f2:
cf:ae:d3:ab:8d:aa:40:50:61:87:3e:e8:d3:15:7b:c8:7e:71:
5f:97:a0:84:e6:da:33:c3:ec:ba:ee:1c:1c:a0:6e:7a:7b:59:
f3:74:09:84:3d:bc:9e:0c:17:7a:52:3e:49:4e:f7:cb:c1:b4:
73:91:71:4c:95:10:af:b5:69:26:81:31:d1:cc:8a:d0:bd:cb:
90:51:d1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:44 2025 by rpki-client