Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa
File: f2aef8ac-4838-4d14-b193-6512977f0074.roa (raw, json)
Hash identifier: JhzSHpdikxpPFZ7MAUhqRAxZZ9vzxZvUhUnp5HaeWo0=
Subject key identifier: 10:83:6A:E2:19:3D:85:6C:39:83:47:F6:C2:72:B1:67:57:77:BA:D5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 623EFFF929B1A6F5BC5B0DFCCD921D2FC17FF04E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa
Signing time: Fri 29 Nov 2024 00:00:00 +0000
ROA not before: Fri 29 Nov 2024 00:00:00 +0000
ROA not after: Fri 03 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3e:ff:f9:29:b1:a6:f5:bc:5b:0d:fc:cd:92:1d:2f:c1:7f:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 29 00:00:00 2024 GMT
Not After : Jan 3 23:59:59 2025 GMT
Subject: serialNumber=ca2de065230a4f4db96be2a4a169571bc98e7f0df1e9202afbad9f28847a35ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:3d:a3:6c:33:b6:69:a6:7d:fd:c9:a1:00:
c9:af:66:af:3f:0f:56:1a:01:22:68:79:1a:e1:ad:
b0:f8:90:69:9f:59:a2:46:aa:01:0a:47:7e:b7:89:
73:ed:3b:e3:1f:37:dc:77:8d:be:41:49:4e:99:6d:
c7:f8:c7:11:62:8f:c4:f5:0d:81:89:2b:fb:5f:36:
08:a1:8b:f3:6a:00:17:cb:de:83:8c:d0:de:a1:42:
ed:6d:b2:df:66:c3:8d:e0:40:63:5e:1a:0e:ab:d6:
03:3a:9a:47:16:19:27:c9:e2:0a:31:d5:67:e1:7a:
f1:d5:3d:7d:d1:7c:60:ba:b0:a9:fc:b7:f5:24:fd:
70:80:36:59:5a:f4:35:cf:34:fd:b9:10:8d:f1:f3:
e6:c4:8e:1d:03:1a:e4:fd:6e:0e:8a:12:c9:e6:c7:
3e:b2:77:e7:bf:5e:12:76:c8:eb:55:26:95:09:ab:
29:95:5a:fd:ee:53:e2:cf:cc:1a:f1:d6:e7:26:48:
9a:d5:1f:9f:30:d8:93:69:b5:02:53:9c:fa:18:b8:
7a:16:17:3a:1b:dd:30:68:e9:65:13:1e:d5:6a:b5:
8c:a3:61:1d:d9:9f:0a:d4:9c:5a:82:8a:94:9f:37:
10:ff:45:bf:73:9b:81:d4:8a:26:81:73:9e:42:85:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:6A:E2:19:3D:85:6C:39:83:47:F6:C2:72:B1:67:57:77:BA:D5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2aef8ac-4838-4d14-b193-6512977f0074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
Signature Algorithm: sha256WithRSAEncryption
09:17:64:a7:f9:e3:79:66:3a:24:ba:c6:f5:39:ae:bc:54:f7:
fa:a3:ed:da:70:36:8c:fc:b9:cd:e4:84:59:67:1c:35:6b:b9:
8e:ef:fc:38:32:cc:5e:c6:d2:da:0a:85:23:cd:d6:cb:64:6d:
88:e1:4e:b3:4b:d2:da:ab:e5:be:13:23:51:66:3d:30:ab:aa:
0e:27:98:c3:84:87:f5:1c:6e:36:f7:a6:bb:f6:43:0f:13:6c:
ab:c9:1a:1d:69:66:83:6a:43:57:df:55:f9:41:d7:cc:b0:bb:
3a:8b:05:06:d5:5c:7f:12:12:d2:d1:77:0c:ef:a2:0c:6e:e6:
7b:1d:f3:7c:7a:1a:3d:c9:ec:d0:b0:b1:b3:1f:a3:fa:da:70:
df:1b:a9:ae:87:4a:08:ce:b5:71:de:f9:d0:cb:06:26:b4:9e:
8a:17:1a:ed:19:a9:fa:cb:17:a5:4c:a6:25:9f:c1:cc:a3:48:
a5:65:b9:a6:6b:e9:d8:33:66:de:fa:e8:c7:bd:c0:03:ac:95:
c8:68:a9:38:af:6b:eb:f6:82:04:5c:f3:36:8c:58:b4:45:51:
79:28:4f:f3:e4:4f:b9:34:44:2a:6e:91:49:d3:71:77:53:26:
38:3f:34:78:25:c7:c3:82:eb:1f:d2:54:d3:0e:31:8b:8b:46:
32:87:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:50 2025 by rpki-client