Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f436e6dc-827c-4db4-9f18-b9875017a0da.roa
File: f436e6dc-827c-4db4-9f18-b9875017a0da.roa (raw, json)
Hash identifier: VddcpPWmhwvt2+AQclTvv+zO8LQ+VAiqru0pDu0t4i8=
Subject key identifier: 2E:4C:B0:2B:8C:67:A7:7B:70:5E:06:BA:B0:B6:4D:7A:07:5D:EB:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6BE21DC44FA0EB64441ECDF88DC543227DA209B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f436e6dc-827c-4db4-9f18-b9875017a0da.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 157.52.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e2:1d:c4:4f:a0:eb:64:44:1e:cd:f8:8d:c5:43:22:7d:a2:09:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=c1013c1cc7f0f15c0534b91c69b5028a988e725420b2b420d5c054a47632c200, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:f5:d2:9e:97:d1:4c:da:cd:63:f6:47:e2:
47:a4:85:2d:d9:6e:c7:30:b7:da:94:47:29:f3:b8:
3b:21:c4:e4:99:8f:49:58:46:82:db:73:6e:79:c6:
cf:74:9c:f0:7c:eb:39:4d:10:f4:7b:d4:fb:59:70:
cb:8c:64:89:fa:56:15:a0:4e:e5:ee:47:2c:ae:66:
e0:08:06:a6:73:32:e8:8b:98:76:b8:7d:bb:73:6b:
f5:39:5e:ee:ce:70:f4:a5:ec:c5:9b:b6:2d:bd:26:
64:f5:e0:19:75:48:92:e6:ed:a7:ba:13:df:cc:e6:
91:fe:34:00:4c:51:73:6b:d3:45:7e:68:61:33:58:
71:21:67:36:9e:50:2b:27:44:c0:c4:fa:55:7f:b3:
6d:35:eb:31:18:9a:35:38:62:01:4e:42:c3:32:b9:
5a:28:7e:34:55:5d:ac:15:51:0e:ba:c9:1f:78:1e:
cf:d2:24:b6:4d:30:b8:fb:5f:77:27:ba:bc:6f:24:
62:8a:13:c3:92:66:c3:b1:9c:9c:3f:5d:9e:f5:98:
fa:e7:0a:b3:9b:5e:1f:91:c2:45:68:3b:3d:45:07:
87:f7:19:da:fe:ee:e5:78:2e:66:11:b0:5b:1a:cf:
1d:f4:0c:27:44:b2:50:69:41:3e:b8:33:f9:2c:b0:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:B0:2B:8C:67:A7:7B:70:5E:06:BA:B0:B6:4D:7A:07:5D:EB:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f436e6dc-827c-4db4-9f18-b9875017a0da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.52.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c6:90:85:01:2c:89:c6:b3:f6:bc:51:48:e1:be:00:fa:ce:9f:
ef:7f:80:4f:c5:fb:0b:cf:07:66:cb:2b:3f:6f:31:9b:78:55:
c4:32:35:88:ec:24:31:8c:41:4c:ed:8b:ba:3b:36:f3:ad:a8:
4e:42:df:91:22:1b:65:08:13:53:8c:64:5d:01:ef:01:04:9f:
64:07:1e:7a:11:06:17:ed:6d:aa:3d:4f:51:2b:a9:1d:15:4b:
2f:0e:2d:16:ba:ee:cd:31:9f:04:4e:49:ef:8b:1b:8c:96:8b:
f1:70:db:ee:3f:b5:45:2d:dd:06:62:36:0f:1d:bf:4d:47:00:
5b:aa:65:80:36:3e:75:46:e5:e7:c3:64:e6:fa:be:ae:ee:2d:
ca:8e:c4:84:33:92:42:54:aa:52:9c:f0:00:3d:4a:af:4f:07:
9b:5c:c6:b0:06:c9:40:20:91:a0:b8:5b:ad:01:63:21:fb:cd:
49:ef:d7:ae:4b:b5:74:d5:cf:8a:9a:51:5d:1f:e7:f7:64:8a:
1f:69:f4:44:78:8b:8f:50:c3:7a:e8:14:5a:67:c0:e1:01:24:
46:44:1a:d1:b0:22:7f:35:cc:ff:c2:96:e1:e4:7c:f5:5f:b0:
81:54:8d:a4:6e:e3:83:71:94:b9:a6:1f:fd:29:47:c8:ac:28:
78:54:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:40:41 2025 by rpki-client