Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4a9ce28-5638-4960-8fb2-02c0f1c0599b.roa
File: f4a9ce28-5638-4960-8fb2-02c0f1c0599b.roa (raw, json)
Hash identifier: Ps8Z9fGcP6lDOJN5HCuQy11O+pSovIwb48tfxbTJoTI=
Subject key identifier: 64:78:01:33:FD:38:89:50:24:5B:DA:3F:89:22:38:62:6D:4F:A0:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 084DF2B59C13CA4E0EE76593BE341E2A7F4D3F25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4a9ce28-5638-4960-8fb2-02c0f1c0599b.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.50.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4d:f2:b5:9c:13:ca:4e:0e:e7:65:93:be:34:1e:2a:7f:4d:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a5:ac:b7:76:f1:e8:84:06:53:78:86:eb:62:
05:7f:ee:3d:b3:c6:dc:34:25:2e:b0:3d:78:f4:bd:
c4:bf:4c:1b:88:ad:d2:1a:dc:09:b1:de:1f:3a:71:
74:58:d4:16:07:c3:ee:ef:80:0d:f6:5f:6d:28:97:
6d:4a:e2:64:7f:e2:3a:4a:4c:1e:d1:b6:26:76:d2:
47:b2:47:bf:48:2d:14:b9:29:36:1e:29:78:91:b2:
cc:4a:8c:6f:74:93:7b:5a:4e:e2:71:cf:6b:61:b0:
22:be:2d:ab:b0:4a:da:2d:06:c8:0a:22:15:54:f4:
4a:a8:f3:3d:c5:a1:b5:42:2b:d0:fb:31:2b:a9:9c:
44:45:95:fa:95:97:56:b5:47:c2:4a:94:50:94:10:
8d:f1:13:7b:4c:29:ed:2b:69:da:dc:8a:24:a1:b4:
a4:1d:8f:67:b9:20:2c:d0:46:e0:9b:8b:3d:0e:2b:
d0:f0:b0:cb:77:9f:70:f3:a3:64:3c:e8:e2:85:34:
79:e6:d2:aa:1f:25:ef:a4:15:34:db:f6:59:fa:35:
8a:3b:7f:e6:b8:3e:35:c8:98:d0:51:db:bf:4b:49:
24:15:77:1c:40:a4:3e:8a:ba:66:33:c8:97:36:27:
ac:5d:97:a1:72:ae:78:15:7b:21:29:b0:fa:0f:32:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:01:33:FD:38:89:50:24:5B:DA:3F:89:22:38:62:6D:4F:A0:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4a9ce28-5638-4960-8fb2-02c0f1c0599b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:36:a6:18:9a:00:4d:b8:fe:38:fd:02:5c:ae:f4:61:1f:18:
69:fd:89:5f:e7:61:f8:bd:9f:79:8e:c7:3b:ad:3c:49:92:14:
a6:d2:fe:bd:ef:ab:67:08:9d:a5:ba:9b:00:19:ac:1a:00:3a:
64:45:32:36:27:57:b1:5b:7a:a5:76:0f:6b:62:d5:86:e2:df:
2a:ba:f2:54:7c:85:f3:ed:39:19:eb:fa:4f:97:79:cd:42:0a:
60:03:a6:da:e8:94:8a:48:3a:66:0a:72:a0:a5:b1:49:4c:ee:
43:e6:c6:17:64:18:b2:05:5c:14:bb:4d:f2:9d:c3:b7:e9:7f:
50:27:bc:ea:a4:9f:dd:fc:f1:55:9e:9b:16:f3:ad:4d:47:d5:
50:90:46:bf:90:c9:bf:ed:dc:1f:b8:c9:6f:73:53:91:07:ff:
55:bd:3f:6e:80:d2:20:5e:74:15:c5:d7:81:bc:a6:df:17:0f:
3c:72:02:1b:3c:3a:e9:12:1c:d9:f8:82:7f:17:bb:2e:2a:8b:
31:53:01:e2:9a:bb:b3:53:d1:13:6e:18:ef:ff:57:58:31:a4:
0b:d8:2a:95:4f:cd:06:66:1d:58:36:a9:92:35:93:51:15:e7:
42:1a:cb:98:e5:e6:a3:e3:08:4f:ba:14:75:83:94:4c:94:d9:
19:68:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:08 2025 by rpki-client