Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d2f66e-65b4-4ba5-b4ef-353ec4b978ca.roa
File: f5d2f66e-65b4-4ba5-b4ef-353ec4b978ca.roa (raw, json)
Hash identifier: p28d/yUe3W/2uECcDYkPwTGdOVGlWvARJSgLIn7xWAY=
Subject key identifier: D0:9C:2F:BB:5D:D4:67:F2:B6:BD:D1:35:F2:87:26:3E:FD:76:6E:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A3EBFD915DFC60736BDC5AD03FF23AE95A98660
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d2f66e-65b4-4ba5-b4ef-353ec4b978ca.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 207.234.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3e:bf:d9:15:df:c6:07:36:bd:c5:ad:03:ff:23:ae:95:a9:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:19:be:74:1b:89:c0:39:48:ea:cc:29:e2:
c6:20:59:f7:ed:7a:9c:0b:10:f3:79:b2:58:36:95:
c5:e1:52:0f:b6:5b:5b:02:8d:93:49:5e:ff:0c:29:
53:c6:ab:44:47:17:d1:e5:36:49:3a:91:30:b9:71:
50:8b:5d:0b:cc:0a:44:bc:09:70:d7:c5:98:0e:93:
d4:ec:9c:e6:f6:0b:6d:88:24:b9:a1:65:5b:c6:01:
b0:22:4c:b6:7a:13:bb:57:cd:d7:e0:8e:f6:f8:bb:
60:15:e4:2c:91:45:7f:a7:9f:3f:0f:4d:aa:cc:59:
33:9a:d2:53:2c:12:75:1c:b6:0a:32:ce:a0:d9:20:
80:81:20:6e:48:89:c5:20:94:43:2a:d6:bf:1b:a2:
de:e2:16:b4:a6:04:d6:0c:d4:f1:ec:39:2f:6b:8c:
85:13:bf:8e:38:84:ec:29:02:0f:cb:d8:61:6e:6c:
f6:eb:bc:72:7d:52:76:b6:54:6b:75:d7:bb:af:51:
72:1e:bb:02:0b:73:87:2f:a5:9c:99:74:2b:26:a6:
eb:ad:23:55:a8:3d:61:12:09:75:4a:c2:75:41:0f:
b6:a2:83:06:a9:25:f0:ac:44:7d:a9:52:b3:dd:f6:
da:c8:53:b0:d3:ae:1a:cd:03:b7:09:8a:94:49:1c:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:2F:BB:5D:D4:67:F2:B6:BD:D1:35:F2:87:26:3E:FD:76:6E:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d2f66e-65b4-4ba5-b4ef-353ec4b978ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.234.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5e:56:3e:6f:95:a1:a2:c3:25:2b:c5:45:c9:e7:f7:4d:cf:6d:
08:b6:12:2f:97:87:d8:fe:3a:04:da:ca:85:50:df:e9:58:a6:
6b:1b:94:fa:2b:d3:25:07:60:88:ed:95:4b:74:c8:fd:40:f7:
8e:de:71:fd:1e:22:59:c4:b8:18:15:13:e9:fc:75:57:c7:45:
a4:f1:c0:6b:0a:01:c8:93:b1:7a:2a:df:b2:39:55:76:c3:35:
a6:65:f1:ad:5b:43:b7:0c:90:bc:cb:48:c3:d8:a3:e3:2c:26:
fb:50:ed:d6:62:f3:e0:f3:15:df:cf:07:ee:00:9d:0c:dd:98:
e4:77:e0:85:2a:37:c6:87:3e:78:3a:d5:a5:86:e6:b9:2f:db:
e9:e8:c9:da:d9:69:58:01:29:b7:ab:a0:79:87:16:a0:06:a3:
29:58:e2:5a:7f:7e:3d:ce:b4:0d:02:31:02:3a:eb:b1:23:36:
57:d7:9c:e2:5e:97:04:e7:19:9d:0f:06:cf:23:b5:33:2d:50:
6c:2c:86:d6:50:89:0d:af:66:b6:83:e8:be:cd:38:67:58:b3:
13:b1:8d:8a:d5:88:59:50:df:c4:c4:f2:ed:c0:74:0b:fc:35:
3c:01:ed:ea:44:26:a1:d4:81:0f:4a:13:23:58:e9:bb:10:fd:
9f:64:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:59 2025 by rpki-client