Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe3b2250-6416-4bd0-8836-136078e6dbdb.roa
File: fe3b2250-6416-4bd0-8836-136078e6dbdb.roa (raw, json)
Hash identifier: XSUB/wVhXHod7fTcM+70Q9PiK0+xgYa1Dj1k95Wo0ag=
Subject key identifier: 71:94:1F:F6:CD:38:C8:A8:53:32:0A:C9:C0:AF:8C:30:A6:A4:C0:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AF9E044A30C4A7A0310152AEF7BBCE8F54D04E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe3b2250-6416-4bd0-8836-136078e6dbdb.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.198.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f9:e0:44:a3:0c:4a:7a:03:10:15:2a:ef:7b:bc:e8:f5:4d:04:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=90cc594a0853d04131af8316f696131fa908923b36e5445229fdb7d9965f6def, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:da:1b:9d:c9:c4:e9:b0:ed:fd:73:f3:b5:
46:39:d6:fa:71:4a:a5:10:79:75:04:e7:20:d5:5e:
d5:80:5b:ad:7e:09:a3:ea:44:51:d4:ec:de:1d:f7:
04:5f:bd:86:93:8f:6e:b4:33:94:6d:bf:e6:4e:3f:
72:50:b0:43:d7:10:a3:b3:f8:fc:5a:76:94:a9:7b:
67:da:57:59:77:27:4c:98:b1:ac:a5:2a:ae:35:80:
b8:b2:a1:19:cf:45:25:7d:1e:35:9c:7c:94:88:fd:
bd:f2:76:d6:b7:4e:91:2e:02:8d:61:4e:74:60:4a:
db:2e:e8:f9:bd:b8:35:d3:43:47:2c:91:e0:f0:0f:
84:b9:fd:3f:51:71:5d:5a:f0:f2:55:e6:bd:63:65:
9c:57:6c:cf:e3:aa:25:e8:11:63:e9:a5:77:b5:eb:
6b:d8:06:92:99:56:39:4c:fd:1a:ca:0e:94:84:62:
bc:53:f1:3b:2e:f9:f5:8e:0b:23:d9:37:29:be:d0:
3f:ed:30:d3:6f:0f:41:90:38:09:cb:dd:38:28:67:
1f:35:c9:39:66:92:9f:73:8b:79:d6:2f:29:f3:a9:
2c:da:f7:f3:32:1b:f9:1b:37:d5:9c:c8:9e:10:56:
35:ae:71:e4:57:90:5d:a5:62:8e:74:38:81:e7:75:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:94:1F:F6:CD:38:C8:A8:53:32:0A:C9:C0:AF:8C:30:A6:A4:C0:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe3b2250-6416-4bd0-8836-136078e6dbdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.198.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:53:ce:c3:e3:2f:cf:c4:a7:04:67:8b:37:5a:18:ce:25:f1:
6b:90:f3:a6:1a:78:1d:5d:59:91:3f:86:76:10:5c:d1:23:c6:
8a:10:27:14:23:dc:f0:58:e3:b8:41:4a:85:7f:65:a7:d0:9a:
3d:f1:f0:2e:5c:31:5e:f8:e2:3c:51:fe:3f:8f:70:22:2b:71:
8c:7b:f2:ed:62:b5:f7:78:d7:97:88:1c:eb:cc:52:aa:74:02:
a5:e5:ff:6c:63:7e:2f:e4:c0:83:c9:bc:cb:84:86:ab:0b:51:
ff:69:e3:a7:39:17:73:da:d5:fb:de:d7:1d:45:8c:b1:64:7a:
d4:58:b2:31:af:64:c0:aa:f9:3f:51:38:a6:ce:79:ba:63:b2:
c4:10:d3:14:c4:db:75:9d:17:a6:dd:2e:70:d2:7d:17:7b:06:
fe:50:df:a8:c0:65:65:29:41:6c:d4:85:a3:2c:27:e3:cf:79:
8e:34:c8:45:fb:cc:7a:c5:51:38:bb:b8:3f:c8:ad:15:19:9e:
ab:cc:d5:8c:91:63:4e:7a:bf:e4:58:7a:e8:03:22:55:83:77:
92:16:4c:26:6f:d2:da:ec:43:34:99:28:05:b7:c4:cc:8a:af:
48:98:b8:0b:bb:e6:2f:7e:0c:57:93:6e:84:7b:8e:47:c2:7b:
49:66:94:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:49 2025 by rpki-client