Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe593050-be31-454d-a256-37ddc590b1ff.roa
File: fe593050-be31-454d-a256-37ddc590b1ff.roa (raw, json)
Hash identifier: Yv+zWOtJQB4IcQScZwnw4IgP6SDOzU8vdTjvTBGbWXM=
Subject key identifier: A8:51:05:4C:47:2A:19:37:68:95:B9:E9:65:D0:B8:59:8C:8B:4E:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BA17E7B731E55271CA1812686F9977C77212AA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe593050-be31-454d-a256-37ddc590b1ff.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 43.226.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a1:7e:7b:73:1e:55:27:1c:a1:81:26:86:f9:97:7c:77:21:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:de:7c:74:ca:44:ab:a4:d6:0e:35:24:70:
a2:a4:3a:e3:f7:a8:63:35:37:d2:cc:b9:b4:aa:e8:
0a:aa:c4:1a:d5:c3:6c:82:3e:02:5c:25:fa:b9:b8:
7b:af:9c:93:d7:17:ed:f6:30:a9:7e:05:29:2a:b6:
83:a8:8e:94:35:4e:0d:3b:12:e9:6e:31:4c:44:5d:
17:0e:2f:ec:23:52:fb:e0:fb:84:67:f3:d5:a6:57:
3d:2b:2b:26:4d:c4:37:c1:13:76:94:7d:4f:99:cb:
c1:9a:c1:fb:76:11:25:34:42:76:c7:09:1b:9a:70:
9e:40:ed:01:3a:2b:58:1e:de:74:14:bb:80:c6:c7:
f8:40:3f:2c:7f:2a:52:d1:cb:10:43:22:90:41:31:
38:ab:42:ff:3b:bf:3f:f5:bd:32:68:b0:76:d5:5d:
c0:56:d6:d8:9f:1e:49:c5:fe:4f:11:cc:f1:f4:df:
0a:5e:ff:3a:3c:34:f4:b2:22:e1:fa:d7:0b:d0:a2:
28:95:6e:95:70:7a:c0:19:8c:bb:73:9e:48:2d:c1:
14:97:79:0d:e5:d4:17:bb:93:bf:bc:fe:5b:0c:96:
28:a4:0e:bc:e8:51:80:aa:f4:8b:48:4f:d1:05:98:
8d:2c:67:cd:42:e1:b7:4b:04:84:cc:a6:5c:a7:1f:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:05:4C:47:2A:19:37:68:95:B9:E9:65:D0:B8:59:8C:8B:4E:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe593050-be31-454d-a256-37ddc590b1ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.24.0/22
Signature Algorithm: sha256WithRSAEncryption
62:d8:e3:81:dc:c6:37:ed:35:9c:ad:68:6f:0e:fe:23:ff:9b:
e9:73:a9:1f:9d:90:9f:b5:4e:91:26:cc:fb:44:3b:b4:a7:75:
fd:a7:cd:7c:dc:7b:9b:39:f0:32:3a:34:e7:21:64:f1:a3:6a:
77:89:71:18:2a:ad:1c:f7:fb:67:bb:2c:a6:e7:5f:b0:4c:6e:
e5:17:3e:85:13:ef:26:9f:5a:5c:ef:54:6d:6c:40:e9:d8:fc:
72:17:5c:0b:e1:75:69:1e:21:5d:93:74:ba:ef:94:1d:af:0e:
4b:4a:e7:6e:e9:37:62:e2:f8:a1:35:fb:35:bd:95:ff:58:d8:
19:1a:66:a7:20:88:6e:b7:47:15:14:b6:a0:88:73:e5:39:3a:
d6:45:a7:49:8b:12:a8:11:09:8b:06:bb:84:a8:dc:85:27:58:
a7:8a:e6:59:47:02:12:cd:d0:84:86:c0:c0:87:a4:a7:0e:de:
ff:53:2d:b3:c2:01:a5:3d:71:cb:f0:1a:d3:b3:e3:e9:37:98:
78:bd:21:1f:e6:72:44:fd:36:b4:a5:b8:54:42:ae:cf:fa:29:
8e:56:eb:07:d0:c4:50:77:a7:90:66:bc:b0:77:75:39:44:9d:
51:af:e4:b2:c8:d3:2d:6e:8a:07:0e:58:7b:75:f4:52:5f:be:
3e:16:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:29 2025 by rpki-client