Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fee9ca2c-d7f0-4c44-8bba-032446ce2397.roa
File: fee9ca2c-d7f0-4c44-8bba-032446ce2397.roa (raw, json)
Hash identifier: 2VGLIg7N3oLJY8LiENuWOFYabABg9FiNndPBHRDc1Mo=
Subject key identifier: 55:C9:3B:AA:39:84:FE:A2:97:04:6F:7C:50:02:CF:D8:C8:99:B7:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15006B34112E6720668B7FED8B3F87A7F871A68A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fee9ca2c-d7f0-4c44-8bba-032446ce2397.roa
Signing time: Thu 02 Jan 2025 00:00:00 +0000
ROA not before: Thu 02 Jan 2025 00:00:00 +0000
ROA not after: Thu 06 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 23.91.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:6b:34:11:2e:67:20:66:8b:7f:ed:8b:3f:87:a7:f8:71:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 2 00:00:00 2025 GMT
Not After : Feb 6 23:59:59 2025 GMT
Subject: serialNumber=ba2c39047f4c169201eddf104cbf5c8d8d4a9298286d7ef6261b7c98360909c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:ea:ee:a3:9b:ef:53:23:04:c0:a6:96:70:
5e:27:0f:c5:ef:b3:7d:3f:2c:9b:cf:61:7b:58:09:
82:e9:69:6b:0e:b4:e4:97:19:83:dd:7b:49:a0:97:
65:fc:1b:fc:91:7e:67:3d:73:d9:31:aa:31:48:a7:
fd:af:e9:6b:b5:7a:7b:4d:09:77:c2:e3:3c:09:ea:
5a:aa:4c:0e:35:78:9a:2f:e5:c3:ed:4c:fe:43:94:
35:42:87:01:64:e6:f6:8c:d3:81:db:fb:02:4e:cc:
ec:a9:41:2a:e4:8a:0f:f6:19:af:a6:3d:55:e5:9e:
cf:ae:9d:37:87:9b:b7:df:3c:67:b0:03:81:93:ec:
ed:74:8e:88:b7:1d:94:ee:33:5c:25:c2:a9:f2:86:
3e:4e:bd:9b:f9:c4:ba:89:b0:0b:70:35:4d:4e:9f:
14:21:0b:f8:da:22:26:99:be:7f:c0:0d:0d:49:8b:
0e:0c:c9:c3:76:d4:b1:41:da:9b:59:49:e0:2f:98:
9d:87:3d:22:30:68:86:85:28:e1:6b:39:7e:b2:5e:
70:c8:8b:3b:9e:1a:db:8d:29:0c:02:0f:27:ba:1c:
b6:d2:31:7b:68:74:79:88:29:33:be:d6:22:90:b2:
72:44:25:d5:7b:14:a6:4a:e6:f0:5b:f7:db:ea:69:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C9:3B:AA:39:84:FE:A2:97:04:6F:7C:50:02:CF:D8:C8:99:B7:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fee9ca2c-d7f0-4c44-8bba-032446ce2397.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.0.0/19
Signature Algorithm: sha256WithRSAEncryption
31:eb:59:4e:cb:81:b1:93:83:61:25:32:31:79:6a:4b:c7:e2:
3f:40:3c:22:90:ca:a3:60:20:b5:f0:50:c9:27:a4:93:44:98:
10:da:b5:83:41:11:16:a6:d8:28:13:a8:ee:94:e9:a6:53:f5:
a6:36:7c:50:0a:71:b4:33:38:0e:ec:94:6f:dd:5a:74:9a:36:
5c:37:a8:20:52:31:fc:e6:32:d3:ed:1a:80:45:18:0f:d7:c7:
c0:30:94:92:62:42:30:83:f3:f8:5b:e9:79:ed:27:34:24:5e:
5a:f8:22:cf:e9:8e:98:3c:3b:34:da:35:03:fd:ae:1c:ca:3f:
53:eb:a8:5a:85:44:57:c5:e3:30:13:43:2d:c5:45:8c:d8:8c:
5f:ca:27:d3:ca:e3:09:fe:cd:0d:ed:cf:03:38:36:a4:a9:53:
25:73:46:e3:fc:ca:e0:c3:27:44:63:05:5b:f8:04:52:1d:bf:
de:c8:9b:8a:51:2c:40:66:8d:9f:22:25:8e:0e:88:08:4e:8d:
85:82:d4:73:7b:13:6a:85:05:ab:9b:66:3f:e3:c9:97:e8:23:
d0:00:1b:fe:fb:e3:2d:38:07:08:9b:64:12:03:d4:eb:36:f6:
56:a3:9d:1e:05:d7:ce:e2:e0:c4:64:a7:69:c7:80:5d:97:fb:
6f:87:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:56:20 2025 by rpki-client