Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbdc94dc-127b-4bf3-b95d-8c49b5698c70.roa
File: dbdc94dc-127b-4bf3-b95d-8c49b5698c70.roa (raw, json)
Hash identifier: +ZXB36jIHLQE6WomviTEON+OHCWJAfqCphUq410/+K4=
Subject key identifier: 54:03:E4:5F:3C:5C:E4:ED:57:8A:8C:D5:2D:34:AF:EA:C7:39:72:80
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 79F2BC44DD664A7B198F34BEE34D39461572E026
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbdc94dc-127b-4bf3-b95d-8c49b5698c70.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 206.55.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f2:bc:44:dd:66:4a:7b:19:8f:34:be:e3:4d:39:46:15:72:e0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:4d:b6:14:ad:da:95:a3:40:92:8a:25:29:
d6:c6:aa:e8:3d:26:ca:ec:9d:81:05:cd:64:66:40:
da:81:62:01:f2:e7:d3:e4:a2:38:4a:3f:ac:7f:a6:
63:f9:f7:91:86:af:df:69:7c:64:d4:2b:22:e8:03:
34:ed:bd:54:f2:3e:89:50:64:23:86:0e:a6:d4:48:
4c:45:8b:fd:5b:dc:76:97:48:f6:04:76:89:06:49:
f8:b9:40:1d:93:29:5b:67:94:d5:36:18:89:43:74:
59:f6:03:6f:24:aa:24:3b:84:35:99:c6:ab:7a:14:
ac:2d:d2:36:1a:aa:e8:c3:27:76:19:66:79:69:cd:
e9:43:8f:77:df:7f:dc:46:5f:42:e7:86:26:99:f0:
78:1e:a1:99:22:1c:54:a4:d8:33:f8:02:63:43:97:
8b:5e:89:be:ce:58:2a:85:43:25:b6:f7:2d:12:79:
94:5b:2b:d5:11:e3:54:46:bb:35:f8:83:99:ec:48:
d9:2b:b4:66:38:85:e8:cc:d0:c6:5c:38:cc:71:81:
8a:49:72:22:17:ce:bd:0a:86:7e:27:99:5b:a6:5c:
85:4e:5b:db:6d:0a:38:3d:ba:66:56:c6:86:fb:c0:
13:8f:be:7b:c7:98:d3:0e:ba:60:e6:ea:d9:bb:ee:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:E4:5F:3C:5C:E4:ED:57:8A:8C:D5:2D:34:AF:EA:C7:39:72:80
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dbdc94dc-127b-4bf3-b95d-8c49b5698c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.55.128.0/19
Signature Algorithm: sha256WithRSAEncryption
28:dd:8e:89:60:38:7d:87:43:eb:e1:99:20:2a:b9:50:f9:43:
7c:d5:82:4e:ba:39:09:11:49:f7:fe:28:ec:08:23:bc:57:04:
a5:c5:81:89:ed:7c:96:28:98:07:77:5b:7d:79:4c:db:ba:b8:
c6:3d:db:9c:27:27:03:d9:c9:e5:f9:9d:c9:8b:ef:d0:a4:d4:
3c:fc:ca:6b:3b:f9:73:de:89:e1:57:64:86:ab:5e:bd:c0:5d:
4b:78:d4:4e:de:fd:8c:38:8e:6e:66:62:78:58:a3:da:bf:1e:
44:7a:43:f3:ba:90:eb:13:6c:df:78:2d:54:00:86:46:b1:7e:
ca:56:35:b0:4b:60:50:d2:0f:33:4b:d1:b8:38:3f:51:66:cc:
9a:b6:e3:de:75:e4:7a:b4:7e:9c:00:b0:6e:e0:e3:92:62:e5:
2c:ea:b3:da:1d:ca:7c:d3:5c:6f:ca:ad:af:8a:e2:a1:a9:c6:
d9:ec:65:32:bb:11:1d:eb:23:82:5e:be:7f:f2:fd:5d:7f:fa:
91:81:55:45:29:3c:d6:aa:17:0d:fb:a1:91:e9:8f:0a:f8:df:
47:6c:fd:c4:d1:21:9e:f4:c4:93:ff:5e:ca:08:48:a7:3e:ba:
c9:31:c4:78:19:f1:c9:1f:d8:73:44:8e:13:2d:4a:72:80:bc:
2d:75:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:07 2025 by rpki-client