Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0365a68b-c17b-4977-9811-b5e8e861bcfa.roa
File: 0365a68b-c17b-4977-9811-b5e8e861bcfa.roa (raw, json)
Hash identifier: aF/l2boPDVLc07GZ8Yv8Mhrb3HRG76pnGFnOeMTIOMw=
Subject key identifier: 31:08:3E:E5:5B:D5:86:30:89:1D:94:C3:AF:19:A6:73:C2:E5:0D:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7DAE459A6CB5E80BBC777DCE63247932EA2B5B6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0365a68b-c17b-4977-9811-b5e8e861bcfa.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 149.114.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ae:45:9a:6c:b5:e8:0b:bc:77:7d:ce:63:24:79:32:ea:2b:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=92c0088617a25d046e8653f656368c4930a31b0a2ec90596861bf179f6e05e16, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:7c:74:e1:12:ae:f1:2f:4f:25:a3:99:45:
0e:8c:e8:60:17:59:70:f2:7a:53:61:2f:48:a0:78:
9d:bd:e4:af:66:63:78:72:52:46:55:c1:0c:1d:3d:
29:94:e4:73:4e:c4:06:95:f2:7e:e3:e4:cd:17:96:
9e:79:af:05:0c:85:3d:1b:18:04:18:12:50:b9:99:
21:1a:bc:16:ef:bf:be:6d:ed:d9:8d:a7:56:bd:34:
ef:9b:d4:a6:32:36:f8:1c:0b:f8:fa:a1:33:61:86:
c7:4d:60:60:53:76:d4:6d:69:25:45:0d:5d:61:26:
c3:5c:9a:e5:e2:03:cd:73:82:03:86:2d:b6:71:0b:
81:70:04:eb:87:0c:38:5d:b5:94:46:a3:bf:a7:17:
22:90:eb:2c:95:8a:73:96:52:26:a4:d4:8c:a3:97:
43:11:31:46:ea:12:27:81:d7:18:d9:32:e3:85:81:
f8:5f:cf:4a:9a:c7:96:13:87:a0:fa:c6:53:02:f7:
d5:26:2e:46:b1:b4:cb:48:d0:f5:47:32:b8:e2:8b:
d1:2e:0a:ba:c9:1b:bd:49:66:5a:81:a1:31:e1:30:
ab:8f:f8:55:a2:d3:1f:97:52:61:d2:59:44:d8:3d:
3b:fa:6c:ac:90:df:5a:95:9c:c8:08:a5:66:e9:da:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:3E:E5:5B:D5:86:30:89:1D:94:C3:AF:19:A6:73:C2:E5:0D:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0365a68b-c17b-4977-9811-b5e8e861bcfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:29:ad:3b:18:ba:dc:2a:93:af:58:89:e2:6f:cd:af:44:72:
bc:e2:7a:18:2b:fd:76:98:3d:e7:c4:41:1e:7a:0f:85:87:98:
24:62:ba:ee:1a:92:c4:68:ed:c6:d6:71:92:ed:ee:af:67:46:
e1:56:91:64:04:6b:e3:22:6b:04:59:d5:5f:c8:b0:eb:4a:13:
13:04:8f:1b:a4:b2:52:ed:91:26:b5:9a:01:36:53:3b:43:c3:
af:51:dc:3e:7a:8d:f9:5e:3a:01:11:94:c6:7d:46:47:81:d5:
4d:c3:b4:19:5e:cf:79:14:ef:e4:1f:3b:72:6d:97:42:3d:be:
2f:01:4b:8b:a5:c7:a7:a6:12:55:ad:64:86:58:51:35:53:99:
ea:cd:cb:f5:48:fc:ae:55:78:76:cf:36:9a:5b:b0:b7:73:bf:
fb:be:e9:48:28:33:ed:6c:67:ba:6c:0e:5f:b0:20:39:de:59:
17:64:3b:c9:74:f3:86:61:18:71:3a:0a:0b:a4:8a:ae:50:36:
93:30:d7:14:55:b5:ea:c4:00:1e:0b:b4:d6:77:95:1e:6a:83:
06:96:b5:7e:d3:2a:a0:7d:70:6c:0d:09:1e:5c:45:08:9b:6c:
de:6d:5e:61:17:7b:90:b6:d4:dc:10:1b:09:da:a6:d7:9f:e1:
63:67:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:00 2025 by rpki-client