Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f7df33-cc25-4dc6-87e2-34df16ed19b6.roa
File: 03f7df33-cc25-4dc6-87e2-34df16ed19b6.roa (raw, json)
Hash identifier: 0fzTprPmQHZb6iElTZUiFkz8UhtcPnOzuuFXGGKi8h8=
Subject key identifier: F9:A6:29:9F:0A:4E:E5:28:2C:0D:0F:FD:EC:4E:84:50:8F:28:93:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7B613707C3C2E481CAC89922295F0E0F9287AE16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f7df33-cc25-4dc6-87e2-34df16ed19b6.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 166.80.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:61:37:07:c3:c2:e4:81:ca:c8:99:22:29:5f:0e:0f:92:87:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=b732e5f8331a7ab63e1201b1bd538ae4ace03ae0001d4a5acac940d493e49994, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:1e:03:d2:72:e5:28:5f:2c:c8:18:4c:09:
f5:f8:0f:bb:61:aa:d2:b0:66:45:35:7a:a3:ce:55:
49:09:ea:b2:3b:6c:01:7b:de:36:98:76:7f:b8:86:
bb:8c:99:e7:f7:77:55:92:ca:5f:98:7f:2e:90:4e:
eb:4c:3f:41:aa:77:97:4d:d4:69:36:fe:ae:df:7f:
fb:89:e1:d0:23:34:12:8e:ac:47:70:48:90:fd:ba:
d0:f7:f8:68:6a:5f:d9:32:ee:a2:11:81:7d:a4:d5:
43:7c:67:2a:c4:b7:fc:64:f3:40:b0:a7:bd:bc:00:
dd:da:7e:03:be:63:7e:f9:9e:99:7c:b2:57:59:29:
08:9e:86:60:ab:08:a1:68:5f:60:ea:22:c7:8d:79:
c9:2d:07:38:25:ea:78:aa:c8:a0:f6:24:42:b7:75:
21:62:42:bf:01:35:65:b7:50:95:fe:90:ec:93:ad:
45:95:7f:d1:a0:b0:23:39:ee:b2:4b:47:28:01:ed:
58:cb:5c:b8:cc:ac:8c:b6:3c:36:74:56:97:c3:e6:
19:ae:45:ab:b6:b7:e3:80:16:da:0b:c4:87:d7:08:
bd:f5:13:f3:b6:68:ad:54:8f:e5:9c:d6:ce:4f:80:
23:34:32:ff:ad:d3:6b:94:ad:ec:4d:59:fd:e3:9c:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:29:9F:0A:4E:E5:28:2C:0D:0F:FD:EC:4E:84:50:8F:28:93:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f7df33-cc25-4dc6-87e2-34df16ed19b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:3c:c0:72:54:2a:b7:c3:d2:50:87:98:57:de:22:45:a1:fb:
52:18:2e:21:4e:00:d2:78:e3:8c:9a:3b:66:a4:0b:dd:c0:6a:
9a:c4:9c:00:6b:3c:ab:be:ce:25:05:44:8b:59:c3:91:c9:1d:
05:54:51:06:7b:6d:f9:da:88:33:b8:b2:70:15:95:48:d3:1e:
1c:62:74:da:11:a1:2d:4e:c7:42:1d:f5:5e:d8:1c:20:fb:06:
4d:23:2d:08:89:71:7d:7b:98:90:e4:7a:d5:ae:0a:7f:bf:6c:
0d:35:af:c1:90:76:1f:a3:7e:1b:a5:b4:ea:a2:ed:72:d2:69:
05:21:05:27:7d:3a:06:9d:23:05:ce:4f:04:23:01:17:74:31:
6f:fc:11:4a:51:63:c8:bc:f1:5b:a0:fa:5b:15:8b:90:6c:e6:
84:86:36:5c:a6:2e:6b:53:37:8d:fb:67:30:3b:68:dc:45:91:
a0:64:a0:9b:e2:b1:ae:63:69:4a:8d:ef:5b:b9:9b:b2:0f:2e:
e2:d1:6c:09:9d:b7:2a:a2:dd:2a:65:5b:c7:a3:c7:be:e7:6f:
32:0e:c3:0b:67:32:a2:02:5b:b0:75:d0:4e:da:a0:e0:aa:aa:
07:3f:63:c2:51:e9:8f:c5:8c:22:4d:df:23:b3:fe:d6:ec:84:
80:94:11:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:07 2025 by rpki-client