Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b8d5817-ac84-4f94-b3f3-90a2cc5f85cd.roa
File: 0b8d5817-ac84-4f94-b3f3-90a2cc5f85cd.roa (raw, json)
Hash identifier: se62LzolxI41pKefzPVv7DbzrR0rwjyZW5AyMcDlVQw=
Subject key identifier: 1F:5C:3A:63:14:BB:FC:49:12:9B:FF:E4:B8:AC:5C:1A:1A:D8:87:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 779A68F50CAD2D8544B5E5069770A8D486A678E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b8d5817-ac84-4f94-b3f3-90a2cc5f85cd.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 173.83.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9a:68:f5:0c:ad:2d:85:44:b5:e5:06:97:70:a8:d4:86:a6:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=52eb51a8a4e5dda1b9f2a5564addd8f4b9582679876fa06f615d9cf03ece20e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:e7:dc:be:c0:f5:2d:43:dd:2a:a4:eb:d9:
20:21:e8:8c:a1:ed:30:f7:4f:f1:bc:4b:b1:e5:78:
3d:88:57:4b:fa:c0:74:7f:d2:fc:89:a7:13:bf:bb:
20:a6:17:38:05:bd:fb:04:a1:da:4f:47:0c:21:da:
cf:12:ca:fb:2c:ba:a9:92:17:b6:6c:5b:89:70:c6:
e5:d1:ec:da:a9:bf:ec:16:b2:03:0c:97:db:67:f9:
dc:4d:7c:53:75:24:75:72:a1:69:92:75:88:61:cb:
04:2c:70:b2:64:5e:f5:d8:6d:dd:7e:fd:68:e9:c1:
b5:f4:5c:2d:92:18:b1:a9:6a:ff:7a:7c:21:2a:91:
59:d3:28:7a:ba:a4:ea:db:0a:ee:06:64:73:b7:e0:
90:fa:ba:c8:2e:0c:a1:8f:8a:b1:ed:c4:2e:df:78:
77:4f:d8:b5:90:f1:e0:de:fb:33:57:3f:87:47:f3:
fe:cc:c6:65:6c:94:d1:70:43:d4:dd:5f:01:bf:8b:
c8:fb:3d:7b:c3:7a:79:3a:22:e9:20:8a:c4:b4:03:
f8:34:ad:e0:18:88:db:64:04:cc:2a:31:2d:6b:42:
a4:e9:cf:d9:a6:4a:c0:98:b4:eb:62:09:96:92:77:
76:68:3f:fa:0d:4d:40:fb:2a:43:82:15:9e:e7:b6:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:3A:63:14:BB:FC:49:12:9B:FF:E4:B8:AC:5C:1A:1A:D8:87:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b8d5817-ac84-4f94-b3f3-90a2cc5f85cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.217.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8f:39:38:28:0e:dc:3a:aa:77:c1:78:b3:a4:b3:67:71:1f:
75:ec:bd:ee:10:5b:6e:92:31:1a:4a:0f:01:f0:bf:a3:1e:65:
f8:69:31:9b:ee:e1:0e:6b:c1:d9:fe:5d:68:4a:1f:58:a7:69:
46:2f:f5:1c:ef:b4:0e:92:a1:b1:f4:2a:3e:0e:3d:a9:ee:c0:
2b:dc:35:d1:a9:88:7c:fc:be:51:45:f5:29:53:87:03:86:37:
63:41:13:9a:a8:aa:45:62:bd:c1:b3:72:5d:db:94:c1:6a:c4:
11:17:c2:84:4d:fd:55:da:77:cd:03:12:80:dd:3a:76:11:08:
89:c4:78:4d:dd:6e:89:8a:9c:b8:85:95:08:d0:c3:e0:7d:37:
3a:b6:af:50:4b:ad:ba:a2:5d:96:e8:7c:f9:ff:70:8d:20:85:
35:f9:20:3b:b6:95:15:aa:42:81:04:1d:be:28:1c:54:c6:1e:
3f:4e:84:cc:50:58:fa:c2:b9:cc:f9:cd:b5:08:df:8d:1a:3e:
5f:b3:f0:7c:a6:55:ce:78:7a:c7:9b:94:a1:43:63:11:0b:e4:
08:d1:80:29:05:62:75:9d:a0:4b:1b:b1:f3:3c:c9:c0:2b:57:
ae:49:4c:ab:ce:69:2f:c5:f3:5a:b5:3c:da:c8:00:36:a1:dc:
c2:a2:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:52 2025 by rpki-client