Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1664ba39-024a-4eef-b6e1-2aab892c297b.roa
File: 1664ba39-024a-4eef-b6e1-2aab892c297b.roa (raw, json)
Hash identifier: r7SCVgNADqRc6u6MoR4mbe01XXB/2LXHzbWbdk62W7Q=
Subject key identifier: 4F:34:38:6E:33:01:12:C0:51:D2:42:CA:15:62:2C:CD:0C:2D:29:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1532D151686C2B2CE72BF927B6C14D994649DDBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1664ba39-024a-4eef-b6e1-2aab892c297b.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 44.192.0.0/10 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:32:d1:51:68:6c:2b:2c:e7:2b:f9:27:b6:c1:4d:99:46:49:dd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=80b00ce21f0e7316afe3c471517a8b3ffb72eaa02ace75398c36b7e665eb960b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:68:be:b7:a5:72:32:73:1a:44:5c:5f:0f:
4d:01:cf:22:ac:fb:79:d8:80:87:43:fb:37:95:5d:
be:3d:e4:7f:70:60:e2:f6:db:78:8b:d3:22:10:c4:
44:af:92:e7:a1:3a:96:2e:0a:9a:ce:86:e9:8c:39:
1c:a5:30:09:e8:6f:35:f2:8c:64:65:4d:6e:9e:bd:
e0:8b:d5:1c:98:8d:98:4d:78:3a:d4:f0:8d:9b:6a:
36:f7:d9:8c:97:3a:f9:46:fa:6f:92:5c:8b:02:ec:
17:b3:e8:02:02:4c:a1:46:ed:bb:43:5a:47:75:fe:
ae:0a:8f:7e:82:d1:7f:77:19:a1:62:ae:ad:80:95:
13:7f:e8:86:6a:1f:47:f2:3d:72:db:36:08:86:9e:
c8:2a:91:b6:f1:89:6e:8a:c8:5a:45:5f:3a:71:f7:
44:32:0e:19:14:6e:be:f0:33:08:ae:6c:a3:ae:2d:
ad:47:c1:01:1b:05:27:7f:1b:04:2c:1f:4c:90:da:
a5:8a:8d:e5:e6:c6:55:0d:39:e9:bc:b5:f8:4d:da:
b4:ad:ab:36:5c:3f:bd:58:1c:ce:56:82:86:09:e6:
4f:dd:34:31:04:42:a3:dd:fb:16:51:32:e7:7f:44:
40:3e:1a:78:04:ea:1e:86:3b:b7:19:ea:32:de:fb:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:38:6E:33:01:12:C0:51:D2:42:CA:15:62:2C:CD:0C:2D:29:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1664ba39-024a-4eef-b6e1-2aab892c297b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.192.0.0/10
Signature Algorithm: sha256WithRSAEncryption
b7:0a:ac:49:3e:8b:c8:d4:cb:66:d0:7a:35:c2:57:da:7e:5d:
f5:c2:d3:82:3c:c1:10:55:2b:e6:ea:31:2a:ae:61:42:50:6e:
d9:37:0f:a7:58:63:79:b8:d7:b7:32:57:aa:07:dd:72:62:ba:
cb:a6:5d:8f:04:20:e4:8a:53:b0:69:a4:7c:26:5c:1f:6e:8a:
65:cb:61:60:8d:e5:f4:3a:99:80:1c:5b:48:23:11:2a:93:09:
a7:3b:00:64:1d:79:b5:b3:d6:97:da:cf:6c:bc:aa:47:20:31:
0c:38:a6:40:9a:26:42:41:ed:ae:a2:e8:d6:c6:db:06:73:d1:
b1:f8:60:66:92:b4:de:15:56:48:d8:f4:69:d0:a3:b4:b2:ac:
08:05:fe:31:5e:ca:5a:a2:4e:14:ea:a7:0f:e5:51:a8:25:fd:
c3:db:29:a2:d6:95:1a:27:6e:fb:2f:39:0d:1d:be:cb:43:46:
d9:eb:39:38:3b:d8:5e:99:1d:5b:2f:18:64:aa:a8:74:4b:25:
a1:6d:29:28:6e:c2:53:d9:b9:cc:d8:c7:9b:86:81:2b:22:ce:
f8:14:2e:02:bb:06:0e:87:8f:d1:26:3b:9e:05:80:03:0b:75:
f4:31:f6:b5:2a:de:9e:c9:a2:19:88:44:08:94:f0:f0:c0:e8:
11:b0:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:24 2025 by rpki-client