Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168abf89-e038-42c4-902c-1baac22e0633.roa
File: 168abf89-e038-42c4-902c-1baac22e0633.roa (raw, json)
Hash identifier: Gnnxx+Tdmx64bI8cB5sqs+qcZKhOhtVlpW4ujY8saQQ=
Subject key identifier: 32:C1:87:FE:02:0E:E7:59:47:E9:19:83:9B:BF:D0:C3:2C:84:CA:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D895D7DB8DE6B352D483134E42EF7710FCE3EA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168abf89-e038-42c4-902c-1baac22e0633.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.182.236.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:89:5d:7d:b8:de:6b:35:2d:48:31:34:e4:2e:f7:71:0f:ce:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=e30f33799c96c29a24c57cd1602a92d5f453299bcbb91819aab294046cbf3413, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:49:8e:a2:89:69:6d:93:8a:ea:1a:de:0b:
8c:de:9b:68:a9:f8:a5:77:97:8c:1f:8b:3f:13:6d:
2b:f6:60:b6:ab:c5:3b:d2:3f:7f:a7:b5:79:d4:4f:
10:45:dc:ba:2a:30:95:32:59:f9:00:26:bb:9f:f0:
23:88:4f:7c:36:b6:34:d0:17:12:4e:04:99:5e:a1:
d5:91:9f:65:bb:43:b6:7a:27:d9:0b:d6:8a:d7:f8:
fe:c8:01:01:99:3e:35:b4:34:ab:42:29:a5:05:54:
e1:51:3b:ae:65:ac:7d:7e:ea:a6:ce:4c:ad:15:85:
92:d9:90:58:47:33:5a:03:50:80:f1:ac:78:8e:7b:
41:20:98:e8:a8:59:04:a8:ab:fb:14:a3:3c:76:88:
5d:5f:76:9a:c9:cf:57:85:44:a6:8a:f0:51:a6:de:
b2:68:71:8a:fe:59:9d:83:c2:23:09:bc:62:3d:68:
53:07:db:fd:25:47:86:68:47:83:72:04:91:b0:b5:
4c:fc:97:4a:b5:a2:1f:19:16:51:2c:23:12:78:40:
7c:88:6e:fa:be:57:46:7d:92:df:d6:e3:fd:61:90:
62:15:11:57:f8:92:2d:c6:42:42:dd:f5:4c:75:d0:
6a:08:a9:4b:9f:af:81:c8:f5:ab:40:8d:35:64:18:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:87:FE:02:0E:E7:59:47:E9:19:83:9B:BF:D0:C3:2C:84:CA:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/168abf89-e038-42c4-902c-1baac22e0633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.182.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ff:41:4e:3c:e7:f9:f7:44:20:11:13:f8:db:51:4a:86:6c:
b9:b7:22:2b:c1:96:64:fc:6b:cd:5d:c5:72:14:29:75:a4:a6:
6a:e1:f7:19:dd:ef:5f:51:d1:60:94:78:54:04:ae:02:74:66:
80:e1:bf:e4:2d:04:9b:69:43:4c:f5:c2:33:27:18:87:3e:36:
2c:af:44:5d:61:a4:44:f9:31:12:56:cf:06:7a:8e:3e:9d:a5:
b2:84:37:cb:44:a0:a5:90:e4:1d:92:9c:55:9a:98:ee:be:cf:
cc:96:e1:49:ed:d4:56:87:f4:0b:5e:9d:6e:e0:28:5f:ce:4d:
90:bc:73:06:d6:d3:0b:cb:01:c1:a5:ff:c3:bf:74:be:22:1c:
88:6a:11:de:ce:d5:ea:a6:64:aa:c4:21:f9:1d:73:74:ea:d5:
83:18:82:e9:f7:cf:ea:00:70:1a:78:d8:79:cc:51:32:5e:3d:
0f:b8:94:2d:0a:ca:57:1b:85:1b:47:e9:93:c8:e3:91:29:43:
f3:5f:70:e3:10:3f:69:8c:9c:3c:b5:a2:53:aa:0e:d6:68:24:
a1:f1:ea:3c:ca:60:8c:7d:53:d9:d4:34:36:43:f8:1c:bb:be:
13:06:f4:6f:64:d9:8d:82:4d:b4:6f:5f:8f:1f:f3:3d:54:70:
27:27:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:44 2025 by rpki-client