Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284ad28e-3144-41fb-8e1d-d86af31216cb.roa
File: 284ad28e-3144-41fb-8e1d-d86af31216cb.roa (raw, json)
Hash identifier: QFdFGXXY9MWK+XXGfiOWm6uVvSUp18xwqPZAVJR6D7k=
Subject key identifier: 2C:1A:58:FD:23:8D:1D:DB:E3:5C:70:A8:2E:A2:C2:59:92:97:A3:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EACFC9F807DBF5C42C68DFACE06F89A97B9C7EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284ad28e-3144-41fb-8e1d-d86af31216cb.roa
Signing time: Wed 27 Nov 2024 00:00:00 +0000
ROA not before: Wed 27 Nov 2024 00:00:00 +0000
ROA not after: Wed 01 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 182.30.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ac:fc:9f:80:7d:bf:5c:42:c6:8d:fa:ce:06:f8:9a:97:b9:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 27 00:00:00 2024 GMT
Not After : Jan 1 23:59:59 2025 GMT
Subject: serialNumber=a7abcc4f8d00d6bbb615df54b38e9c2b9012915da37b237a354ae6c86ed214c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:00:03:4d:84:4d:46:d8:12:29:90:44:b2:
54:4a:19:60:d2:48:96:77:f9:d3:76:13:9d:08:f5:
ea:8e:4e:3c:3a:99:95:df:e7:d4:ec:1f:29:d6:31:
af:9f:ba:66:62:6c:12:1f:d5:d8:c2:bc:f0:7d:c7:
66:c2:89:83:ae:70:4e:a3:37:79:7c:22:7d:64:50:
66:3a:7d:d2:b9:51:a8:c2:68:18:42:f7:85:1e:5f:
ef:ac:b8:51:9c:4f:7b:42:9f:a2:02:1e:9a:ed:6e:
8d:e2:ef:6f:2a:3c:34:94:93:d1:f9:c8:a6:63:28:
04:3b:c1:3f:97:b5:d5:dc:bf:e6:88:00:28:c8:5a:
54:f6:80:a4:a0:af:f3:82:a9:2e:0d:79:4f:33:1f:
2d:cc:df:0f:97:cc:17:ef:45:3e:23:53:dd:01:ec:
58:54:01:96:a6:05:12:78:8c:09:de:3f:73:47:6e:
46:1a:ba:0a:08:5f:72:96:b2:86:f6:fe:79:94:f1:
78:eb:32:a9:e4:bd:3d:ea:cc:22:84:93:79:25:e6:
6f:23:7b:36:72:2d:53:8c:65:1a:cd:1e:21:04:2e:
66:c8:2a:42:9c:df:73:13:3a:35:dd:5f:69:fe:da:
c2:f3:82:e5:ed:e1:67:5f:51:6c:2a:af:63:16:5d:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1A:58:FD:23:8D:1D:DB:E3:5C:70:A8:2E:A2:C2:59:92:97:A3:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/284ad28e-3144-41fb-8e1d-d86af31216cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:48:7b:7b:55:88:5f:f4:31:aa:da:7c:1b:66:b3:fc:91:ac:
87:4d:5f:99:19:fb:f1:32:36:8b:9e:e0:cb:1b:1e:45:1a:2d:
fe:55:08:bb:86:6f:6c:f5:9b:00:eb:f6:09:cc:d2:39:e6:13:
98:99:99:4a:ef:a2:10:93:a8:3b:ef:57:6c:42:14:9a:54:3f:
21:59:f3:95:36:35:4e:99:f9:e9:fe:48:8d:d0:21:e4:a2:c6:
5a:9f:8d:f1:96:4f:e8:ad:4f:93:09:1c:45:ed:83:4f:d7:48:
55:a7:80:01:4c:5c:4f:f0:04:24:62:ca:21:df:cd:77:c6:79:
9a:4c:15:d8:77:c0:b1:7f:94:21:c8:9e:52:16:a8:b4:40:15:
fd:e3:93:1a:73:e4:f9:b5:e9:38:33:21:fe:aa:f5:0b:a9:3b:
ad:e8:fb:74:a5:1b:88:bf:25:45:66:32:b1:51:f5:df:78:5e:
92:30:56:9a:91:02:6a:9c:dc:8c:9d:b1:00:2d:b1:8e:8e:f3:
d4:ee:3c:19:47:4f:10:06:f7:1b:29:7c:c8:f0:5c:3a:51:25:
c8:9b:ce:e2:dd:a8:47:eb:a8:52:4c:74:ec:b7:02:ae:d2:7e:
3c:59:60:76:14:b6:4b:ec:88:77:63:fe:df:55:cc:28:b8:0e:
28:5e:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:31 2025 by rpki-client