Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ad8b536-be38-45be-b6ce-0e453f58f23c.roa
File: 2ad8b536-be38-45be-b6ce-0e453f58f23c.roa (raw, json)
Hash identifier: wY4wp/k6G+JWJS4JMCTVT5OYgruQvq4v/vWorvRqhtY=
Subject key identifier: F5:92:62:C6:A5:1B:DC:37:6C:C8:67:43:BA:DE:A9:05:C0:00:5F:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 78CA211F934703998CED226202D45F57A242B66D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ad8b536-be38-45be-b6ce-0e453f58f23c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 198.132.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ca:21:1f:93:47:03:99:8c:ed:22:62:02:d4:5f:57:a2:42:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=e9a0443ae4394cc0b77d9338267be8d6a6f3c2536c45028c088344039d974c73, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:1c:fa:b2:b4:71:f4:ce:86:83:0c:83:02:
bf:43:3a:4e:6e:5a:c8:ec:67:91:af:b5:37:9a:72:
63:13:f0:f8:c9:ae:c9:5b:20:47:44:6e:bf:98:5a:
b6:0a:c3:b7:34:84:e7:a2:2d:a9:d9:ab:62:be:91:
a8:ce:f2:3b:57:36:2a:61:fe:e4:20:e5:8d:b5:89:
2e:c8:e9:71:51:f0:de:14:ef:5b:0c:88:4e:ea:5d:
8d:9a:ef:fb:e5:d9:35:c0:fd:77:7d:df:8b:c8:9a:
8f:98:5b:0b:89:50:e4:aa:c8:b3:53:e4:07:61:a6:
b9:35:9c:3d:5b:56:57:c4:47:88:e3:bf:c2:9b:9e:
d3:42:74:48:a0:98:9d:11:88:85:db:90:40:31:c1:
a0:72:37:79:fd:27:0e:3c:1f:f6:bf:fc:c6:47:f1:
72:d4:18:be:ed:72:14:bc:ac:ec:45:a1:d4:4b:43:
8f:b3:94:85:0b:d1:6e:2d:fb:49:66:80:7f:9a:5d:
74:16:27:03:56:8d:48:3b:cf:c9:26:b1:e5:7e:b2:
10:26:ea:dd:98:1e:f8:dd:c7:50:5a:f4:78:76:ff:
0c:60:12:5f:d6:f4:8c:fd:d0:43:53:d7:6b:c5:fc:
0c:e5:19:cd:93:8d:be:7b:1c:bb:7e:6a:67:b9:e2:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:92:62:C6:A5:1B:DC:37:6C:C8:67:43:BA:DE:A9:05:C0:00:5F:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ad8b536-be38-45be-b6ce-0e453f58f23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:6b:58:a8:4f:35:7a:f6:f6:4c:ba:31:71:f9:ae:37:fd:f3:
dc:93:9e:3d:ff:53:e8:28:76:fa:0a:05:76:c5:38:83:51:9f:
aa:1b:db:65:2f:03:21:57:ef:d8:b7:ff:c0:99:12:75:e8:9c:
c1:8d:86:d9:f8:c1:32:2d:b1:b3:a8:de:1b:1b:68:00:9f:05:
c9:22:1e:00:66:09:70:89:bb:1f:a6:1e:98:85:ef:06:34:40:
66:c6:c8:7d:35:6b:fb:e6:e7:6f:29:ed:4c:69:2a:7c:cd:eb:
f7:3d:ad:72:6a:30:12:82:f8:19:86:9f:69:b4:65:e2:e5:7e:
d3:f8:ab:20:1b:d5:7d:e4:38:3b:3f:1e:6a:f9:5f:09:0a:e9:
27:2b:35:28:e0:0b:36:d0:8c:59:22:32:14:0a:a3:98:b2:90:
4f:33:3e:c0:c2:a8:ec:d2:f7:51:bd:2b:ff:6d:ef:39:30:94:
c5:e9:c3:d3:19:2b:cc:fd:ca:5c:f0:3f:f0:ec:4f:81:ea:43:
fd:7f:13:da:6e:e2:c9:55:c3:02:ab:38:f6:24:67:e9:0d:a0:
53:2a:34:f5:d5:79:04:0d:26:f4:07:0f:87:f8:5e:f6:b8:bd:
32:4e:14:bf:81:1c:3a:af:9c:2b:62:72:1c:2d:01:f8:90:80:
47:bf:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:10 2025 by rpki-client