Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c7880d5-67b4-4886-84e6-5e0b78dc600e.roa
File: 2c7880d5-67b4-4886-84e6-5e0b78dc600e.roa (raw, json)
Hash identifier: uH3dPWL0rGkrUjxz0nS9VKR8OuWiPUcJ5oIRBzLH29o=
Subject key identifier: 14:23:C0:D1:B7:2E:5E:FC:3A:03:2B:36:A6:E6:80:21:BD:84:3B:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5DBD19EC1AFB6C1AC27AAFF1DDFDD0CF06FB88E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c7880d5-67b4-4886-84e6-5e0b78dc600e.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 206.131.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:bd:19:ec:1a:fb:6c:1a:c2:7a:af:f1:dd:fd:d0:cf:06:fb:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=77d91cc243208004a96d3eb487ffb103c1e5e34d328c489e1cba3d9f003f8358, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:37:c8:e3:63:10:45:4b:ec:1f:a9:e2:40:
08:ec:1a:f6:3c:2d:fe:d9:72:62:5c:d8:da:84:2c:
e5:ff:aa:7b:6a:fd:59:7d:cc:64:78:2e:e5:be:b5:
aa:fc:fd:4d:eb:44:5b:a5:08:37:14:c4:d7:83:5a:
ff:c6:7d:4f:5c:5b:68:d2:1d:41:87:64:5b:2d:2a:
ca:6e:9d:a1:89:e6:b5:87:f9:63:8b:09:4c:32:ee:
fa:fa:19:18:7b:9b:3d:14:44:db:8c:33:71:c4:a4:
02:6a:bb:ec:6a:25:e1:87:0e:fa:15:71:6b:d8:09:
be:d7:b3:bc:4b:39:63:a3:57:8a:44:14:e6:db:d1:
ae:05:4c:35:e2:c9:be:44:6c:99:b0:da:b0:5a:0c:
3e:83:8f:2d:c1:88:15:64:d2:bd:d9:78:9c:76:95:
4f:04:be:91:67:b8:bb:25:0b:79:17:cc:b5:f8:98:
33:1d:ac:8f:0e:2b:1b:05:1b:72:59:49:0c:6f:5f:
cf:27:c5:6c:2c:e4:89:4e:67:0d:26:13:96:d3:45:
52:a2:21:89:f1:26:f7:77:de:11:4e:da:e0:d4:7e:
d7:26:c1:f7:d1:70:18:3d:06:38:34:aa:7f:1b:3f:
d0:d5:44:1c:12:23:3d:68:89:56:08:b5:4a:ab:1c:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:23:C0:D1:B7:2E:5E:FC:3A:03:2B:36:A6:E6:80:21:BD:84:3B:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c7880d5-67b4-4886-84e6-5e0b78dc600e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.131.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:a6:9a:ab:70:fb:d9:fe:91:37:16:bc:63:bb:30:ce:51:e4:
95:bf:65:9b:2c:40:af:62:0e:e6:2e:cf:92:61:c4:1e:86:a4:
d9:57:e5:58:aa:ca:c9:92:08:5e:57:0c:61:88:4c:70:a8:c7:
2e:a1:5a:cd:b9:32:91:51:e5:ce:30:dd:80:46:89:91:28:fb:
d1:aa:79:4d:68:26:bf:78:65:4a:b8:0e:42:88:ff:1b:8b:72:
50:b2:98:bb:e8:c3:b0:09:70:24:d9:6c:58:4d:5c:5f:31:c3:
32:db:db:80:dd:3f:99:43:47:b8:c7:9d:46:99:21:4f:32:eb:
34:48:fa:ba:fc:4d:67:78:7d:94:bc:d5:a0:b4:36:5e:ee:6c:
ce:db:81:f3:14:b2:89:eb:a3:20:20:ee:61:e4:ca:ed:f4:df:
0b:64:98:7b:79:15:26:6f:21:5f:2a:67:8a:a1:4f:1f:ef:dd:
dc:04:0d:30:d2:09:d7:77:5e:a9:98:87:01:f3:a9:8c:01:f3:
d2:54:3c:fe:d0:94:fb:08:3a:e4:e2:40:76:29:db:b4:ed:f7:
f2:e6:68:35:1a:46:aa:b1:9a:df:e8:98:b1:64:e0:b3:eb:63:
06:75:f1:52:98:72:b9:5d:9e:0a:4e:8a:78:37:da:50:0b:4c:
f3:7a:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:10 2025 by rpki-client