Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa
File: 2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa (raw, json)
Hash identifier: /H1wWqMqvnXND8eXRz5EzvBPZZ8Nd1S+5V5wy2oL0Ns=
Subject key identifier: 2F:5D:8F:59:B1:3A:1B:12:3D:C7:19:8F:8F:14:F6:B5:2B:73:25:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0521E7F5D786861F74CDB30AB06D9FA8F9C8247C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.247.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:21:e7:f5:d7:86:86:1f:74:cd:b3:0a:b0:6d:9f:a8:f9:c8:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=c39d6ec79984b98732c6989cec30a058a352bcd34c11711511425fafb1c7ddb0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:80:d4:a8:1c:3d:f7:95:30:ce:3e:b4:09:
d0:25:fc:77:4c:54:1d:d6:80:aa:f1:64:bf:30:81:
dd:9e:10:f4:4e:ec:c5:4e:a0:f9:4f:04:af:85:d5:
ca:c7:98:79:38:6e:86:6b:9c:a9:76:3d:b8:07:07:
5b:87:9b:2c:77:82:23:c4:99:70:51:1c:fe:50:0f:
e0:c1:38:d4:24:01:9f:33:cb:65:b5:ce:e4:1e:c7:
84:76:6d:56:6f:d4:29:b8:83:a8:1d:6d:11:94:d9:
26:23:e2:5c:66:66:80:1c:fa:3b:ea:3a:d2:aa:e9:
12:c6:e1:2a:68:33:c1:4c:a3:a1:c9:36:7e:8b:7b:
71:b7:5f:df:77:dd:00:63:dd:fe:d8:3b:4c:01:65:
20:68:fe:4a:81:2c:7e:22:af:28:6a:39:66:e4:6b:
6d:b0:ff:35:38:bf:2f:25:0b:1b:ed:1c:29:25:dd:
bf:ac:f2:03:5b:cc:fc:b2:77:61:40:d0:65:1e:e4:
60:b2:89:c6:9d:1c:ca:de:be:75:18:10:3e:8a:62:
cb:7d:db:98:53:56:c1:37:82:91:18:ad:73:55:c6:
b6:12:ee:3b:d8:9e:f5:a6:b5:6d:ab:dc:8f:aa:4e:
b5:8f:5f:66:10:2f:3f:ff:96:c4:f0:35:b5:c2:61:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:8F:59:B1:3A:1B:12:3D:C7:19:8F:8F:14:F6:B5:2B:73:25:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e832b9e-57ad-489d-8780-bfafdf24e7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.247.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:cd:d4:38:6e:9b:28:ba:31:dc:e9:e4:aa:5e:b3:b2:9d:da:
01:80:05:a4:95:b0:69:97:f3:65:c4:07:25:87:a1:c1:51:1b:
10:24:0d:1c:a2:16:a5:df:34:55:01:1a:b9:0c:2d:5a:f4:4f:
dc:31:e8:dd:62:e0:4e:74:59:2d:a6:2b:96:66:4a:32:14:50:
00:62:73:23:2c:ed:78:90:59:78:22:24:b9:24:f7:72:03:7d:
ac:a2:3f:e7:e6:f8:4c:0e:0f:c0:d8:40:4d:b4:89:ec:a0:e1:
12:76:4d:87:02:e2:c9:4b:b3:98:79:a2:a9:27:26:8c:6a:43:
58:43:a6:85:73:91:b6:d6:4c:67:3b:d8:34:45:15:f2:74:5e:
eb:de:32:2c:3c:53:e9:08:88:74:6d:a6:5f:0e:75:0d:0c:59:
c1:5d:dd:7f:b1:64:4f:99:21:d8:4e:67:01:fa:fc:72:54:46:
f4:91:7c:31:2e:14:ff:71:29:6b:76:d5:bd:d0:40:5e:52:87:
55:83:af:2a:bc:64:e8:ce:05:e8:d0:8b:db:12:7f:a3:8a:8c:
40:ae:b5:3b:98:84:cf:f6:49:73:53:68:8a:b6:60:b2:05:29:
fa:37:63:d0:6f:e8:15:89:c8:d1:63:e2:f9:e4:7e:31:7a:70:
68:94:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:51 2025 by rpki-client