Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eb977bb-1326-451e-8007-c0cc0d82af57.roa
File: 2eb977bb-1326-451e-8007-c0cc0d82af57.roa (raw, json)
Hash identifier: 8A/bgVILr1Z9SQw3uPC7loGPhIrcI4uhVapib5yWzbs=
Subject key identifier: 1B:30:EA:D7:04:3F:BE:50:DD:88:95:5F:DB:A9:92:FA:7C:6A:D0:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7AEBFC5C3F1A6B1698831492494C241B5DCAE29F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eb977bb-1326-451e-8007-c0cc0d82af57.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 104.227.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:eb:fc:5c:3f:1a:6b:16:98:83:14:92:49:4c:24:1b:5d:ca:e2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=61846a69d89513b6f911710117cef347d757299b23a6f8ac74dff236a817be50, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:a5:eb:fc:4a:84:b2:21:a8:e4:e8:ec:21:
98:7b:fb:0d:87:4e:ef:8b:1c:a9:de:ec:e1:53:81:
df:24:6e:31:84:02:06:30:71:07:20:9b:9b:10:7c:
60:01:a9:cc:84:3c:84:61:b2:5e:17:9d:61:f1:dd:
a2:f0:50:96:45:98:31:67:36:e8:49:70:2a:46:83:
9b:bb:44:48:12:b7:5c:ab:4c:82:e1:39:d4:d4:10:
9e:be:33:b6:84:73:03:66:c7:44:20:2c:59:15:29:
14:22:31:0d:eb:3e:52:9f:0b:f1:9a:5b:6b:13:e5:
30:99:e8:08:ac:34:27:b1:76:c5:d1:8c:0d:95:53:
9d:fa:43:93:79:f0:d9:c7:d0:e1:a1:14:13:5a:70:
1a:cc:82:b6:1a:8b:76:1e:08:67:bc:4c:ac:97:62:
12:a2:0a:2c:01:f9:ac:9f:3a:48:21:3c:ab:0c:c8:
56:1c:53:88:c0:00:dc:8d:ac:31:6c:4b:08:6f:27:
42:aa:c7:f9:be:6e:e4:b3:fb:42:fe:b1:9f:4d:b3:
6b:fd:3e:d2:6f:a8:8b:e3:2c:c6:b7:36:6e:c0:a2:
a7:52:d9:0b:65:de:0d:a7:b0:d3:ba:5c:58:2a:36:
02:b8:f1:d9:be:33:1b:ec:00:d9:b8:1d:ad:00:7b:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:EA:D7:04:3F:BE:50:DD:88:95:5F:DB:A9:92:FA:7C:6A:D0:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eb977bb-1326-451e-8007-c0cc0d82af57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:df:9f:c3:6e:0d:52:33:e6:62:bb:a4:36:a3:2a:b0:00:a4:
02:62:ef:dd:8e:34:a8:6f:c9:0f:9d:c1:c5:3c:20:2f:6a:9b:
cd:b7:81:47:f0:2c:f3:5b:1d:60:bd:d5:e2:27:43:fe:57:7c:
4c:47:b9:e0:75:4d:13:b0:e1:1f:3f:2d:d4:90:ca:f0:0b:3c:
08:92:93:d0:7e:2d:96:20:e8:e2:f3:9d:78:30:67:da:a5:6c:
2f:c8:64:4e:37:86:fc:ed:d1:28:5b:ec:87:1d:5e:50:51:fc:
0b:6e:36:01:a1:64:8b:67:91:b7:f6:5e:dd:44:62:f3:6f:13:
1e:23:bf:44:fd:19:1d:8d:9a:af:f1:ca:08:38:36:eb:97:ec:
e1:b7:d3:d4:b8:97:68:19:0d:03:77:38:f1:3c:93:6b:9c:33:
8c:95:e4:08:9f:b1:90:88:3a:26:e8:fa:35:43:9c:fd:ff:ee:
61:c0:e3:cb:26:d7:da:1c:cb:b6:fa:cd:43:ef:1b:06:07:f5:
20:9b:5f:28:2e:5c:fc:86:b8:3c:91:d6:74:4a:91:a5:4e:1c:
ff:02:fd:d7:ca:cb:7e:86:2a:5a:88:36:d0:90:69:9e:e2:c9:
5d:67:8a:15:6f:11:80:d0:18:7d:f6:f2:ba:9d:78:20:69:6d:
c3:ac:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:09 2025 by rpki-client