Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/399632db-7be3-4dbe-9b39-8ab874d0b163.roa
File: 399632db-7be3-4dbe-9b39-8ab874d0b163.roa (raw, json)
Hash identifier: 9XtjL43Yz6RsVczBpk9NXCZTZFD8XcVE93Gnw44eIv8=
Subject key identifier: 48:0B:9A:75:4C:55:C4:42:D0:EC:8B:88:DF:69:7C:0B:22:14:75:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66B5276E192792C5CD044DF6E917E15C9AE733BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/399632db-7be3-4dbe-9b39-8ab874d0b163.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.60.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b5:27:6e:19:27:92:c5:cd:04:4d:f6:e9:17:e1:5c:9a:e7:33:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=950c2584e9a35ada54fe79c3641a3f62db848e66497eba73ab8767de8c59765d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:03:15:99:e1:f1:b5:72:3a:04:82:2d:66:
a2:30:89:bb:d2:4c:97:45:11:b8:41:b1:b7:3f:c0:
83:64:c8:22:86:78:b0:bc:dd:18:7d:b5:a8:9b:39:
76:54:8a:83:59:a2:cc:a6:2e:cd:81:04:5a:dd:1c:
bb:0a:92:d2:a2:dd:3e:37:d1:bb:90:38:df:35:db:
a4:b7:bd:be:15:82:3c:b7:09:c4:d3:c5:03:79:84:
dd:59:3a:3d:17:b9:01:e1:c1:08:d2:d5:ce:4b:61:
b3:5d:9f:c9:32:d8:df:cd:3d:38:f5:ec:05:7e:fc:
2b:ad:50:16:e7:2d:39:2e:93:5d:d2:51:cd:df:2b:
2e:62:f0:3e:db:75:21:a2:31:27:a1:31:39:79:a8:
31:dd:ce:b3:87:cb:3e:a5:94:02:51:6d:7a:6a:b7:
5b:d0:e0:28:4a:c8:d2:bd:71:12:37:62:50:c4:93:
20:17:39:59:8e:38:db:ee:43:cf:5a:88:a7:b0:b2:
0a:38:c2:f8:c2:6b:b9:10:06:d0:fd:7f:e9:b6:98:
36:dd:e3:37:64:f7:11:83:4c:da:49:ef:81:ba:d1:
05:c1:9f:7b:d2:7f:ce:11:b4:a1:56:3c:ae:33:f3:
72:73:bd:ea:fe:00:2c:b4:0d:43:55:d7:5e:44:2b:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0B:9A:75:4C:55:C4:42:D0:EC:8B:88:DF:69:7C:0B:22:14:75:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/399632db-7be3-4dbe-9b39-8ab874d0b163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:15:d7:08:69:94:73:90:b1:b3:9b:9a:b1:f3:29:67:bd:c7:
3e:1f:9c:4e:e9:cf:23:6f:e3:31:5d:ef:9a:d3:52:e7:c3:19:
e3:20:74:57:09:94:92:bc:bb:f5:22:ba:cc:43:8f:da:12:19:
f4:c3:36:7c:c7:b4:dd:c0:31:dd:c0:48:de:e4:0e:62:d7:91:
0c:d9:bc:d2:a1:96:05:5e:72:f3:9f:df:5e:30:3c:5a:40:7b:
fe:24:3d:be:81:25:ee:9b:e4:d0:b2:57:3b:81:4f:e4:53:d5:
a5:0f:1e:52:2a:0d:ca:c1:1e:ad:88:e4:8e:5c:2a:f7:13:b4:
dd:fc:73:59:1f:e1:78:24:0e:07:b6:62:a6:e2:a4:51:8b:fb:
9f:3d:07:33:86:34:ce:7e:aa:8b:16:01:c0:e5:65:98:b7:ee:
ad:11:e2:18:09:ff:fe:c1:11:f5:47:a6:f7:3e:05:3b:69:90:
4a:8e:18:fc:21:cb:7b:f3:c0:ae:f4:20:1c:1a:da:82:0a:11:
09:10:fc:04:58:36:06:59:c0:d4:27:59:2e:fb:44:26:e3:f6:
b0:9d:5c:46:f6:24:ce:ff:97:40:5a:4f:ed:5f:6f:f0:ec:e5:
73:c7:e2:66:f6:5a:5d:51:4b:e2:ea:de:4f:55:7a:55:aa:f2:
b7:b0:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:18 2025 by rpki-client