Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f92b005-9132-4a38-b62d-d56412993dc0.roa
File: 3f92b005-9132-4a38-b62d-d56412993dc0.roa (raw, json)
Hash identifier: 1MYiBUKkgbt+ay9VfRoq1vYFknPDQ/x+udMPY8kV1A4=
Subject key identifier: 08:2B:58:95:F1:8E:42:83:75:C1:59:62:8F:EA:C1:BE:54:54:29:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4475EE758A7D62D9C49B73FF46D4238D29789C82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f92b005-9132-4a38-b62d-d56412993dc0.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 185.169.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:75:ee:75:8a:7d:62:d9:c4:9b:73:ff:46:d4:23:8d:29:78:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=71004b32222bb8284a7716c3527bad92fcea8e5bd0bc6af5f73714956826e2b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:57:e7:82:d2:2f:b2:63:f4:52:68:f0:41:
21:e0:c2:65:77:87:18:6d:ca:1a:d1:5f:a1:e2:40:
d9:8d:0d:37:49:a1:ae:32:91:09:ed:5e:ce:55:08:
b0:eb:dd:63:0c:40:49:f6:5f:df:f0:05:58:ff:62:
18:ef:0d:6a:49:1a:97:9d:03:4f:c4:d7:73:12:06:
b0:17:d9:bc:cc:b1:75:a5:3d:da:53:c5:0a:63:5b:
86:1f:3c:23:c5:29:5a:2d:75:4e:78:6c:e1:0b:5c:
4a:cd:35:20:62:0c:34:17:59:36:d5:bb:a5:1f:a5:
b9:ad:8f:26:94:94:6c:a8:cc:34:a6:76:2d:7a:4a:
3b:a2:74:6c:93:7b:88:9b:e5:9c:9a:17:88:af:ac:
03:18:e3:be:88:ec:4e:6a:18:48:ae:27:92:34:ab:
50:68:64:40:dc:7f:8f:f0:fb:e9:19:79:bf:79:c3:
16:28:51:ea:7e:6d:b9:c4:16:d1:74:f9:42:45:76:
0f:97:df:80:1b:77:22:7e:c1:71:6f:f9:71:78:a5:
01:e8:1f:63:a5:dd:25:bd:6b:22:b9:77:f2:04:92:
d1:8e:54:45:d9:94:5b:e3:3b:e2:9f:34:4b:27:6f:
11:99:0b:51:a6:4f:20:a4:99:7d:e9:f6:33:d7:01:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:58:95:F1:8E:42:83:75:C1:59:62:8F:EA:C1:BE:54:54:29:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f92b005-9132-4a38-b62d-d56412993dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.196.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b2:ba:dc:c2:09:5b:7e:a3:b3:df:a3:af:f2:5a:2c:01:6f:
40:8f:97:f4:52:45:c9:99:cc:d3:40:59:11:b4:fc:bd:0f:cf:
8d:09:2d:ac:3a:90:c4:69:c4:1a:a2:16:f7:b7:92:21:a9:10:
52:54:10:40:2e:3a:ce:36:cb:f1:14:71:be:48:35:2b:4d:9a:
31:ed:19:ff:95:50:9d:44:9d:f3:6b:19:79:b2:ae:ae:5c:51:
d3:02:1b:1d:7e:eb:66:25:9f:33:d2:e1:f0:8f:42:63:95:4d:
f0:85:9b:ec:e2:c4:fd:b1:7b:cd:f8:15:d4:7e:14:37:33:0b:
95:ce:f7:c4:21:d1:46:c8:eb:2f:e6:2d:a4:d3:69:1e:f0:bc:
d5:0d:12:c5:1c:2b:21:14:d8:b4:60:0b:17:56:a5:c0:1f:5d:
cb:a2:ca:0e:6e:71:40:3e:c2:c4:31:07:79:63:67:f3:7b:c2:
35:67:4c:28:05:5d:ac:8c:2e:be:53:6d:25:8a:91:1c:9e:62:
a1:5e:63:13:47:39:75:29:65:34:d5:72:a4:a2:86:63:43:54:
f1:6a:4f:c9:7a:db:ac:2b:af:8c:9d:17:aa:63:ba:03:99:0f:
71:da:9d:64:aa:e6:88:90:1f:e1:d8:32:51:69:42:50:7a:91:
9b:16:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:29 2025 by rpki-client