Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/490393c4-9294-4b6b-b92d-d4c7e939b1a5.roa
File: 490393c4-9294-4b6b-b92d-d4c7e939b1a5.roa (raw, json)
Hash identifier: xabKuvu+kgmJRieRY/pkXJmmmV/NMKT3juj48iyvO+Y=
Subject key identifier: F1:8A:4D:8B:49:69:A2:9B:11:C1:F2:FD:DC:E1:26:54:09:F4:8E:C8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D4830F1EBFDD15853284418BFF8DB0BEE17608E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/490393c4-9294-4b6b-b92d-d4c7e939b1a5.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.10.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:48:30:f1:eb:fd:d1:58:53:28:44:18:bf:f8:db:0b:ee:17:60:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: serialNumber=4572f085a4500c45f4a708a248c35911150c5ebebbe4140f07e6acdd84477b8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:a2:eb:f7:c8:d6:0f:ce:69:69:ce:cf:46:
f2:31:c0:b9:d1:ad:f5:44:75:f5:16:b4:d4:99:05:
00:5a:54:a9:a8:f3:03:1d:9c:94:4d:73:75:70:6d:
0c:0f:c1:2f:8f:8e:34:ce:f7:48:71:38:a7:61:3d:
38:2b:f5:d6:48:f9:73:02:5c:e3:b5:4f:76:bb:6f:
31:34:97:34:b9:17:ce:a5:73:82:f0:39:03:a0:e8:
5b:5e:8d:75:82:bb:ba:f8:23:ea:99:f0:ce:9e:32:
6e:27:01:05:68:e0:c5:18:a8:af:ab:59:2e:5f:4d:
eb:21:3b:31:f0:db:91:31:15:0b:3d:a6:90:f1:eb:
94:92:7d:ad:95:8f:9c:fc:b0:a8:e3:46:ef:4d:04:
df:92:74:24:d0:de:dc:48:68:6e:d1:f7:1d:27:84:
ea:64:67:ae:46:1b:1e:fb:b3:33:10:fd:e2:3a:6c:
1f:29:bf:3c:da:14:76:79:84:04:b2:c9:d5:d7:4d:
f5:8e:ff:e8:f9:ab:cd:5f:80:0c:80:d1:95:4d:84:
db:42:e0:c5:bd:3c:cd:60:b2:9d:f1:56:08:71:8a:
4d:40:f9:ac:c9:8d:b0:e8:a6:41:cd:76:19:85:5f:
a8:c8:95:6b:80:7e:09:2c:62:6d:21:d3:75:2c:c8:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:4D:8B:49:69:A2:9B:11:C1:F2:FD:DC:E1:26:54:09:F4:8E:C8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/490393c4-9294-4b6b-b92d-d4c7e939b1a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:ad:30:bb:1f:fd:72:1e:98:b9:5c:df:e8:d2:7f:26:af:e1:
c7:b2:8e:3c:41:37:4e:32:91:89:a1:bc:76:c9:87:e1:08:e3:
86:60:d8:ac:cd:fc:49:d3:ea:3c:37:71:5b:eb:65:a9:00:96:
0e:33:ff:ee:c9:fc:b3:23:0b:30:cc:eb:da:51:78:43:2f:39:
90:1c:41:be:90:09:f1:7b:ba:59:c3:67:a6:12:e8:d4:25:0a:
40:69:c1:c6:83:77:d7:96:3d:e2:9a:ba:eb:2b:e3:9e:1c:7e:
b1:29:3f:33:95:ed:6e:c6:e1:f9:64:b1:74:0f:ea:99:54:15:
b0:04:de:f7:f1:f6:7d:0a:07:af:08:1e:6f:f7:a8:34:f0:00:
03:1b:0d:0a:9a:05:b7:73:01:7b:ed:e0:98:15:f6:dc:40:7f:
9b:7c:1e:22:51:89:72:b5:01:46:49:7d:0a:8c:d2:a6:04:74:
2d:00:49:4e:dc:40:2b:59:ee:c3:d3:3c:bd:67:6d:03:de:46:
16:0d:08:f6:2e:e6:47:93:ee:05:07:ab:ed:51:e9:dc:5a:73:
2e:d1:7e:47:c4:d3:cf:56:e2:4a:7d:ee:4f:eb:e5:2f:1f:d5:
25:c9:2c:29:17:68:d1:af:fe:20:d9:43:bc:db:e6:8c:c3:20:
2d:e3:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:09:17 2025 by rpki-client