Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bfb393b-5503-4a8f-902d-e53cea616159.roa
File: 4bfb393b-5503-4a8f-902d-e53cea616159.roa (raw, json)
Hash identifier: vciuRJUPfySrg/5lTl1WloO/2FoiWjc8VkBr0a5P5pM=
Subject key identifier: 47:3F:B5:22:B9:A8:50:38:F3:3E:AC:11:2D:0E:7D:99:5A:6B:57:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 192E406802C27288BA3B6B782E0439F4B578FE16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bfb393b-5503-4a8f-902d-e53cea616159.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.120.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2e:40:68:02:c2:72:88:ba:3b:6b:78:2e:04:39:f4:b5:78:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: serialNumber=0cf8ef48a64b40e00e7a31b9cdb587d2867ce36f451f773d988f9d59b272a4f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:b6:3f:df:56:72:70:de:83:13:77:50:31:
d3:61:82:89:e8:56:1a:ea:78:50:b7:67:d0:c6:43:
cc:0e:2c:21:7b:7f:8b:55:ba:ef:a3:32:fc:36:a2:
33:f3:28:98:35:1d:4b:55:22:17:41:d4:ea:61:2c:
c9:b8:4f:58:01:c5:a9:a9:4d:f1:18:8b:9c:9f:ea:
82:dd:2a:0e:fd:6d:a3:17:67:d5:7d:a0:9b:69:11:
f4:06:95:76:6c:ae:ed:e0:35:1a:cd:51:9d:7c:52:
af:39:a4:32:fc:93:c8:5a:cc:ce:6f:23:6c:47:90:
5b:83:09:65:43:f8:ec:3a:22:a6:95:bc:ad:ed:ad:
79:99:80:c4:62:07:d5:17:2c:dc:3a:3a:66:1f:19:
dc:80:d0:2d:73:82:3d:c8:aa:d0:db:5b:34:ca:9e:
cf:7b:82:90:7e:24:7d:e8:d8:f4:ec:c5:72:6d:b2:
23:ef:11:c3:42:91:d5:84:2e:e9:fa:ed:41:78:e4:
ba:5c:29:ef:a9:8c:7e:6c:88:23:63:9a:a0:68:76:
8a:a0:ff:85:73:4e:38:70:88:c5:11:69:4f:d6:26:
b7:7b:57:77:89:e4:61:57:d6:83:c4:1d:fd:e0:78:
04:33:08:aa:0f:e8:25:94:86:c1:ac:eb:eb:be:35:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:B5:22:B9:A8:50:38:F3:3E:AC:11:2D:0E:7D:99:5A:6B:57:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bfb393b-5503-4a8f-902d-e53cea616159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.120.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:68:52:12:06:49:ff:1a:4d:bb:32:af:ad:61:aa:f9:fe:a2:
1c:d7:d9:f0:68:ba:ff:47:1e:9d:08:ed:23:5d:6f:34:34:a7:
41:e1:b6:27:48:1d:5e:0d:57:a2:d3:cc:2e:03:8f:78:08:17:
0e:32:b9:a2:99:9d:3b:ed:c6:88:65:7e:6f:81:0b:93:2a:2f:
1f:b1:35:28:d3:a4:52:84:44:86:49:fc:7d:a2:9f:7f:42:70:
7f:42:4f:d6:c2:0f:e8:67:29:b8:ac:99:dc:b6:5c:e9:9f:aa:
7c:6a:c5:6a:f1:60:e4:ca:7b:c8:68:ec:f3:36:88:69:17:bd:
89:c6:2e:d6:76:27:74:5e:35:87:c1:36:a3:eb:0b:3d:d1:e6:
a8:18:34:d1:be:33:4e:4a:3e:ea:f1:23:7a:4f:5f:1e:4b:9a:
83:ee:c6:a1:da:f8:df:3a:53:34:2c:e4:04:39:fa:78:05:f4:
76:35:27:e4:9f:4d:81:64:91:cb:e5:e3:01:90:c0:41:c6:a9:
d9:db:b8:25:e1:6c:45:10:bc:5d:fb:00:1a:11:a8:4d:03:3d:
fa:f0:22:fb:7b:fd:2b:99:c3:a0:03:5b:79:b5:c8:17:d8:ea:
31:44:0e:da:d5:49:2a:20:f8:89:34:58:0d:6c:44:fe:66:dc:
ca:c1:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:47 2025 by rpki-client