Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f39c863-dd06-435e-939f-1af8f70ce2fd.roa
File: 4f39c863-dd06-435e-939f-1af8f70ce2fd.roa (raw, json)
Hash identifier: 187mlvZ/PyS/yjqrtwcqpZDhHqoeMVGg1+IYF6DseoU=
Subject key identifier: 09:F4:E2:06:37:31:B0:2D:4E:BC:B7:E2:20:63:80:7B:CC:6D:DC:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B8DF56E3B1D927E690F4969492667D6471CA95D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f39c863-dd06-435e-939f-1af8f70ce2fd.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 63.134.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8d:f5:6e:3b:1d:92:7e:69:0f:49:69:49:26:67:d6:47:1c:a9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: serialNumber=f163ce31319b54a46b9bfdefb3a7462c23f59441958c3cbae03e979381f1ede5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:7d:04:1b:2e:de:51:a5:2e:cc:f3:37:e5:
0d:83:60:38:b5:50:bd:f3:fc:ec:18:08:8a:b0:62:
7a:49:95:20:20:d6:91:26:29:14:42:b9:af:86:69:
80:d5:28:e7:e7:fc:63:27:53:d7:6c:8f:7f:c7:ef:
0c:08:18:8a:04:15:f0:7a:b7:9a:9c:6d:59:9c:59:
95:f0:0e:6d:f0:5d:14:5e:4e:e8:d8:49:53:f2:37:
9c:8c:48:5e:55:5b:a8:64:ec:8d:2a:47:8e:aa:66:
c7:4e:6c:32:31:e0:7d:67:0c:e8:c7:73:cf:38:05:
75:e7:b7:bd:40:a3:47:b3:1e:02:c7:5f:8b:f5:78:
a3:d8:22:b4:7c:e0:f0:66:f9:59:c5:b8:92:33:bd:
e3:53:85:c7:b1:54:a6:08:f4:bf:b0:53:20:b5:05:
33:c7:de:50:c3:5c:87:dc:83:18:79:f1:92:af:a5:
6d:e3:54:23:55:ae:61:e3:e7:87:5b:73:f3:0c:89:
dc:92:3d:3e:c5:c9:5f:c1:38:e8:cc:45:a0:77:19:
7f:6e:d5:eb:b7:db:13:bf:0b:2e:e1:5b:75:75:ac:
54:b1:a7:48:f5:b0:d5:fb:f2:86:03:ed:ac:10:05:
bc:3d:11:8c:ab:d5:11:dd:fb:3d:73:2a:f6:ab:20:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:E2:06:37:31:B0:2D:4E:BC:B7:E2:20:63:80:7B:CC:6D:DC:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f39c863-dd06-435e-939f-1af8f70ce2fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.134.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2f:73:72:8d:cd:0b:19:da:c9:bb:cf:1f:bd:ef:9a:ff:f1:c3:
03:cb:58:33:60:d0:5b:04:ff:c1:0a:0e:b1:48:cb:4a:35:6b:
e3:57:84:f9:6a:e6:3c:2d:08:a2:46:9e:25:f5:26:cc:6b:3e:
08:56:7c:64:16:7e:79:a8:0e:3c:5e:fe:c1:72:eb:c9:f4:51:
e5:84:60:5b:f0:c7:b5:72:2f:35:bf:2b:df:52:be:3e:26:77:
09:5a:a4:8f:53:f3:57:ca:a6:3b:18:d9:05:0a:24:9a:82:e5:
7b:fe:d2:04:e2:9b:ba:aa:c3:7e:2a:a4:a0:6a:22:70:91:99:
32:85:63:35:9c:07:29:7a:f1:e6:ed:8c:88:a4:dc:62:5b:b1:
b6:a0:ff:69:74:4d:dd:d3:68:d5:01:f7:e3:98:94:af:9f:10:
d8:b4:9c:ce:8c:e8:2a:e7:40:65:31:c3:54:70:b6:bf:f5:6f:
19:9e:38:f4:74:a4:51:26:a1:02:1d:20:9f:78:9b:ab:c9:ad:
75:6c:c9:a3:97:af:a1:44:45:a0:1b:b6:51:6e:f2:b2:9d:fa:
79:b0:d8:69:b7:51:30:1e:74:60:e5:ae:6e:ea:9f:61:d8:56:
df:dc:7f:c0:ef:3f:d6:71:a4:d9:01:91:f6:46:fa:d3:fd:8b:
a3:17:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:39:51 2025 by rpki-client