Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d7b766e-899c-4b48-9903-40dfd15b6e72.roa
File: 5d7b766e-899c-4b48-9903-40dfd15b6e72.roa (raw, json)
Hash identifier: kk5Vh4vW5Tm8TlLnOTTyUbrRUrpFMwdOKNXxuTLGy6w=
Subject key identifier: CB:8A:F7:B6:49:59:4C:57:1A:B5:ED:4B:C2:D6:1B:75:FF:7C:07:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10F08F52F4BF01C6D125EC55FC2229B8F653936E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d7b766e-899c-4b48-9903-40dfd15b6e72.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 149.180.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f0:8f:52:f4:bf:01:c6:d1:25:ec:55:fc:22:29:b8:f6:53:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=2a8f072b2fc6c09d5aae34bc9fb5d65d483c60da5aa96454d05e9e1d5b09ce68, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:de:15:52:bf:c1:6d:70:2a:ff:1a:d6:70:
2e:d6:6a:07:ef:d4:ab:d8:54:a6:96:68:2c:d3:5e:
37:71:d2:e2:3b:e7:a6:16:e6:3c:2b:9c:ae:ce:53:
47:fe:51:22:19:cf:a3:bf:7a:01:a5:44:b1:26:9d:
f5:6e:4e:c3:10:33:fc:1b:c6:16:e2:0b:e1:45:e1:
fc:3e:f5:5a:e7:bf:e8:3a:2c:85:69:ac:ce:0f:b3:
1b:1d:37:27:80:d6:0a:d7:32:30:32:b3:ce:1b:3e:
47:40:95:d3:d7:cb:89:29:07:28:d3:7c:40:51:5d:
4a:0f:3a:ba:89:6c:84:32:f6:32:cb:99:2a:75:d0:
5c:b7:64:17:fd:0b:01:b5:7b:14:92:48:3d:9a:b0:
a6:b2:09:47:d1:60:41:ba:e2:99:fd:22:26:1d:6e:
90:2f:34:8a:61:84:a5:11:c2:cf:52:bc:da:79:c4:
44:6c:57:a4:62:c7:85:dd:ab:e2:05:4a:3b:24:38:
a0:ba:35:c3:f6:99:fa:29:56:b3:31:84:09:e1:4f:
18:c3:f9:8b:26:39:b1:5c:81:82:dd:a3:98:b7:12:
1a:c0:63:de:4c:a2:b7:5b:b2:26:76:1d:cc:56:3d:
d8:58:dd:6b:7a:ea:89:a5:5e:f7:ba:65:cc:c0:29:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:F7:B6:49:59:4C:57:1A:B5:ED:4B:C2:D6:1B:75:FF:7C:07:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d7b766e-899c-4b48-9903-40dfd15b6e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.180.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:d0:0c:7d:e7:a3:3a:2e:a3:98:dd:04:b4:9b:8f:e9:28:e6:
90:d1:cb:91:8c:08:09:e3:64:9f:b0:5c:34:05:09:e4:99:fc:
70:43:bb:8f:f4:8f:2c:29:39:22:1f:7f:1c:f3:f1:97:0f:0f:
73:87:c5:19:d1:05:1d:d8:cb:7f:08:ee:50:62:f8:b8:2f:ce:
a9:d7:7e:71:0f:3d:30:3c:43:ab:0e:68:4d:b1:77:71:00:fd:
f5:c1:ac:09:0a:fe:22:6a:73:c4:da:b9:96:42:68:95:c5:49:
ad:2e:18:7b:6d:2f:cc:7f:b6:79:91:e5:51:3d:bb:4f:e8:d3:
7e:d7:7f:36:76:c2:d2:3b:b3:47:1e:4f:0c:91:87:24:5e:98:
56:bf:fe:22:a7:ca:7d:1d:e8:97:3a:6e:80:9c:1f:0a:ea:93:
44:7e:71:ed:39:20:b6:82:75:f0:08:7e:57:0d:fb:e4:c8:67:
8e:0f:b8:73:a0:75:45:d1:da:b9:e2:43:43:d4:ec:59:b5:a5:
40:8d:b6:5e:6c:52:51:10:c8:d1:ff:ea:7c:fc:7c:18:90:0f:
97:d3:23:45:6b:de:ef:66:14:86:cd:49:d3:d5:26:a1:39:3b:
a0:de:64:e8:7d:b2:6b:c0:29:21:40:3d:ef:39:41:b8:75:cb:
1b:c5:92:b5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEPCPUvS/AcbRJexV/CIpuPZTk24wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI3MDAwMDAwWhcNMjUwMTMxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYThmMDcyYjJmYzZjMDlkNWFhZTM0YmM5ZmI1ZDY1ZDQ4
M2M2MGRhNWFhOTY0NTRkMDVlOWUxZDViMDljZTY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsJ94VUr/BbXAq/xrWcC7Wagfv1KvYVKaWaCzTXjdx0uI7
56YW5jwrnK7OU0f+USIZz6O/egGlRLEmnfVuTsMQM/wbxhbiC+FF4fw+9Vrnv+g6
LIVprM4PsxsdNyeA1grXMjAys84bPkdAldPXy4kpByjTfEBRXUoPOrqJbIQy9jLL
mSp10Fy3ZBf9CwG1exSSSD2asKayCUfRYEG64pn9IiYdbpAvNIphhKURws9SvNp5
xERsV6Rix4Xdq+IFSjskOKC6NcP2mfopVrMxhAnhTxjD+YsmObFcgYLdo5i3EhrA
Y95MordbsiZ2HcxWPdhY3Wt66omlXve6ZczAKeInAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy4r3tklZTFcate1LwtYbdf98B+0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkN2I3NjZlLTg5OWMtNGI0OC05OTAzLTQwZGZkMTViNmU3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeVtAAwDQYJKoZIhvcNAQELBQADggEBAIrQDH3nozouo5jdBLSbj+ko5pDR
y5GMCAnjZJ+wXDQFCeSZ/HBDu4/0jywpOSIffxzz8ZcPD3OHxRnRBR3Yy38I7lBi
+LgvzqnXfnEPPTA8Q6sOaE2xd3EA/fXBrAkK/iJqc8TauZZCaJXFSa0uGHttL8x/
tnmR5VE9u0/o037XfzZ2wtI7s0ceTwyRhyRemFa//iKnyn0d6Jc6boCcHwrqk0R+
ce05ILaCdfAIflcN++TIZ44PuHOgdUXR2rniQ0PU7Fm1pUCNtl5sUlEQyNH/6nz8
fBiQD5fTI0Vr3u9mFIbNSdPVJqE5O6DeZOh9smvAKSFAPe85Qbh1yxvFkrU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:58 2025 by rpki-client