Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67ecc42c-2ffa-4e49-a272-e663ecf702b0.roa
File: 67ecc42c-2ffa-4e49-a272-e663ecf702b0.roa (raw, json)
Hash identifier: gi+eFwCR8W+xgSPvRzTF6j1b7iK2PN56y49l4md56Ms=
Subject key identifier: 5E:59:E5:50:D1:2D:04:87:D0:FE:5B:58:22:62:2A:4A:B2:EA:AF:A5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E1A2A55C9A8C2185BDCEF3761F3FE1ADA6EE0FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67ecc42c-2ffa-4e49-a272-e663ecf702b0.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.166.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1a:2a:55:c9:a8:c2:18:5b:dc:ef:37:61:f3:fe:1a:da:6e:e0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=5e1180b2b5ad6ad690820758d77ecff1cd6b0319e8781d03b51fb4e7bca268e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:94:c1:52:c3:fb:a5:b7:58:65:e8:30:03:
d6:e2:e5:0e:2c:e2:cf:4c:19:c7:0d:52:7f:dc:4c:
57:e1:ca:30:d1:97:0d:5b:1c:19:40:c2:06:98:ad:
78:e5:b2:e1:cf:4e:40:e3:44:66:64:37:a3:7d:56:
96:ec:26:43:b7:ee:fc:bf:fb:5e:06:61:b7:a2:3f:
75:4c:a8:ce:d5:5d:47:5d:4e:0e:93:a5:fe:a3:59:
56:35:2d:55:e5:c8:cc:f7:e5:c4:39:ef:7a:be:56:
a6:60:40:b8:48:e8:9d:86:72:e8:52:fa:50:28:69:
84:e7:b1:ee:2a:89:fa:d1:e2:93:47:80:af:ac:cc:
13:ba:eb:a1:ee:c5:d3:64:ca:34:41:ae:56:a9:d9:
c4:ee:e4:54:7c:2e:69:1f:69:3a:ff:19:ea:37:1c:
2f:5a:aa:3e:d4:7e:77:f6:8b:68:65:bf:47:22:70:
32:b0:64:0e:0f:bc:15:e8:70:d2:ae:e2:4e:c4:a3:
07:a5:82:eb:90:10:fb:ba:a9:00:9f:b2:e4:d1:cc:
77:9f:c8:e4:be:24:4b:d0:3c:fc:71:a3:f0:02:64:
39:4c:7f:da:e9:3a:e1:03:83:65:d0:f3:e7:31:d7:
0c:02:12:56:90:17:81:81:78:a1:7d:a4:0b:16:d8:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:E5:50:D1:2D:04:87:D0:FE:5B:58:22:62:2A:4A:B2:EA:AF:A5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67ecc42c-2ffa-4e49-a272-e663ecf702b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.166.232.0/21
Signature Algorithm: sha256WithRSAEncryption
59:3d:55:25:44:c8:c1:6d:5b:0a:45:45:57:25:2f:60:98:27:
a7:67:78:cc:5e:16:c0:88:e3:04:c6:4e:c2:4d:d9:a9:f5:e2:
9d:28:f4:dd:f1:98:45:3f:11:7c:4f:5a:fa:d2:2a:1d:8b:42:
f2:e7:7c:03:28:e7:f5:90:e8:f1:39:8b:91:40:fe:d7:e4:4e:
7f:a2:50:14:ff:c1:84:56:dc:6b:0c:7f:21:33:c1:a4:0c:04:
a5:4a:e9:3a:bb:bd:36:5d:88:84:3a:16:52:0a:c2:ba:f1:e6:
4c:0a:72:6a:c0:9c:e4:b9:a4:ae:2b:20:83:8a:75:48:e0:a7:
14:ad:5f:d8:84:a3:22:fb:4e:bd:f9:30:72:6d:b5:f0:e6:fc:
6e:a1:c3:a1:dc:5f:a8:e1:1a:14:a3:93:6d:56:31:b3:80:69:
71:a0:79:a7:f2:42:b2:a2:87:81:03:fc:4a:b2:26:52:ce:ea:
38:77:30:51:3e:71:67:2b:0d:8b:3f:ee:a6:bb:1c:f6:02:b3:
14:30:91:02:fa:c4:ff:e7:3e:09:ac:bc:56:f1:b3:db:f6:9a:
c1:1e:29:54:ab:ae:d0:a9:2c:92:e5:c1:47:d1:ca:76:34:d2:
f7:97:da:fd:4d:1d:e8:e0:18:b2:69:7a:f6:d3:e2:24:b9:fb:
35:90:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:09:39 2025 by rpki-client