Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab32ebb5-766a-4bec-a181-13b9e2d1ee85.roa
File: ab32ebb5-766a-4bec-a181-13b9e2d1ee85.roa (raw, json)
Hash identifier: zdX3TlmWhCHQm62ZLKv84WngNpx2LGd/MkKp9GGttI4=
Subject key identifier: 7B:8B:A7:4E:D1:3E:13:50:EB:4C:24:E2:EC:E5:CF:D4:05:EB:6D:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D9E5B6022DDD365F83707D22C6338381ED4C5F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab32ebb5-766a-4bec-a181-13b9e2d1ee85.roa
Signing time: Wed 15 Jan 2025 00:00:00 +0000
ROA not before: Wed 15 Jan 2025 00:00:00 +0000
ROA not after: Wed 19 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 167.241.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9e:5b:60:22:dd:d3:65:f8:37:07:d2:2c:63:38:38:1e:d4:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Feb 19 23:59:59 2025 GMT
Subject: serialNumber=0419bf780bdfd5b4453e45e3a624119eccb8eefb9e751065e6182bf4fd421d5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:6c:4a:c4:6b:93:3b:4b:8a:26:a9:4b:00:
01:71:81:54:f3:9e:44:55:61:39:cd:72:51:7f:f4:
12:80:72:4b:9c:30:f7:a7:0a:68:ef:16:e5:73:7a:
bd:6d:e1:2c:0d:6b:34:3c:06:0e:25:ab:0f:e9:04:
bd:e8:24:7c:46:b9:77:11:7d:f6:39:90:a8:59:d1:
8a:3a:ca:be:8b:27:41:1c:9b:53:77:06:d6:f0:f8:
d1:d4:3d:a9:7c:52:02:67:a3:0d:4d:98:bb:00:ff:
69:ad:de:68:8f:c7:51:c3:e9:2f:12:c2:5f:f9:f9:
2a:aa:dc:38:6a:a2:ff:93:cb:a5:14:4d:e9:eb:16:
ab:72:31:2e:86:a8:c1:58:46:38:d8:5f:cf:fb:f3:
25:25:67:0d:30:04:21:d4:50:99:dd:f2:03:3a:46:
ae:0e:99:5c:b8:58:bf:a3:22:f1:1d:ad:77:9f:42:
b9:d6:9c:c3:46:b1:4c:3b:b2:77:26:8b:2f:84:a0:
f2:53:55:ee:26:10:f3:39:05:d7:bb:0b:39:e7:ee:
15:3b:6d:af:10:d1:02:08:a5:55:c6:9a:0a:b7:e3:
2a:ba:32:80:79:fb:3c:ad:1e:4c:9f:75:77:71:a4:
93:96:58:49:96:2e:2a:5e:d3:d4:6b:e3:8b:ba:87:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:A7:4E:D1:3E:13:50:EB:4C:24:E2:EC:E5:CF:D4:05:EB:6D:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab32ebb5-766a-4bec-a181-13b9e2d1ee85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.241.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:b2:9e:32:3d:83:bc:61:50:33:82:75:5b:64:5d:00:26:74:
e1:a1:96:04:95:2d:b8:4c:9e:fe:07:be:71:0a:34:73:e2:cd:
83:8a:5b:36:19:a8:03:9f:64:df:c2:c8:38:1a:1a:d7:56:f2:
3f:4d:d2:eb:c8:5f:97:d5:1c:d1:07:52:e4:e9:27:39:c4:fd:
a8:30:31:f6:00:d5:7b:94:7d:7a:50:ce:50:6c:f9:de:25:df:
d4:10:a2:25:c1:65:da:dd:b0:09:1c:bf:ae:c1:ef:5b:4e:72:
f0:27:8c:59:0f:71:4d:db:4d:dc:2e:f9:1d:ae:b4:7b:7b:3e:
54:fc:b6:90:a4:bc:79:2f:e4:6c:85:c2:37:83:41:15:f6:bb:
d9:08:b4:3e:cf:3a:1c:c9:7f:70:9f:e5:29:2e:99:48:1b:7a:
2b:42:65:68:95:ad:3f:bc:58:4b:54:3d:1e:f4:10:70:81:9e:
a9:8e:53:a5:45:35:e4:5f:e3:64:df:fb:4f:ef:00:52:8a:00:
f4:90:4b:0b:e0:dc:7c:0b:75:d3:c5:b6:0c:1a:d2:bb:b2:aa:
7a:92:1e:8e:fa:bc:8c:31:76:40:18:45:79:df:53:a5:d5:90:
52:02:dc:bc:da:f4:9c:9e:fe:b6:51:40:64:0e:81:3c:12:16:
52:02:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:13:32 2025 by rpki-client