Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab9670be-c680-4e9b-81fc-dd1e82adfbf0.roa
File: ab9670be-c680-4e9b-81fc-dd1e82adfbf0.roa (raw, json)
Hash identifier: gFzbRMFRJm3nIlBBxHVduskgWXQdz/P/kknZrVvgDBA=
Subject key identifier: CE:78:27:C7:3E:6C:27:A6:8E:7C:03:D1:1E:E7:73:3A:2E:7A:B4:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05BDF0FACA148FB546C83EC642233B40E532FE46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab9670be-c680-4e9b-81fc-dd1e82adfbf0.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 88.104.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:bd:f0:fa:ca:14:8f:b5:46:c8:3e:c6:42:23:3b:40:e5:32:fe:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=667262826e56c8de883cce2ed070bdc8795a73a76caef4c0643d3c36a70464df, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:0d:ec:b1:2f:f1:3a:46:2f:a7:5c:bf:0b:
fc:ec:87:a4:63:bc:ba:bf:77:e7:2c:14:60:a6:bd:
93:9c:8b:76:01:7b:a3:43:32:f2:3b:ae:83:b6:a5:
ff:8b:b7:c8:8c:17:db:86:32:ff:37:ea:7c:4f:7a:
a2:02:d8:cb:dc:c8:7d:38:17:95:d5:c6:c7:86:2b:
69:10:f7:54:bc:da:04:98:d5:62:2b:74:b9:8f:f9:
e9:a3:7b:0a:4f:67:71:e8:5e:e0:9a:ca:d0:4f:79:
48:26:58:54:79:4e:b7:cc:57:be:d3:49:df:31:e7:
d4:53:6e:a0:78:e7:37:7b:c3:23:cb:62:60:7e:4a:
a0:3c:91:bc:bc:83:5c:c9:06:ba:2a:0d:55:a3:be:
01:9c:ec:70:37:f7:0f:35:ff:3b:8f:09:4a:07:a7:
a9:46:f7:f3:66:1c:77:04:3b:22:d0:9f:5b:7f:c6:
37:e5:01:95:ea:52:24:56:09:74:09:ee:d7:47:24:
14:89:76:04:33:7f:d6:22:4e:14:72:08:5e:e0:cd:
34:e9:8c:6a:b3:6c:2f:31:37:c4:42:eb:f8:a4:45:
7d:40:a9:d9:56:4f:23:f0:a9:81:e2:4a:89:41:33:
28:a5:06:ff:de:4d:bf:f9:de:23:fb:49:4b:e9:62:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:27:C7:3E:6C:27:A6:8E:7C:03:D1:1E:E7:73:3A:2E:7A:B4:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab9670be-c680-4e9b-81fc-dd1e82adfbf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
06:77:e5:a9:bf:7e:56:72:2c:0a:6f:9c:07:45:dc:83:0c:58:
84:df:2d:82:d7:e7:cb:79:f8:6f:30:f7:ac:38:f2:e6:ee:cc:
2a:47:21:27:07:2c:35:79:18:87:84:e5:e9:1a:c3:13:6b:c3:
23:79:6b:bd:f7:c1:17:f9:30:55:0d:d0:99:e9:10:23:b1:db:
8a:6f:f3:ac:dd:8b:d3:61:ac:82:10:23:ac:22:9c:5d:43:ba:
47:c1:46:d8:83:a2:77:6c:48:70:cc:49:d1:3d:73:4e:1f:df:
f2:da:37:ba:fa:5e:f4:13:65:d9:0a:61:7b:2a:1f:28:08:b0:
06:2d:e6:83:8e:54:5d:23:a5:25:45:8d:8e:0a:2c:95:9e:44:
fe:61:7a:17:51:7f:13:58:0a:9e:9a:28:b1:d3:aa:04:2f:2b:
9e:64:97:e6:a2:f6:29:e4:fe:9a:51:65:6c:67:f4:b3:f7:51:
1b:e1:1e:59:00:40:3c:85:7a:b5:99:bd:63:38:f5:15:92:1e:
5c:cc:57:21:f2:c2:e6:90:81:b5:0f:66:3c:61:95:2d:3f:81:
6f:c8:f0:c4:37:51:87:4a:ea:d7:de:53:ed:f8:d9:7b:ad:fa:
5a:9a:54:df:60:e1:1d:bf:ec:e9:e7:29:d6:94:c7:20:06:6d:
46:31:02:35
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBb3w+soUj7VGyD7GQiM7QOUy/kYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTEzMDAwMDAwWhcNMjUwMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NjcyNjI4MjZlNTZjOGRlODgzY2NlMmVkMDcwYmRjODc5
NWE3M2E3NmNhZWY0YzA2NDNkM2MzNmE3MDQ2NGRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfzg3ssS/xOkYvp1y/C/zsh6RjvLq/d+csFGCmvZOci3YB
e6NDMvI7roO2pf+Lt8iMF9uGMv836nxPeqIC2MvcyH04F5XVxseGK2kQ91S82gSY
1WIrdLmP+emjewpPZ3HoXuCaytBPeUgmWFR5TrfMV77TSd8x59RTbqB45zd7wyPL
YmB+SqA8kby8g1zJBroqDVWjvgGc7HA39w81/zuPCUoHp6lG9/NmHHcEOyLQn1t/
xjflAZXqUiRWCXQJ7tdHJBSJdgQzf9YiThRyCF7gzTTpjGqzbC8xN8RC6/ikRX1A
qdlWTyPwqYHiSolBMyilBv/eTb/53iP7SUvpYotfAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUzngnxz5sJ6aOfAPRHudzOi56tI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiOTY3MGJlLWM2ODAtNGU5Yi04MWZjLWRkMWU4MmFkZmJmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFYaDANBgkqhkiG9w0BAQsFAAOCAQEABnflqb9+VnIsCm+cB0XcgwxYhN8t
gtfny3n4bzD3rDjy5u7MKkchJwcsNXkYh4Tl6RrDE2vDI3lrvffBF/kwVQ3QmekQ
I7Hbim/zrN2L02GsghAjrCKcXUO6R8FG2IOid2xIcMxJ0T1zTh/f8to3uvpe9BNl
2QpheyofKAiwBi3mg45UXSOlJUWNjgoslZ5E/mF6F1F/E1gKnpoosdOqBC8rnmSX
5qL2KeT+mlFlbGf0s/dRG+EeWQBAPIV6tZm9Yzj1FZIeXMxXIfLC5pCBtQ9mPGGV
LT+Bb8jwxDdRh0rq195T7fjZe636WppU32DhHb/s6ecp1pTHIAZtRjECNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:28 2025 by rpki-client