Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae7fd512-be39-49fd-a290-231494080d7f.roa
File: ae7fd512-be39-49fd-a290-231494080d7f.roa (raw, json)
Hash identifier: Acvdoe9HNiwaYuJUbmHih8Hbp1WgcIUAcq7suoytcLw=
Subject key identifier: DA:2C:D9:12:DA:12:F4:5C:A4:D2:54:AF:EE:63:43:5B:AE:38:CB:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2077E0E1DCFD84810A22CD90546363C9C2C9652F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae7fd512-be39-49fd-a290-231494080d7f.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:77:e0:e1:dc:fd:84:81:0a:22:cd:90:54:63:63:c9:c2:c9:65:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: serialNumber=24de8ef5013ee7b6267a485d7138f16b7e1f2091cf3597c57ed820c08e51494a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:2b:c5:16:4a:bf:1c:86:56:a3:f8:62:02:
ad:9b:e7:eb:69:5f:7f:23:3f:3c:0c:70:d7:bc:18:
cd:23:e6:8f:cd:ca:32:8e:eb:a4:83:29:37:36:f5:
4e:4c:8b:19:ca:39:0e:ec:37:e0:69:c2:e2:5e:59:
1e:11:1a:58:fe:75:f4:f5:f2:43:db:e7:89:3f:a4:
40:42:b7:69:de:ea:ed:c5:6f:5d:22:10:bb:ec:d4:
58:96:19:8a:27:6f:e8:46:1c:11:8b:74:21:3c:3f:
2f:d1:76:c0:83:83:df:be:e3:e6:fe:c1:75:76:31:
74:c4:aa:1c:5a:6e:9c:d4:c5:af:71:44:0f:b6:4e:
c6:58:ba:e7:6f:91:04:61:41:c1:65:a8:96:06:90:
88:e1:af:a9:62:5c:a2:30:30:be:e3:50:02:53:41:
e7:9f:ad:5b:ba:ff:4c:d5:c4:49:75:b7:3f:c4:26:
63:56:e9:47:af:8e:d7:7b:12:f4:d1:27:80:d1:bc:
ef:bc:bd:60:d8:15:bd:73:c4:d1:8a:54:ea:61:c7:
e6:3b:70:1e:5d:aa:67:bb:8b:4d:29:59:86:e4:0d:
fd:65:02:0a:c9:a8:f9:8f:51:ec:fb:81:7b:0c:e2:
56:ed:dd:fd:ff:ca:44:c8:21:93:80:94:5e:23:5b:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:D9:12:DA:12:F4:5C:A4:D2:54:AF:EE:63:43:5B:AE:38:CB:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae7fd512-be39-49fd-a290-231494080d7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:c3:b2:ff:69:b3:03:34:62:77:d7:4c:85:05:03:2b:3f:d8:
8e:5c:5f:f6:10:96:52:b0:a4:17:1c:e3:b0:80:58:59:18:1a:
39:4c:6c:28:e6:6a:07:f0:f1:3e:97:df:e2:ba:a3:f9:e1:53:
72:c4:3b:2d:db:d9:5a:b8:c9:63:9b:67:90:62:da:03:c2:41:
af:c0:ac:17:35:c2:62:57:48:64:78:1c:d1:89:0d:0d:e6:70:
a7:ed:e1:79:3c:9f:30:ef:11:cf:8a:e4:c3:be:27:a7:81:ac:
61:f7:54:dc:fd:da:a0:c5:cf:fe:7b:10:00:91:9c:08:9f:59:
83:87:b5:85:c2:2e:75:82:dc:84:de:28:0e:e1:76:90:73:17:
7f:f2:7e:f5:67:3a:bc:3a:4a:3f:e3:b1:6b:b5:f5:34:9c:66:
4b:1e:47:9d:f2:38:67:8f:61:83:e0:e2:3b:26:ec:da:85:e0:
8e:22:c7:db:23:4b:66:ef:c0:b3:ad:6f:35:ad:15:cd:39:81:
88:fe:1c:58:1e:f5:ab:9a:a5:e5:f4:98:1b:bc:76:df:b8:81:
39:41:a4:df:17:57:1f:ad:57:5f:40:c4:0c:71:0d:1f:9a:b4:
1e:2b:da:eb:3b:b4:e5:44:55:87:5d:b3:cb:10:cc:dc:83:e9:
73:4c:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:00 2025 by rpki-client