Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b482a701-b585-4388-b9c8-e05a3a240f2d.roa
File: b482a701-b585-4388-b9c8-e05a3a240f2d.roa (raw, json)
Hash identifier: S9xwHtM5zQNB8CpONcS71zRehS6uMMN6ua8zt00I8XY=
Subject key identifier: 06:B6:92:BC:C8:AB:97:76:AA:E9:9B:6F:0D:72:40:36:28:21:F5:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4544B001445A112AED0BAEDDB0DAAC95CF5021B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b482a701-b585-4388-b9c8-e05a3a240f2d.roa
Signing time: Sat 28 Dec 2024 00:00:00 +0000
ROA not before: Sat 28 Dec 2024 00:00:00 +0000
ROA not after: Sat 01 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:44:b0:01:44:5a:11:2a:ed:0b:ae:dd:b0:da:ac:95:cf:50:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 28 00:00:00 2024 GMT
Not After : Feb 1 23:59:59 2025 GMT
Subject: serialNumber=44491c38491d9dd24cd96b5703995670c3c719ecc3cbcd5b605f5236bb70d7fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:39:5b:68:7c:c3:ba:b7:6d:ae:7b:2c:70:
17:55:a3:7e:d7:44:c1:81:ab:65:36:39:49:f3:91:
ac:13:30:df:e2:12:95:24:1a:3b:20:9d:36:df:fc:
fd:3b:67:76:3e:d3:4c:05:f2:a2:43:5a:8f:34:ca:
55:e4:87:4c:57:c9:f3:90:56:6f:fc:bd:1d:5b:8d:
00:01:55:f6:0e:91:c9:ae:5d:be:70:cf:64:1d:a7:
f0:f9:63:0e:83:9f:6a:23:38:c6:77:6d:16:55:15:
20:17:62:d0:79:7a:f0:3f:14:a3:8b:79:b5:4c:57:
8e:47:5a:7e:6e:e5:8e:17:2f:18:b3:a7:07:24:3f:
91:f9:0f:f2:46:bd:4d:0e:df:73:cc:92:1d:65:ca:
f4:1c:e9:f7:5f:16:6a:a7:35:4f:51:dd:b3:ba:7c:
95:c9:5e:c9:3e:d8:19:0b:46:67:4b:ba:21:94:5c:
97:44:f6:9d:1c:6d:38:41:3b:ca:12:93:56:e2:ef:
b6:4f:fe:e4:22:43:44:65:d2:0a:36:83:fb:fe:f6:
f1:52:7b:33:1c:ad:d5:98:ec:3c:02:de:9f:c9:7d:
9f:8d:eb:3c:db:c8:ee:79:b8:f0:24:46:a5:4c:6d:
47:bb:b2:8a:67:65:e9:cf:a5:21:d4:a1:c5:5b:d0:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B6:92:BC:C8:AB:97:76:AA:E9:9B:6F:0D:72:40:36:28:21:F5:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b482a701-b585-4388-b9c8-e05a3a240f2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9e:4e:87:98:ec:ab:3b:27:7a:9d:d0:12:1f:33:14:ce:16:
25:1a:7f:6e:01:65:f8:d2:68:1d:01:64:39:ab:ff:96:75:4a:
fb:00:a2:43:2a:f6:40:46:83:c6:bc:fe:60:8b:2c:d3:9a:9a:
f4:7d:2a:44:0d:c7:b6:fe:00:02:b2:d6:d9:1a:0f:c6:cb:c5:
95:50:47:14:a9:03:91:56:bb:59:9a:21:88:ea:1a:24:3c:25:
2a:81:75:bd:08:83:00:6b:f9:bd:ae:c0:5c:d1:43:88:d6:25:
a3:e9:c9:0b:e9:b2:c2:d6:75:3d:f6:98:20:de:c2:1d:ee:8b:
5e:24:d7:ed:e2:ce:c6:39:45:f8:ab:bb:fa:f5:46:e8:f6:60:
98:b1:4a:36:fe:7b:54:ec:02:3d:ba:bc:67:c9:84:f9:49:9a:
c6:95:0e:f5:7f:4a:0b:78:05:7b:e5:e4:ef:81:74:b7:3e:29:
c7:c0:ca:91:5a:ec:d5:80:2b:9b:7b:1e:2a:98:07:32:d7:9d:
51:b1:0e:1e:d8:f2:41:de:f1:2a:cb:18:3b:cd:96:99:6d:2a:
23:da:97:fc:d7:09:7f:b6:13:70:2b:95:2c:98:6b:79:19:b3:
e9:43:19:12:32:f8:35:63:fc:75:b1:0f:e4:74:ae:45:bd:1d:
93:d0:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:34 2025 by rpki-client