Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb763c3-75d1-4003-98de-26bcf0ef2670.roa
File: bbb763c3-75d1-4003-98de-26bcf0ef2670.roa (raw, json)
Hash identifier: 8SBC2N6nipvfOEkkLmp09AnMdKkpzMLpIK+7w4DpeKM=
Subject key identifier: A7:E7:6E:8C:E1:54:E5:BA:64:65:FF:F7:E3:D2:D9:6B:B6:90:B1:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27ABA5350F203AEA048195117C2A5C3ADF1D14E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb763c3-75d1-4003-98de-26bcf0ef2670.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 79.73.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ab:a5:35:0f:20:3a:ea:04:81:95:11:7c:2a:5c:3a:df:1d:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=faf091ef9c5ac2bdd0689d8414faf0fef905c9b228815f08d865b8c7f2f6a3b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:3f:fb:45:00:e7:1a:df:ce:d2:f0:ad:04:
34:df:2d:b7:0b:93:e6:c9:99:3b:a5:b0:80:a8:16:
c7:b1:85:94:2e:07:23:18:da:78:71:27:45:ad:53:
cb:90:ba:d0:75:90:20:ef:4f:53:b0:a1:27:44:64:
06:25:0c:45:c8:b5:f5:de:44:61:37:e1:2a:6e:ef:
84:00:28:00:62:c9:ce:39:fc:74:f3:c8:48:c3:8d:
0b:1c:0c:fa:b1:fc:64:2c:cc:f4:46:9e:09:be:a1:
4e:24:f9:09:0f:03:ae:77:7f:12:a5:e3:a2:79:d1:
96:bc:eb:15:1f:12:69:77:03:d6:ef:e0:5d:df:ac:
86:bd:21:aa:46:a4:05:08:68:ca:0b:98:df:18:32:
49:14:ab:59:b7:35:6e:ce:a4:10:f5:7b:e6:e8:9b:
6c:12:06:da:82:c3:80:d9:5d:10:f6:42:64:6a:7a:
ff:f6:a1:65:d1:b4:5d:a0:56:f9:79:05:8d:41:34:
b1:5b:a9:be:94:df:82:29:0a:31:dc:03:a5:6d:3e:
8f:da:71:ee:36:9a:e4:bc:88:3d:18:b7:9c:42:33:
a5:9e:46:2b:45:d4:73:62:5b:c7:58:f0:e5:9f:37:
40:94:b5:9c:c1:88:db:e1:eb:e8:84:2c:22:ad:09:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E7:6E:8C:E1:54:E5:BA:64:65:FF:F7:E3:D2:D9:6B:B6:90:B1:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbb763c3-75d1-4003-98de-26bcf0ef2670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.73.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:92:5a:43:df:29:2a:26:8f:a1:06:d3:f3:ba:79:d3:f0:1f:
e2:81:1b:91:b9:30:59:f7:ea:a0:51:00:76:18:5c:f8:46:6a:
d4:f3:14:80:b7:ae:0a:b6:18:80:9f:fd:ed:01:5b:50:86:f1:
b2:8c:e1:e3:72:7c:1b:61:66:03:f7:9b:45:4d:e4:f9:9b:dc:
3c:cc:6d:98:36:b4:09:c8:ac:ca:9d:33:7f:62:2f:90:ca:8d:
ca:7b:d1:d3:b4:bc:b7:24:2f:a0:a4:3f:20:2b:6b:8f:a9:76:
ef:af:57:0b:10:44:65:fd:57:9d:52:bd:33:a6:ae:f5:ca:90:
55:34:73:94:81:ff:5a:48:f5:22:d4:8e:e8:cb:06:ec:36:65:
04:87:3c:e5:67:a5:ac:b3:4a:e6:98:1d:74:f5:9f:ee:a7:12:
9c:05:51:e0:27:59:9b:f0:4f:ea:5d:11:f0:d5:40:17:64:08:
a1:c3:b0:53:62:96:b4:f5:27:59:bf:55:93:b1:6c:90:d7:81:
18:61:d6:ef:1c:70:51:f7:d2:36:b9:48:ec:37:9d:a9:3e:f9:
33:20:92:7b:af:bd:2e:67:1d:3b:65:15:e9:02:9d:fd:0b:92:
e3:de:9e:6a:df:a3:14:42:38:6e:06:76:fb:a8:68:5e:3c:99:
c7:c6:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:57 2025 by rpki-client