Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde92c11-5f18-46de-8ee4-349fb835fed8.roa
File: bde92c11-5f18-46de-8ee4-349fb835fed8.roa (raw, json)
Hash identifier: +vafJ0nYRlepdT75ISFi+XfiUXl142kVsxXgLgAokoE=
Subject key identifier: C9:EB:22:35:59:87:84:91:B9:CC:AD:00:57:4B:E1:5F:C6:F6:3A:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F10F349797F2DB025EE481B19C79590DD33C7D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde92c11-5f18-46de-8ee4-349fb835fed8.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 173.83.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:10:f3:49:79:7f:2d:b0:25:ee:48:1b:19:c7:95:90:dd:33:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=e359374686e42882520db782bfc1ab72775ef371ce4a61bcfec90df78df0795e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:89:9b:a6:d3:c5:01:f4:50:10:75:c5:4e:
92:95:d9:2e:3a:76:2b:9f:d3:b2:38:f1:3a:71:dc:
03:e8:7b:94:11:de:b6:bd:9f:6d:04:93:9b:68:41:
bc:f2:e1:8c:24:47:a3:13:40:1b:0e:71:96:da:86:
3b:37:49:e6:96:51:16:94:c2:b3:a6:67:a0:39:fe:
6e:c8:28:f9:fd:03:0c:85:25:e9:9e:6d:89:fa:0e:
2c:a9:74:83:ee:7a:86:99:36:86:b9:7e:43:15:15:
ee:5f:b4:35:e8:b7:d1:80:80:4e:34:86:be:52:89:
3d:14:1a:cf:79:4e:f2:b6:00:2d:d1:32:f8:f9:9f:
1e:38:08:cc:c9:0d:72:be:ec:bb:84:ed:1b:4c:2a:
dd:ef:19:d8:50:5b:39:66:c1:8a:60:0d:12:82:a6:
27:46:9c:60:11:ca:0f:3a:42:ca:9d:88:72:43:aa:
dc:c6:5a:be:fd:6a:f7:50:15:46:3e:00:cf:ac:e8:
1f:7e:8f:3b:c3:3b:ff:e9:b0:9b:e3:c5:1c:d1:05:
82:88:1a:b1:a0:10:88:02:92:47:57:58:72:12:cb:
85:96:e4:b8:a1:90:fd:4f:3b:ad:d0:cc:37:64:97:
bd:d7:fb:93:e5:a6:3e:b5:10:ef:19:b7:55:b3:a2:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:22:35:59:87:84:91:B9:CC:AD:00:57:4B:E1:5F:C6:F6:3A:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde92c11-5f18-46de-8ee4-349fb835fed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:01:71:a2:8c:8e:9f:ee:34:e5:2b:e7:3f:9a:29:d4:2f:d5:
3e:4c:60:d4:d5:69:32:c1:b5:24:f9:84:61:d6:4c:61:f6:45:
bf:64:b2:aa:ab:d5:65:07:79:25:ae:e2:42:00:1e:1b:12:29:
48:f2:0d:49:57:f3:87:a5:64:43:08:36:94:da:6b:a5:38:30:
da:9b:92:f2:cf:c6:6c:5d:a3:9b:64:b6:9e:f0:23:db:a5:57:
3b:c4:8d:cd:7f:f6:05:ff:0d:02:b2:41:aa:e6:f5:af:4c:ff:
99:ab:ca:7e:e6:fb:44:d8:e3:9b:0a:64:34:5e:60:38:35:01:
05:c6:56:96:94:ba:ac:b1:06:bb:78:8f:c4:c0:39:ef:6b:2a:
dd:4e:b8:3e:64:1d:04:65:4e:51:eb:ae:2a:77:f1:ff:6b:24:
47:91:26:15:46:97:f5:f6:40:88:08:33:ec:51:ba:6e:80:09:
00:b9:41:5d:ab:b7:89:b8:45:b5:f9:c5:0f:94:76:62:0f:bf:
32:32:06:d6:5b:92:96:64:79:39:8d:e9:c9:93:1e:87:7a:22:
54:4d:d4:89:92:bd:c1:98:53:ce:c7:ed:91:cc:29:fd:07:93:
2b:ca:00:49:c2:ab:6a:28:90:d9:90:22:f3:90:cd:e0:2d:8c:
02:a8:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:02 2025 by rpki-client