Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4141d0a-3014-4517-89f9-fd971d823428.roa
File: c4141d0a-3014-4517-89f9-fd971d823428.roa (raw, json)
Hash identifier: z3yNbgnTEmrWbW7bDtUNMK/tRuekF3WFJzx/Z8pYUyE=
Subject key identifier: 50:F5:BE:47:2E:B9:28:6C:F9:58:6B:3D:F4:BF:02:22:DA:C9:27:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EBC84A55F207FA3DEE04C1E28375D0D52E6D7AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4141d0a-3014-4517-89f9-fd971d823428.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 104.216.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:bc:84:a5:5f:20:7f:a3:de:e0:4c:1e:28:37:5d:0d:52:e6:d7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=ba83fb89b86af2c7cede376fff915bdd7bfede6397f3c8170dd80e9b6317bd08, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:84:28:0c:2d:e4:9b:b2:33:40:3b:71:22:
fc:76:07:94:1f:9c:e9:9c:5f:f5:0e:bd:71:55:32:
61:c1:df:34:64:9b:ff:ac:15:a5:c7:cf:db:6b:6b:
ad:59:08:4f:e2:f9:14:fb:0c:6a:bb:f4:11:d9:c4:
76:1b:e4:a3:0f:34:fd:53:96:d6:37:38:ec:0f:b6:
11:a9:e4:ac:5a:70:23:fc:9c:26:2f:51:c1:ff:6f:
4a:60:2a:2a:95:85:91:e5:08:3c:ba:e5:33:0a:f4:
92:f0:c1:ab:e1:b1:29:a5:c8:52:78:eb:25:c2:c3:
54:f3:c8:78:87:3e:fc:43:42:1c:e2:2a:04:70:64:
91:7f:e7:fb:27:68:e7:73:47:74:5d:9f:7b:bf:bc:
1a:3c:f9:4e:bb:5b:4e:bb:ee:eb:69:55:94:98:a8:
d0:99:ff:d9:4d:1a:1d:c2:e2:80:15:f8:11:d4:5d:
26:0a:8e:96:46:89:1f:96:77:a9:92:ab:9d:96:51:
36:c5:4a:55:44:20:3a:08:37:de:71:4c:7f:9e:1e:
c4:01:b9:87:83:aa:dc:ce:f7:7c:7e:6c:17:d5:39:
78:ff:1b:ad:84:64:62:80:81:21:6e:a0:87:be:cb:
a7:82:f3:2c:c7:a0:57:b9:63:a6:8f:1a:ea:f9:76:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:BE:47:2E:B9:28:6C:F9:58:6B:3D:F4:BF:02:22:DA:C9:27:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4141d0a-3014-4517-89f9-fd971d823428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1d:35:cb:37:9a:48:16:65:04:87:76:7e:ee:b9:83:93:8c:56:
18:b7:02:41:ca:cb:af:e3:01:32:f8:b9:5d:cd:94:b2:ee:8f:
6d:ae:d2:52:74:90:87:55:3e:fa:bd:c2:83:8f:14:16:58:94:
dc:b7:7b:17:2a:3a:c2:05:91:04:a3:2b:e2:9b:bb:bf:77:63:
1b:71:21:6f:ce:e5:2f:ca:96:26:13:15:5a:2f:a0:3e:5f:52:
cd:70:b0:2b:07:5d:3d:50:ca:ac:40:3a:2a:2c:a2:22:56:df:
bb:ae:86:59:64:15:df:73:2b:c7:aa:3e:b6:9c:32:fd:62:9e:
4b:72:1f:3e:f2:c2:73:7e:ae:4f:3c:0b:9b:4c:32:bd:4f:a0:
3f:08:d7:7a:99:5b:67:21:07:ce:4b:02:a2:28:67:fe:f5:1c:
80:8b:c3:b4:f4:0d:a6:f4:93:7d:fb:5e:9c:54:aa:98:ec:c0:
25:a8:65:64:14:7a:a8:18:a3:ee:c8:05:fc:1e:44:21:86:8c:
c1:3e:50:a6:73:82:a2:54:dd:29:db:be:a0:0f:7e:e9:d0:72:
14:dc:0b:c4:a0:1b:7e:24:10:87:cc:e2:a8:67:81:47:cd:6b:
89:3b:ef:f9:63:8e:28:30:19:9a:ff:0f:b0:86:9b:e6:48:ba:
2a:48:dc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:19:13 2025 by rpki-client