Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c462d9bb-944f-472f-b963-e39acda58922.roa
File: c462d9bb-944f-472f-b963-e39acda58922.roa (raw, json)
Hash identifier: NX2jKbRlWvPwk2ACSRrd55R8mJKfmZPLU9iC+7Z6ANg=
Subject key identifier: F9:E0:9D:89:C8:D5:DC:B9:A6:99:1B:8A:90:6B:11:D9:A9:D2:49:C5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BE7CBA508C8A667CC8E372B984B86E6083DA133
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c462d9bb-944f-472f-b963-e39acda58922.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 89.48.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e7:cb:a5:08:c8:a6:67:cc:8e:37:2b:98:4b:86:e6:08:3d:a1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=6d3c32819e6d1ba687f9f81c55d54dcab0b1da5269493f012def241799bb2afa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:ab:2f:a2:da:fd:c5:85:7a:6c:5c:76:7c:
5b:07:9e:3a:ce:c2:dd:0e:5c:6b:8d:3a:94:5e:fe:
7a:c5:cd:2a:87:70:ea:07:06:de:5d:61:7c:d6:71:
44:fa:09:b5:93:b4:29:1d:0b:f1:52:1f:38:c1:07:
15:80:08:76:7d:81:05:c0:58:4f:9b:9a:26:0f:2d:
58:60:fc:46:ff:b3:ae:5d:b5:f7:21:27:15:73:9e:
db:b7:15:69:6a:ec:6e:26:11:8c:26:c7:4d:8a:cc:
7e:b0:ac:61:93:0c:15:d0:6e:ce:97:35:b0:54:78:
71:ff:22:52:ce:c8:ce:b9:56:23:5e:dc:21:13:8c:
15:8e:8b:36:49:3b:23:67:e0:9b:49:57:b7:c1:8e:
29:15:51:96:e5:72:b1:32:67:a9:2d:e0:43:ac:c9:
7e:6e:9b:9b:7d:6b:ac:5d:43:65:af:9a:89:91:c7:
4d:30:dc:fe:cc:6a:fc:4f:63:f3:44:46:32:bd:67:
30:d9:46:d6:49:e0:e7:1d:59:2a:d8:c6:62:b4:91:
ee:ca:a5:12:7b:12:8e:87:68:cb:c8:80:c5:ab:40:
4a:44:dd:df:35:1c:36:6f:ed:e7:56:5a:21:78:9a:
60:e5:d2:1a:9d:6b:6b:24:00:d3:86:6c:84:93:ac:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:9D:89:C8:D5:DC:B9:A6:99:1B:8A:90:6B:11:D9:A9:D2:49:C5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c462d9bb-944f-472f-b963-e39acda58922.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.48.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a5:64:d7:9a:7e:6e:08:ec:59:94:3d:f9:f3:13:7e:f2:3f:bb:
04:1d:e9:c1:e5:d7:e9:5a:6d:ae:20:8f:1f:d8:62:af:e7:50:
4d:7e:0a:44:c8:77:40:55:f6:ff:72:97:02:ab:f5:63:ed:47:
8d:e0:74:b9:6a:ca:1d:b8:f6:43:65:2d:8f:60:60:1c:d8:bb:
43:31:45:2e:ca:51:c3:35:29:9e:f8:1c:96:5a:4d:18:88:6e:
df:4e:67:d9:ac:32:94:da:7b:ef:37:14:17:ee:52:b8:0e:76:
4a:85:41:bf:de:63:42:b7:0f:4e:de:ee:ef:6c:1a:96:96:de:
42:82:81:b6:a2:ca:6a:fa:ab:bb:38:1b:e1:88:62:e4:4c:c4:
95:a9:14:7c:5e:dd:ad:f3:1f:65:a7:a5:55:c7:64:0d:fe:d2:
f4:48:6d:fe:f9:09:33:ee:6b:be:93:fe:25:4e:b3:5c:a6:1d:
51:a2:6f:87:3a:f0:57:8c:ea:d5:f0:e1:ec:bd:93:b1:9e:a6:
39:6b:52:d4:57:e4:c2:52:3f:05:0c:6e:b0:78:3a:d9:d2:1a:
67:d3:ed:4a:53:39:d5:a4:9a:f0:ea:a4:57:69:75:0e:d8:cb:
fd:d3:aa:5b:3b:c8:85:3a:15:a5:b6:72:86:d8:5c:d2:fe:28:
03:72:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:31 2025 by rpki-client