Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4aa0cef-c92e-4857-9d3c-885102b4386f.roa
File: c4aa0cef-c92e-4857-9d3c-885102b4386f.roa (raw, json)
Hash identifier: z8/FsTfABMDebwQaIHxtC4iSV7FGm9mDxUpXoojxNLo=
Subject key identifier: 7C:39:C8:C7:62:4F:C8:4B:B4:D5:C0:27:76:EB:FA:72:F8:94:44:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D717AAA24F2F83DBB605C4A62B4597AA8827706
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4aa0cef-c92e-4857-9d3c-885102b4386f.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.184.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:71:7a:aa:24:f2:f8:3d:bb:60:5c:4a:62:b4:59:7a:a8:82:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: serialNumber=2685c8386eef8c18854796975853f26530639271363c901ba48e83c1a05aa6e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:a9:c7:ce:6f:37:65:65:af:23:f2:e0:d1:
5e:d3:f1:3a:63:cc:10:96:74:3e:3a:d0:5d:0e:8c:
d4:03:fd:65:8c:9b:e8:39:22:56:9e:f9:8f:90:28:
5d:19:00:75:e2:09:6c:65:57:37:a3:f3:01:00:86:
11:4b:b8:1e:22:db:30:e7:4a:c5:86:27:07:c4:63:
50:14:14:f4:9e:57:7f:b9:74:bb:57:af:9f:d4:3d:
41:2c:58:0e:5e:7f:42:2d:09:60:dd:58:59:0b:b2:
02:5d:49:17:50:39:61:2b:8c:5e:61:08:21:97:3e:
4a:d9:2b:d2:8a:83:d8:22:19:48:53:5b:48:8e:b6:
eb:96:36:3a:56:ac:32:39:9c:b1:93:b1:5e:93:2a:
fa:5f:d8:d4:e1:97:6c:94:e7:d8:6c:82:02:7a:b1:
95:65:1f:81:c4:3a:3c:5c:69:e3:6f:19:ce:25:12:
f5:6f:db:79:49:19:5f:e3:40:9c:63:d2:1e:0f:69:
49:5d:e3:48:30:25:f4:a8:38:5b:88:b0:36:8f:69:
d7:37:32:20:b0:db:b7:e6:89:a6:f3:b0:5e:1e:aa:
23:ff:98:75:48:39:18:0d:c4:26:ec:43:17:ea:d8:
90:a2:b4:75:f0:fb:68:71:c6:5a:5d:3a:f9:44:1f:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:C8:C7:62:4F:C8:4B:B4:D5:C0:27:76:EB:FA:72:F8:94:44:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4aa0cef-c92e-4857-9d3c-885102b4386f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.184.0.0/18
Signature Algorithm: sha256WithRSAEncryption
51:57:a8:6b:43:2b:d5:4c:79:b0:fa:8a:e3:d4:a7:e8:9d:1a:
05:97:ee:19:b6:af:45:ff:a2:29:12:2f:5f:40:a4:80:d6:ba:
cc:e3:79:58:1f:38:d7:eb:b5:89:7c:f5:73:db:a2:c7:69:16:
e7:24:73:6a:83:16:1b:47:7d:cf:7e:dd:0d:d2:c9:00:8a:c7:
71:03:5c:fb:9d:43:b0:fc:5e:cb:ab:f7:0f:ef:09:50:c7:d1:
4c:96:1b:89:cd:bb:01:18:2e:ec:05:40:4a:88:30:a1:07:4e:
b7:3e:d6:d7:71:49:b9:fd:1d:e6:64:79:39:d6:33:57:fa:2a:
7c:75:d8:23:98:06:33:dc:51:cc:9c:77:ff:20:ec:f4:98:b4:
42:9f:d0:be:a1:ec:6f:ed:c1:8a:43:4b:55:27:19:93:6b:b4:
ff:5f:39:a3:66:a8:70:36:30:af:cf:d5:cb:e8:63:0e:71:82:
ea:e9:31:a0:6a:3c:98:6a:90:99:54:d1:c8:50:97:e9:30:b9:
12:67:ab:53:0c:1e:30:9e:68:7c:76:17:f4:d4:fb:07:79:48:
c2:f6:f2:85:76:a7:cb:2e:a8:49:e4:3f:ca:73:13:41:30:18:
a3:95:c3:91:d3:d9:ab:93:40:58:f7:26:fe:ea:b8:dd:c2:d0:
4d:a8:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:18 2025 by rpki-client