Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ca73d-d2b8-45e7-898e-efbafab0232b.roa
File: c52ca73d-d2b8-45e7-898e-efbafab0232b.roa (raw, json)
Hash identifier: OOX7KDjZxavSs6fyEG+AgHzOoDZHUMdQjHlTWDUd8ig=
Subject key identifier: B7:11:D5:8B:10:3C:17:1C:FC:68:09:16:47:5B:C7:A2:E0:3D:0D:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AF8018E39CBEF7AEEB687E64740C4D68C4190FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ca73d-d2b8-45e7-898e-efbafab0232b.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 64.52.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f8:01:8e:39:cb:ef:7a:ee:b6:87:e6:47:40:c4:d6:8c:41:90:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=d83667ff816574aba0570a5b0ac34c52ebf73232b3eca2bf934e415a9997a8b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:fb:6b:07:26:90:c1:fb:17:06:6f:99:9d:
09:1f:18:bf:af:c5:d6:23:56:da:07:ab:72:92:85:
65:08:9a:d7:7b:27:14:a9:5f:37:8c:a5:80:10:0a:
c8:cf:4f:71:99:38:09:af:b9:0e:ec:60:5a:5f:1c:
62:58:36:58:3c:26:cb:d8:2b:79:90:3e:5c:1f:ef:
8f:51:d5:e2:ba:e1:67:a1:81:2c:d1:ac:cc:a3:0f:
20:54:4b:49:ed:13:8b:b3:81:72:fb:11:c3:5a:c6:
92:92:63:e3:7d:ba:76:59:02:b5:7d:80:1e:91:1a:
25:82:41:63:9a:0f:e9:f5:ed:55:0f:eb:de:56:69:
7b:56:14:d0:dc:55:b5:4a:90:93:17:c3:71:73:7f:
94:46:39:9d:85:3a:30:22:31:b6:b7:f9:1c:58:27:
c7:a4:9f:63:d9:42:94:93:04:78:e5:0a:0f:09:d9:
f3:a3:62:ba:94:e5:51:ed:f0:cb:28:87:2f:a5:ef:
76:0f:36:e2:80:1a:f3:5e:18:2e:eb:1b:0f:d1:a8:
17:51:e2:8b:bb:a0:09:b5:b2:e5:56:8e:bc:1b:98:
3b:4e:94:83:2e:4d:d0:c3:d4:8e:9a:a2:d2:6a:c8:
5c:16:cb:49:58:6f:95:ee:96:86:c0:94:f0:1c:67:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:D5:8B:10:3C:17:1C:FC:68:09:16:47:5B:C7:A2:E0:3D:0D:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ca73d-d2b8-45e7-898e-efbafab0232b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.52.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:e8:0d:4c:63:12:c1:8f:44:a9:28:07:b1:3d:a0:06:2c:a8:
46:6f:da:08:7c:6d:10:3a:07:ae:d7:ce:68:5a:fd:e5:fd:20:
9b:f5:82:7d:d3:6d:c1:23:4f:21:80:f7:92:df:4a:d6:bb:8a:
1f:94:25:db:ff:5d:bf:7e:a5:2e:bb:b0:5d:3a:98:ee:97:ea:
36:db:ea:3b:93:f8:f5:d1:76:a5:1a:bb:c6:dd:86:7b:1d:0f:
99:74:95:10:b2:d9:a6:64:0d:0f:69:25:b7:71:e1:ab:57:44:
f4:0d:ae:3c:14:47:fb:17:17:66:6e:a6:6d:94:7c:09:9d:0b:
03:d9:29:ef:94:5e:07:dc:bf:cf:77:64:4f:92:fa:a5:26:4a:
8a:23:90:69:1a:3b:33:c0:76:db:24:b2:95:a8:a5:0f:fb:1f:
1d:af:fc:c1:62:7b:e8:ed:43:6a:2c:d3:4c:a3:b5:37:c9:c1:
08:bd:b4:34:cf:31:2b:bb:f5:2f:af:76:2e:a3:cf:64:03:9f:
14:b4:05:d7:f4:45:cb:4c:a7:63:9b:5f:fe:08:cd:34:15:a5:
44:cf:d0:52:a8:c3:30:2c:47:53:08:94:99:db:91:28:a3:fb:
93:12:08:f1:de:8f:2e:cf:07:a4:53:c6:3c:97:7f:69:6f:ac:
b9:08:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:24 2025 by rpki-client