Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dd1bfe-5839-48bd-b0a1-3e065e400973.roa
File: e1dd1bfe-5839-48bd-b0a1-3e065e400973.roa (raw, json)
Hash identifier: y153LNwIs08m6iNRcOnBAcTOkD0rhQ0yRMgBDpbTG4I=
Subject key identifier: 14:CF:19:48:97:91:FD:E9:D8:8F:87:E8:F8:E9:BB:35:31:14:62:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DFC44B9E8D1B4E8E9DD06D7355D7CD2D2834E0E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dd1bfe-5839-48bd-b0a1-3e065e400973.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 135.22.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:fc:44:b9:e8:d1:b4:e8:e9:dd:06:d7:35:5d:7c:d2:d2:83:4e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=e513f1aa38b54e12daa053d44e16e6eb6af85db89c764cd54f6f2fc8bf646ac3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:42:20:0e:d3:64:4f:cb:88:cc:f1:07:f5:
65:8e:7d:cd:c0:67:5d:ce:50:7c:ba:e0:fa:2e:7d:
a5:a7:7c:d5:30:28:3e:3a:54:69:c8:e4:7d:e3:fb:
e0:d7:7b:3d:df:b8:43:23:51:41:70:08:c1:55:26:
95:68:d1:0b:2e:dc:7b:70:f2:6d:c8:77:38:39:b1:
a1:37:a4:eb:1d:c2:95:57:65:79:fb:9d:e0:3e:c9:
33:de:9c:e3:31:1f:95:7b:6f:5f:b2:18:44:54:23:
28:f8:34:36:7a:9a:51:79:d8:c3:47:b3:cc:0a:12:
8c:ba:55:05:b8:9c:70:e3:44:70:41:65:88:1b:e7:
65:16:9b:1a:7d:1f:33:ec:54:11:21:5f:fc:95:e7:
98:3a:04:64:cb:60:7b:33:85:5d:a2:a0:b8:97:bb:
43:b6:06:f1:b9:da:cf:ea:94:bd:0a:b1:49:b9:8f:
4c:4d:a0:63:b4:3c:c9:97:22:e8:db:c3:3b:6f:31:
e6:24:7c:ec:2c:53:f7:cc:cb:23:7a:d9:bc:4b:48:
40:1b:87:af:f0:e1:1a:7b:c6:aa:e6:85:ab:16:99:
a3:b6:1b:0a:ec:7b:2e:e7:ea:30:2d:2a:2f:0e:85:
8c:a3:46:ff:b3:16:93:e8:9c:5f:1b:15:21:6f:d6:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:19:48:97:91:FD:E9:D8:8F:87:E8:F8:E9:BB:35:31:14:62:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1dd1bfe-5839-48bd-b0a1-3e065e400973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:62:99:cf:a8:db:63:6b:fa:3e:47:a0:26:6d:86:d1:ce:76:
18:57:5a:ef:b0:64:75:53:e8:89:47:1a:d2:62:4e:1c:60:82:
af:da:05:4e:9d:45:10:e8:87:39:84:8a:ee:2c:a0:0d:a5:86:
e8:fc:6e:7a:30:16:5f:1a:f4:db:4e:69:a1:62:05:42:4e:db:
54:90:88:76:d3:52:c7:01:b6:fd:8d:00:60:d1:04:bd:ae:2b:
f0:f9:af:49:9b:88:ce:1e:03:bb:92:39:85:b7:b1:2f:2f:fb:
1a:a7:fe:60:ce:47:08:85:57:c3:e4:3c:e9:bd:44:14:ca:4f:
60:df:44:76:be:0a:28:ae:8a:ca:c6:8a:d8:17:6a:7c:3e:50:
35:49:06:3e:72:04:f7:b7:23:64:8e:45:23:7e:d9:51:e8:f8:
0b:3c:0e:7e:cb:64:01:88:7f:03:2f:e2:17:3f:f1:fa:31:4a:
6e:c7:cf:1c:c9:dd:a3:89:d8:56:80:cd:e1:b1:0e:d0:ca:84:
cf:05:94:f2:3b:2a:32:36:28:44:fa:be:95:dc:b9:ef:de:3f:
38:87:88:4d:a6:3e:41:4d:41:ea:cb:dc:07:8e:ed:02:4b:e1:
83:38:a8:f1:60:b1:05:22:49:57:15:00:31:6d:82:6f:0b:3e:
cf:2b:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:24 2025 by rpki-client