Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d4764e-23de-40bf-9c7a-a85de81e3981.roa
File: e2d4764e-23de-40bf-9c7a-a85de81e3981.roa (raw, json)
Hash identifier: pDXyXwOn5gZGHq2oySEKi2IQwvXysq6asWCpIiAnyMI=
Subject key identifier: 4B:D7:CF:16:D7:E2:D6:5C:52:DC:64:80:C9:BE:A1:69:0B:5C:A8:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6413178908AEF8AC657610B6CC30E2735319263A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d4764e-23de-40bf-9c7a-a85de81e3981.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 168.242.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:13:17:89:08:ae:f8:ac:65:76:10:b6:cc:30:e2:73:53:19:26:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: serialNumber=79dc5108cce13bcb2a63c805d4f215b4d36de2441adbd7dcb3dfec043ddf8861, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:48:2f:ef:88:ce:4f:ad:02:e5:f4:1f:ef:
84:b1:a4:e5:61:a1:70:97:c8:a5:59:71:dc:2b:df:
d7:18:fe:bd:65:61:dc:0f:34:97:d2:6c:08:99:1e:
26:7b:b0:83:95:e9:fe:82:88:1b:2c:73:a6:8e:d7:
df:c3:b6:c3:e4:8a:4b:eb:c0:a8:a1:42:46:75:2d:
ce:e2:c8:ec:89:fc:da:c0:af:db:d2:48:00:ed:de:
cb:25:9f:9c:2c:18:ff:39:81:cd:e1:d9:21:72:9a:
02:74:3e:ee:08:a2:9f:74:a7:00:29:04:50:3f:47:
e0:f7:d1:dd:a1:62:20:65:4e:4c:df:7c:d0:af:eb:
07:49:21:df:3d:80:7f:3f:e0:d6:e8:72:e3:f2:d4:
2f:c4:76:59:62:f7:34:aa:92:90:c5:be:5b:bd:f9:
db:11:fd:1a:28:a0:8b:16:93:b6:09:10:a3:1e:16:
02:86:67:7f:d4:10:dd:d7:da:cb:5a:2e:c5:91:e5:
07:ed:83:54:dc:1c:22:04:c2:8a:3b:83:5f:80:3e:
f1:aa:72:4a:a9:0c:c0:11:ba:59:d8:6d:1f:fa:dc:
73:c3:d3:07:e7:0a:f6:48:c9:3d:13:2f:ea:e5:45:
9b:57:4b:58:10:1b:fc:94:9b:9d:70:09:f7:42:68:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:CF:16:D7:E2:D6:5C:52:DC:64:80:C9:BE:A1:69:0B:5C:A8:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2d4764e-23de-40bf-9c7a-a85de81e3981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:81:03:d1:e8:55:80:01:4b:d8:7f:b6:b6:cc:84:d2:e6:e9:
77:e7:a3:93:61:d5:94:73:1b:d9:2c:91:ee:45:f7:7d:b2:9f:
5d:86:7b:a2:53:1e:c6:32:40:ff:78:16:f2:24:07:da:ab:e5:
76:4c:60:09:71:b2:f5:81:25:00:8f:4e:5d:e8:c7:df:2e:29:
ac:0d:b7:0e:61:b0:46:ea:5f:26:6b:14:b1:c3:6a:54:c7:d6:
bc:f3:f3:94:d2:73:7c:0d:62:ab:ff:3f:92:52:0a:75:47:00:
aa:9e:15:4c:b6:21:ba:f6:7f:c7:c4:9a:44:6b:e8:4b:bf:26:
a8:da:12:40:4a:cc:54:35:d4:88:d1:83:20:53:3a:3d:bc:be:
dd:86:77:cd:2d:60:99:79:fa:64:ff:4b:ed:6a:5c:8a:85:da:
b6:ea:6f:2e:9a:df:50:e9:c7:21:75:a7:c9:36:ad:f8:06:6a:
1d:86:c5:31:e9:93:93:21:8f:55:46:56:e4:93:7b:e6:a4:72:
8e:f9:51:75:f8:8d:dc:ba:eb:91:5f:f7:58:70:34:f4:8f:ff:
85:cb:c5:c7:40:9c:eb:ac:5e:30:bd:df:5d:4c:f8:c5:83:0f:
b5:c2:92:62:b7:cc:1c:b1:a0:04:12:bc:5c:9e:83:c4:97:96:
d0:8e:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:36:00 2025 by rpki-client