Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e860962f-c3dd-4b7b-8f5e-fd0516aa5e1a.roa
File: e860962f-c3dd-4b7b-8f5e-fd0516aa5e1a.roa (raw, json)
Hash identifier: jzamJGhmc7qAYmuxwrjf6p1U8ICQK6ZMIm1Ct3vAbJ4=
Subject key identifier: E8:43:F6:A0:16:4E:63:A2:18:2D:52:D7:82:76:55:29:58:70:0E:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 433E618E6DD043E27CAE35F438EE7332C1DC7AEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e860962f-c3dd-4b7b-8f5e-fd0516aa5e1a.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 93.76.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3e:61:8e:6d:d0:43:e2:7c:ae:35:f4:38:ee:73:32:c1:dc:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=15e52e187116ece2de37e6f409dc97376ecda960be1be75e1d62044ec7ffce82, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:90:b1:4a:6b:91:9f:51:3d:4d:91:59:25:
7d:b1:32:c2:61:a4:9e:a5:c8:78:f0:df:32:23:49:
ea:dc:fc:66:50:8d:dc:a3:ef:28:d7:f4:f1:4b:d5:
73:c3:d3:10:49:8e:70:07:02:75:4a:b6:db:f3:fa:
a4:73:f9:42:30:6b:64:d5:a6:87:fa:37:95:cb:31:
cb:14:58:1d:77:e1:52:11:a4:f5:0e:4f:5f:f2:35:
fa:ed:b3:1f:2e:bb:b5:96:0d:87:58:05:5a:27:82:
ad:ee:f5:67:85:30:6a:3d:1c:2f:6a:22:f6:23:94:
04:9f:72:39:2c:01:72:4b:78:36:26:52:e4:9c:ba:
c2:1c:9f:5a:61:68:64:be:35:dc:e1:22:0d:f5:a2:
90:b1:fa:f0:75:02:a2:c5:99:52:93:8a:23:09:c3:
a9:69:fc:45:2c:e0:37:e9:e5:7c:72:da:83:bc:74:
83:fc:d1:34:4a:d3:44:16:d9:0b:5d:db:31:45:bd:
6f:aa:bd:f4:d9:76:1b:16:0f:e1:eb:27:f9:d0:0c:
eb:19:cb:1a:79:c5:7d:2b:53:cc:16:00:94:a8:53:
b8:71:82:9a:b2:c3:be:a6:dc:eb:f4:fe:04:6b:e7:
fc:e4:c7:83:4e:23:5b:92:15:85:36:04:65:2c:60:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:F6:A0:16:4E:63:A2:18:2D:52:D7:82:76:55:29:58:70:0E:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e860962f-c3dd-4b7b-8f5e-fd0516aa5e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.76.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a0:fc:62:3b:8f:79:45:4c:ac:e6:9d:66:b0:4c:25:79:ab:ec:
16:cd:d0:47:be:e7:6b:bb:b1:a3:5d:d0:a8:8e:3d:8d:98:26:
45:98:ce:1f:2b:16:b1:47:9e:ff:42:e2:fe:ce:9b:85:e0:5f:
51:74:c6:5c:d4:20:f6:64:a0:1f:af:7e:3a:1a:f2:b6:3b:ba:
26:19:66:b2:07:9d:43:7c:7e:4a:f1:47:46:5b:94:ac:8a:1c:
ed:aa:db:a7:77:b4:54:bf:b1:03:51:3e:06:ea:3c:0d:37:cc:
7b:33:b3:70:ef:d0:94:9f:26:98:91:e1:ea:40:83:49:1c:fa:
f8:29:a6:c3:68:f1:19:c9:fe:36:cf:a9:4a:f5:54:09:f3:6e:
03:32:2b:01:df:71:48:3b:de:07:fd:98:e9:ff:70:dc:1d:99:
7a:7b:e0:9c:cb:03:8c:47:88:f8:51:69:f6:77:a8:64:d9:a8:
01:db:0c:e6:f4:e3:20:1b:10:c0:ce:aa:7e:68:cd:41:5d:a1:
d8:91:78:57:8e:3a:a7:8c:0c:f9:40:02:7c:39:1e:99:3e:99:
96:06:f2:34:c1:dd:fc:56:ee:ff:ac:c2:68:c8:cc:02:c6:18:
3b:ed:34:0f:5b:2d:6e:78:16:b3:dd:83:0c:e1:56:c1:67:04:
21:63:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:15 2025 by rpki-client