Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efda7646-c506-4e56-917a-b2b5864226db.roa
File: efda7646-c506-4e56-917a-b2b5864226db.roa (raw, json)
Hash identifier: uBAjyv9jPbuOQQ5TsNTwnMqsadpowJSHCwMIBuNB02Q=
Subject key identifier: 4E:BA:19:C1:6D:55:B0:3B:C3:45:15:96:48:9A:46:A6:D0:3F:81:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26EA6BE113C3F4558AD4DBF39EA74A5B16FF2C11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efda7646-c506-4e56-917a-b2b5864226db.roa
Signing time: Wed 25 Dec 2024 00:00:00 +0000
ROA not before: Wed 25 Dec 2024 00:00:00 +0000
ROA not after: Wed 29 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ea:6b:e1:13:c3:f4:55:8a:d4:db:f3:9e:a7:4a:5b:16:ff:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 25 00:00:00 2024 GMT
Not After : Jan 29 23:59:59 2025 GMT
Subject: serialNumber=3dd3e1f90ebc6e85d4290ebcb41d781d34a9e22c537c333ca980b8c9fa96cc13, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:b2:8e:06:a9:13:49:80:5c:60:12:b6:3f:
7b:fe:eb:0f:df:63:e6:79:f3:dc:7c:d9:9a:86:77:
87:dc:1a:8c:40:9b:27:92:86:9c:8e:5f:8d:74:66:
74:5e:03:34:19:18:7c:15:a8:f3:e1:3d:6f:aa:59:
8b:16:e6:69:27:fb:e9:e1:40:6a:73:82:cb:8c:04:
30:c4:00:f0:14:51:5c:24:2d:dc:28:42:61:6f:56:
6f:7c:09:e1:8a:40:a3:62:04:56:16:c6:04:4f:a0:
a5:37:9f:d7:a4:2d:92:9c:a3:53:41:ee:99:52:42:
ad:c1:4c:63:02:4b:0b:84:3d:8c:33:22:2c:77:78:
83:ab:e0:ba:42:df:b0:47:bd:a8:56:13:7e:cd:39:
74:44:c2:66:ae:cd:40:cf:ff:40:10:42:45:0f:b5:
04:0e:69:d0:2d:3f:3a:c6:ee:82:29:2b:85:fc:35:
7d:09:bd:07:89:c7:9d:d9:cf:0f:b4:74:95:b8:52:
37:70:7a:39:d2:e8:ca:c9:7c:70:be:0f:9b:61:55:
77:14:57:ff:e5:76:fd:b1:cc:18:96:55:b6:a5:6e:
ec:be:1f:c9:9b:e2:7e:64:56:0e:5f:22:c1:e4:7e:
e8:10:ad:60:0f:4b:e5:8e:6d:71:9f:f3:b8:df:fa:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:19:C1:6D:55:B0:3B:C3:45:15:96:48:9A:46:A6:D0:3F:81:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efda7646-c506-4e56-917a-b2b5864226db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.24.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:1b:bc:d2:7e:30:fc:22:aa:64:be:5a:2b:a5:d9:2d:81:92:
99:a6:ae:91:9c:f7:44:58:d1:14:ac:64:14:b9:83:62:37:df:
8a:98:9e:2a:24:4f:5a:88:3d:6d:86:07:09:bf:70:e2:f6:d2:
5b:94:83:ba:aa:7e:b8:ac:aa:4a:d0:6e:b3:15:94:e9:54:f3:
5d:16:74:70:c2:06:cc:9e:4a:e0:80:6d:da:31:33:3a:a4:1b:
2f:b0:bd:42:c8:a4:56:bf:f8:a7:c3:c0:be:96:cf:17:a3:ef:
69:4e:43:d8:a1:0f:20:43:6c:f9:7f:40:77:e3:e4:5c:1c:50:
3c:b0:6d:73:de:c9:bf:29:fb:24:90:24:69:c2:8f:05:ff:4a:
4a:4c:c7:6c:ea:08:c3:54:27:59:64:40:06:9b:9a:37:4c:73:
6a:92:a7:74:48:99:26:2a:44:f5:09:5c:81:e0:4c:63:95:73:
37:55:a0:ce:09:3f:60:27:c0:e9:06:0c:db:7e:36:1f:c5:e0:
e0:18:19:17:1e:af:e7:ad:3c:7f:c1:0f:c8:1b:4f:e3:3a:79:
b0:99:1c:c1:6c:cd:67:81:3f:53:9e:d2:29:55:32:a6:a3:a0:
0d:7f:68:0d:ff:9d:38:7f:f1:18:08:dc:12:f5:35:88:14:81:
04:19:e3:b9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJupr4RPD9FWK1NvznqdKWxb/LBEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjI1MDAwMDAwWhcNMjUwMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZGQzZTFmOTBlYmM2ZTg1ZDQyOTBlYmNiNDFkNzgxZDM0
YTllMjJjNTM3YzMzM2NhOTgwYjhjOWZhOTZjYzEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8n7KOBqkTSYBcYBK2P3v+6w/fY+Z589x82ZqGd4fcGoxA
myeShpyOX410ZnReAzQZGHwVqPPhPW+qWYsW5mkn++nhQGpzgsuMBDDEAPAUUVwk
LdwoQmFvVm98CeGKQKNiBFYWxgRPoKU3n9ekLZKco1NB7plSQq3BTGMCSwuEPYwz
Iix3eIOr4LpC37BHvahWE37NOXREwmauzUDP/0AQQkUPtQQOadAtPzrG7oIpK4X8
NX0JvQeJx53Zzw+0dJW4UjdwejnS6MrJfHC+D5thVXcUV//ldv2xzBiWVbalbuy+
H8mb4n5kVg5fIsHkfugQrWAPS+WObXGf87jf+k8DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTroZwW1VsDvDRRWWSJpGptA/gdswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmZGE3NjQ2LWM1MDYtNGU1Ni05MTdhLWIyYjU4NjQyMjZkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOIEhgwDQYJKoZIhvcNAQELBQADggEBAMAbvNJ+MPwiqmS+Wiul2S2Bkpmm
rpGc90RY0RSsZBS5g2I334qYniokT1qIPW2GBwm/cOL20luUg7qqfrisqkrQbrMV
lOlU810WdHDCBsyeSuCAbdoxMzqkGy+wvULIpFa/+KfDwL6Wzxej72lOQ9ihDyBD
bPl/QHfj5FwcUDywbXPeyb8p+ySQJGnCjwX/SkpMx2zqCMNUJ1lkQAabmjdMc2qS
p3RImSYqRPUJXIHgTGOVczdVoM4JP2AnwOkGDNt+Nh/F4OAYGRcer+etPH/BD8gb
T+M6ebCZHMFszWeBP1Oe0ilVMqajoA1/aA3/nTh/8RgI3BL1NYgUgQQZ47k=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:53 2025 by rpki-client