Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6732db7-0bc1-4a69-b6ad-c7bc24b0f1c9.roa
File: f6732db7-0bc1-4a69-b6ad-c7bc24b0f1c9.roa (raw, json)
Hash identifier: 79ZyqOiIRdMJpTrN1EjZ9gLsCzKXRhSJlxIFrQ2XV14=
Subject key identifier: D4:C6:99:50:62:59:7F:CA:A6:58:1C:60:7C:78:98:12:AB:44:4C:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 264D65CA3E9104137346B3FFC6FCD5BCA9956B9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6732db7-0bc1-4a69-b6ad-c7bc24b0f1c9.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 92.201.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4d:65:ca:3e:91:04:13:73:46:b3:ff:c6:fc:d5:bc:a9:95:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: serialNumber=188f81a339bf6141593ecf8e6025b8dd865750e56e14ff6fa2755ba2086021a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:e2:41:96:ad:80:0d:f3:f4:38:67:ee:78:
db:f5:e2:fc:54:0b:3c:61:dc:57:5e:cd:98:c6:11:
9f:22:96:79:50:0c:95:65:2e:33:58:3a:c4:ec:b2:
ab:3d:38:28:69:d2:d4:c7:d5:ce:77:5d:7b:4e:5d:
f2:10:4c:79:3c:44:79:56:ba:ed:15:29:45:92:a2:
40:e0:58:52:2c:11:29:8b:c0:c9:a9:64:5d:5f:7e:
1b:88:3c:83:84:36:33:7a:55:d0:f3:6c:98:bd:70:
bf:6f:ef:87:0c:0d:e2:7f:ed:9a:35:a9:07:e4:1b:
17:2c:4e:92:6e:59:73:98:ad:2c:05:ff:10:fb:7f:
da:bc:55:da:0f:33:4e:51:7f:6b:6b:96:52:00:f7:
e7:88:d9:27:cc:d7:17:ba:5d:19:cd:90:75:ee:d5:
bf:4e:3c:8e:9d:b3:6d:0e:48:67:4d:3a:1b:19:f2:
fd:19:38:87:bb:af:7f:7b:0e:08:a3:76:36:81:35:
29:66:35:94:f0:0a:f8:0c:77:c1:4a:f1:bf:5f:8e:
3f:21:ea:64:f0:56:85:b7:e0:e6:f8:16:65:32:7c:
71:33:93:86:00:94:8d:ee:2d:74:14:85:9c:42:e4:
4f:58:e9:14:50:35:c7:b7:38:c3:08:ef:88:9f:1f:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:99:50:62:59:7F:CA:A6:58:1C:60:7C:78:98:12:AB:44:4C:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6732db7-0bc1-4a69-b6ad-c7bc24b0f1c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.201.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a2:9f:c1:84:57:8c:98:b1:30:27:88:eb:f4:2c:e0:87:76:fa:
b6:57:b5:30:be:0a:5f:ae:c4:a6:bf:18:4e:21:b7:e9:f7:ad:
e6:58:80:59:7e:6b:21:b7:bb:ea:e2:f2:92:e4:55:37:1e:75:
06:b8:be:98:76:7b:e1:b2:4e:97:f3:40:5a:68:8f:d3:61:fd:
0e:8c:6f:68:25:62:a4:bb:70:2d:2b:f3:7f:a5:f5:06:f8:d4:
6f:be:78:52:8f:ff:23:19:70:4a:bb:b0:7a:12:1c:52:15:68:
44:38:c3:be:3f:b6:99:18:9c:85:35:7b:26:5b:0e:4f:7f:4f:
d7:cd:2c:df:8d:94:1f:b7:2b:45:23:25:55:f3:37:0c:3d:bf:
a1:1b:2a:9f:80:a2:13:fc:8e:e0:a0:32:9e:90:a3:30:83:a3:
14:e8:56:da:cb:d7:e7:b6:14:ba:ce:46:d1:a4:78:2f:77:1f:
9b:89:b1:3d:32:d8:1f:8f:09:0d:b6:d1:69:03:82:b0:6c:f8:
12:41:0f:0b:33:74:37:6d:f9:d7:62:7b:41:20:f4:6b:d1:ae:
79:36:b9:a8:4a:a4:c2:64:9e:9a:02:21:5c:c6:7a:c9:2b:7f:
e4:ef:cc:f4:9d:2a:58:ce:48:17:71:4c:c0:57:68:75:d7:39:
3a:4d:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:08:53 2025 by rpki-client