Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9eb5187-d4c0-43ef-92e2-5c3f94202ec5.roa
File: f9eb5187-d4c0-43ef-92e2-5c3f94202ec5.roa (raw, json)
Hash identifier: uIpNAuegjqv/BuB3mVXdpvvqrvaBcBAOIbEIIKb78fk=
Subject key identifier: FC:9D:38:96:2C:AF:DC:8E:1B:F1:BB:D1:21:BC:5D:E8:A3:34:12:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 398E70F954735759B310B360AD8B4C5001B3622F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9eb5187-d4c0-43ef-92e2-5c3f94202ec5.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 194.21.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8e:70:f9:54:73:57:59:b3:10:b3:60:ad:8b:4c:50:01:b3:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=1fd19af77dddd67a3afe1eb4a75ad7162c6f4454320d233e9f24b8c0984510c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:79:e1:78:d0:d3:7a:c1:14:2f:40:a6:c9:
0e:da:8f:9e:11:aa:07:45:21:74:16:34:4c:fa:a9:
16:5e:cf:68:3f:c4:68:9a:64:b6:2c:6c:27:b0:76:
40:ad:21:71:a4:e8:66:02:8a:17:f2:13:97:c1:16:
d8:2b:3a:23:3f:a0:cd:53:59:65:15:2f:b3:80:ed:
77:61:af:05:e5:ab:e8:a5:2d:1a:72:be:b6:a1:5a:
d9:97:0d:71:1a:f1:e5:e3:05:93:40:23:88:ee:24:
3b:f1:bf:b1:7d:4b:d7:96:7a:c3:0b:f1:42:0c:53:
d8:c3:d5:cf:19:07:1d:6f:55:33:8a:90:b1:fc:52:
e9:eb:fb:3b:c2:5b:53:a2:6b:47:66:a9:c2:ab:e4:
88:d3:72:d8:7e:b4:88:e9:f7:4f:4a:ed:28:89:f4:
43:55:90:e8:91:56:bd:3b:8d:20:2f:06:37:68:af:
53:01:2d:9f:3a:ea:46:ad:57:4f:20:37:7f:ff:b1:
c1:72:92:4f:eb:8c:d1:cb:d1:7e:fe:f6:a8:f6:01:
12:2e:bd:dd:5d:2d:95:6b:1d:92:94:98:68:75:79:
a1:11:63:7c:86:d0:e8:ca:37:18:b9:66:75:fa:d5:
a0:a5:84:7f:99:9e:cd:18:e4:f0:3c:6c:7b:e9:b7:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:38:96:2C:AF:DC:8E:1B:F1:BB:D1:21:BC:5D:E8:A3:34:12:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9eb5187-d4c0-43ef-92e2-5c3f94202ec5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.21.64.0/18
Signature Algorithm: sha256WithRSAEncryption
87:ee:2f:26:66:fe:a7:7c:c5:db:18:2e:31:ce:09:24:ea:67:
1d:07:73:eb:1c:e0:87:67:42:0c:68:28:22:cc:19:44:21:dc:
6f:60:5a:62:8e:cc:6c:7c:f5:6e:b4:06:a3:f3:1e:96:ca:06:
f4:31:c6:62:aa:ca:94:5a:5b:8a:55:15:85:19:8c:e5:ce:ec:
61:5f:4f:15:0f:2c:df:79:65:77:dd:78:c7:69:6a:70:cf:bb:
34:a0:75:a9:47:6b:93:cf:5c:8f:81:70:5c:bc:e3:a9:4e:b0:
b9:be:eb:ad:1f:bb:d5:f4:5c:34:18:04:ad:87:b0:bb:8b:34:
83:b2:45:1d:66:79:de:7e:07:92:93:d2:ec:83:7a:14:a9:45:
ab:e9:2b:f6:b3:03:7b:9e:83:fa:4f:d4:1d:5a:96:1a:64:03:
9f:f8:2b:c8:1c:7b:24:21:d4:fb:b2:9a:3a:f6:85:28:b0:ba:
a5:f1:45:5c:2b:9b:8d:9e:41:4e:b3:34:6e:1d:0a:2e:f2:d7:
39:a7:af:b3:d5:76:25:0c:9d:e0:b1:65:42:e8:c8:05:ef:72:
03:a2:87:c2:d7:cf:26:e9:14:07:78:38:0a:53:8e:b9:76:19:
44:c1:92:0f:80:be:b7:59:6c:db:00:dd:39:af:83:ca:44:f6:
ed:fb:c1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:12 2025 by rpki-client