Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48978838-6652-479f-aafc-0f11679eada6.roa
File: 48978838-6652-479f-aafc-0f11679eada6.roa (raw, json)
Hash identifier: iZYQxAdlUv8IiPT9qOnB0R9Zwj/ED+2fg2QJCfLbRQQ=
Subject key identifier: 85:16:68:53:F0:23:EA:DE:E1:CB:2A:F4:D2:2E:71:8B:A7:B3:9E:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7DEA3B99316B87715E85F4E8D39031A411F98363
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48978838-6652-479f-aafc-0f11679eada6.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 136.18.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:3b:99:31:6b:87:71:5e:85:f4:e8:d3:90:31:a4:11:f9:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=391e1e318338605ffc9c3fd652cc97259a23a7d2b99e5dcb98f5a489d7a6b560, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:04:b4:06:34:ad:78:6b:2d:5f:b9:f9:22:
de:e2:15:74:13:63:a0:5f:d4:11:39:1b:08:56:79:
fd:e3:1f:31:74:14:8d:a3:aa:47:29:3c:3b:5b:58:
13:fa:81:6c:2f:ac:d1:b0:fe:18:23:6c:6b:3d:35:
1a:dd:85:f8:52:3e:3c:23:fa:92:f5:d9:22:44:e1:
5e:cd:b4:43:8a:e8:1f:7c:00:08:51:df:6d:82:57:
2b:60:dc:25:bd:c9:03:4a:19:a1:91:9a:9e:01:94:
b0:a7:a8:67:4f:7c:94:5c:54:81:7e:79:17:0f:c5:
1a:b6:02:f0:e8:ce:d8:6b:09:77:95:df:e5:f5:78:
cb:cc:a3:12:29:9b:eb:3f:63:12:2d:9f:65:ca:44:
44:e3:33:59:38:42:17:d7:42:96:29:c3:a6:95:30:
dc:8e:4b:10:b5:f0:c2:27:f2:fd:9e:a1:7f:50:f5:
66:73:95:c6:2f:d1:e3:7d:9e:4e:24:ab:b8:83:cc:
3a:0a:0b:5f:7a:d0:8b:18:d1:36:2e:1c:fb:3c:15:
2d:30:90:c0:8c:d0:d8:18:de:c9:88:b2:28:92:52:
b7:55:cc:88:6e:b3:e1:6f:e9:17:31:d3:75:7c:8f:
47:af:0a:33:ab:23:a5:83:62:cd:03:1f:2c:40:2a:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:68:53:F0:23:EA:DE:E1:CB:2A:F4:D2:2E:71:8B:A7:B3:9E:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48978838-6652-479f-aafc-0f11679eada6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.128.0/17
Signature Algorithm: sha256WithRSAEncryption
78:67:50:7d:f2:2b:fe:4a:5b:d5:f8:a3:bc:64:3f:0a:2e:39:
b6:23:12:28:a0:df:53:31:c1:dc:0c:ca:47:5f:f9:7c:ae:e1:
aa:34:05:5b:e1:a0:65:d2:fe:40:b2:1c:e6:1c:b2:6a:a0:0f:
ed:bf:c1:30:c2:51:b9:1d:bf:82:1b:da:e1:c6:85:6e:89:f9:
f1:96:2a:ec:45:4b:47:e9:71:06:95:56:65:4f:a7:6d:eb:ff:
e2:bd:9c:fa:8f:d0:6e:ea:1a:7c:06:71:44:80:6a:a0:75:fa:
46:f7:f8:d9:d9:f5:b4:a4:8c:b6:2e:14:f5:26:0d:1a:fb:17:
5e:c8:0e:56:22:ec:fc:f9:46:a4:41:3b:7c:dd:dc:6c:96:c4:
66:04:aa:f1:1b:20:b3:ea:00:33:4d:f0:48:1f:11:95:22:93:
e5:41:93:0c:c6:a8:1e:8b:74:14:b9:a7:3f:67:b8:40:f2:95:
a1:42:a6:ad:04:fb:8f:38:34:42:d3:73:55:74:a2:83:ee:28:
e0:dc:23:af:e0:b9:43:cc:89:6e:26:ae:10:66:7e:e7:12:30:
6d:25:f0:4d:66:b3:f0:6b:4e:41:ae:90:f3:44:be:5b:b9:4a:
95:a5:7b:88:82:1c:89:71:d6:50:59:c6:ca:23:a2:6a:82:59:
ec:8f:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:55:28 2025 by rpki-client