Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dac53ddf-4b76-4202-9003-a31d056b406b.roa
File: dac53ddf-4b76-4202-9003-a31d056b406b.roa (raw, json)
Hash identifier: td74UQUoGYMXH4OL7FcAiGcWUOhmT6lrt9ehBpNsS/0=
Subject key identifier: 36:02:73:80:1C:0D:04:50:91:91:26:75:77:1E:41:F0:D8:13:B7:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E3F83E3250455F488A75628361F01008D5CEFF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dac53ddf-4b76-4202-9003-a31d056b406b.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3f:83:e3:25:04:55:f4:88:a7:56:28:36:1f:01:00:8d:5c:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=54421a4eee95528213db1eb20de6f48d88ee093dae5c1a508827e6e52bee4602, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:d6:45:2a:32:56:eb:ac:15:b6:59:77:7a:
b8:cf:6c:46:9b:06:df:fe:0f:22:c5:8b:1a:93:28:
41:d3:d6:f7:05:b8:0c:c4:ed:7a:28:5f:2d:1c:67:
5a:c9:25:76:d9:e6:65:ed:50:7d:99:be:8b:7a:d4:
e4:f8:02:a6:38:35:30:40:fa:0f:36:fd:72:0e:5d:
b8:80:ca:4e:1a:30:99:fd:91:3a:67:e0:83:7d:f3:
6f:22:9d:40:00:fe:91:fa:7a:35:64:b2:04:5a:ff:
c4:2b:ef:3e:ba:e0:a0:56:72:82:ba:71:15:fd:4f:
fd:d7:80:81:69:2f:5b:a7:af:15:50:ff:b7:f3:3b:
b3:20:fd:b7:df:b7:5d:d7:88:4d:4b:ad:e0:4e:35:
05:af:ca:31:a3:fb:ce:17:72:63:32:6b:98:6c:2c:
bb:f5:b0:84:18:7d:2e:86:32:80:e6:cb:74:ed:4b:
c1:b7:6c:28:15:47:fe:ba:f6:63:ea:ff:1d:cd:fc:
cb:70:96:84:14:68:f5:81:88:c9:45:9e:82:0f:8c:
aa:cd:ac:8b:31:ea:fc:d7:c8:8d:ff:82:c2:b0:c6:
67:0f:fa:2f:9e:0e:c7:12:0e:cd:5b:d5:29:69:29:
66:50:a6:15:ef:5c:88:a8:11:6c:fa:6f:b0:b1:ef:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:73:80:1C:0D:04:50:91:91:26:75:77:1E:41:F0:D8:13:B7:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dac53ddf-4b76-4202-9003-a31d056b406b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/20
Signature Algorithm: sha256WithRSAEncryption
95:de:d5:e1:f4:31:87:59:d9:de:c5:fe:7c:24:fc:a5:bb:d2:
2f:52:09:d1:42:57:89:67:f7:b3:99:0f:35:aa:5a:5d:eb:31:
12:7a:e5:8e:bd:fe:bf:5b:9c:0c:2a:a9:bf:4b:52:15:3c:0f:
8f:61:9d:b7:cc:08:cc:c3:a8:4f:6f:9f:f8:d8:03:a6:bd:e5:
1c:8e:46:ac:0b:c9:37:b6:49:59:44:d9:a1:af:a6:fb:38:fd:
77:19:d2:ab:14:e5:24:ed:66:ca:75:e4:ea:58:a9:16:fe:e3:
be:b0:de:ed:6f:bf:31:3e:d5:19:3b:d2:e6:1c:08:51:53:d4:
75:06:59:01:74:9b:94:9d:99:cf:40:3a:d0:63:72:03:6a:4f:
64:a9:59:8b:fb:cd:08:f4:22:37:60:e8:dd:42:18:ca:b6:71:
57:97:26:bb:1e:1c:f9:f9:97:d6:32:a4:33:cd:90:23:5d:26:
53:c5:2c:63:95:76:c6:0e:3c:9e:4d:d5:52:4b:3b:64:b2:22:
22:52:1d:f8:20:bf:fa:c9:8b:38:4c:45:94:70:ed:49:cd:92:
ef:f9:e1:a3:be:17:bc:09:70:33:28:8c:09:49:71:88:40:3c:
7a:12:31:72:7a:65:e4:23:d4:99:0b:40:49:60:f7:e4:d5:89:
91:69:a7:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbj+D4yUEVfSIp1YoNh8BAI1c7/cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQxMjMwMDAwMDAwWhcNMjUwMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDQyMWE0ZWVlOTU1MjgyMTNkYjFlYjIwZGU2ZjQ4ZDg4
ZWUwOTNkYWU1YzFhNTA4ODI3ZTZlNTJiZWU0NjAyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1ltZFKjJW66wVtll3erjPbEabBt/+DyLFixqTKEHT1vcF
uAzE7XooXy0cZ1rJJXbZ5mXtUH2Zvot61OT4AqY4NTBA+g82/XIOXbiAyk4aMJn9
kTpn4IN9828inUAA/pH6ejVksgRa/8Qr7z664KBWcoK6cRX9T/3XgIFpL1unrxVQ
/7fzO7Mg/bfft13XiE1LreBONQWvyjGj+84XcmMya5hsLLv1sIQYfS6GMoDmy3Tt
S8G3bCgVR/669mPq/x3N/MtwloQUaPWBiMlFnoIPjKrNrIsx6vzXyI3/gsKwxmcP
+i+eDscSDs1b1SlpKWZQphXvXIioEWz6b7Cx72fXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNgJzgBwNBFCRkSZ1dx5B8NgTtzgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RhYzUzZGRmLTRiNzYtNDIwMi05MDAzLWEzMWQwNTZiNDA2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASIEgAwDQYJKoZIhvcNAQELBQADggEBAJXe1eH0MYdZ2d7F/nwk/KW70i9S
CdFCV4ln97OZDzWqWl3rMRJ65Y69/r9bnAwqqb9LUhU8D49hnbfMCMzDqE9vn/jY
A6a95RyORqwLyTe2SVlE2aGvpvs4/XcZ0qsU5STtZsp15OpYqRb+476w3u1vvzE+
1Rk70uYcCFFT1HUGWQF0m5Sdmc9AOtBjcgNqT2SpWYv7zQj0Ijdg6N1CGMq2cVeX
JrseHPn5l9YypDPNkCNdJlPFLGOVdsYOPJ5N1VJLO2SyIiJSHfggv/rJizhMRZRw
7UnNku/54aO+F7wJcDMojAlJcYhAPHoSMXJ6ZeQj1JkLQElg9+TViZFpp5Q=
-----END CERTIFICATE-----
Generated at Sun May 11 23:43:26 2025 by rpki-client