Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa
File: 0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa (raw, json)
Hash identifier: Adn6vFg/lOS3PIM+Jdcq4G439EImSQ1djkjUnaL0Ouk=
Subject key identifier: 53:B0:DD:AF:5F:E3:B6:DC:CB:A4:CC:D7:AB:79:79:A1:2B:53:12:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 235D80F6A2D922BB71FB6C60E7CF5C5DD7A47B79
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.178.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5d:80:f6:a2:d9:22:bb:71:fb:6c:60:e7:cf:5c:5d:d7:a4:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: serialNumber=ca17509e27f778f0daa6edbc3421c19681680e4b8da252ebff794bf98215bcfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:5d:f6:6b:b8:37:6e:6e:bb:24:85:e2:34:
c3:5c:c0:19:66:22:80:4f:67:03:d5:ee:1b:81:69:
dc:3c:52:cd:19:87:02:c4:23:b7:4c:8f:e5:f7:5e:
db:09:c1:9a:bd:66:f2:2c:c5:61:12:4f:7c:54:18:
58:9d:11:5c:2d:3a:81:b0:8c:e0:b3:e1:4b:e1:66:
aa:d6:17:f2:08:0c:3a:1c:88:04:fb:46:7f:46:fc:
31:7a:96:dc:58:52:f4:37:3f:2c:4a:41:84:61:25:
50:ae:d3:1a:8e:a3:db:91:a8:c4:84:45:27:d6:fd:
59:11:0c:df:48:53:6f:14:6d:59:11:fc:74:5e:b5:
8e:66:b6:a9:60:ea:d8:ec:a4:5f:c4:7d:46:9e:2e:
f6:da:04:53:8d:db:4c:32:cc:5d:eb:8b:fa:9f:e0:
a5:e0:0d:3e:f8:e5:b1:4f:84:1d:fe:b9:41:0a:72:
97:24:33:60:7d:c5:7e:36:f4:4b:e0:0e:80:2b:f3:
cd:e6:a4:8d:d6:f1:ac:30:1a:b7:1d:1b:b0:0a:d1:
8c:42:e5:db:64:50:a0:65:57:70:c0:9f:e1:40:46:
49:35:46:7f:0b:79:fb:b6:09:e4:24:d9:11:1c:94:
00:17:0e:33:df:25:6f:69:fc:dc:d8:1e:bd:13:53:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:DD:AF:5F:E3:B6:DC:CB:A4:CC:D7:AB:79:79:A1:2B:53:12:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0aaf4a36-4d66-4bca-851d-4fb7f908b8e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d0:7e:cb:6a:61:a7:80:ca:0b:1d:60:02:c0:7b:24:58:bf:9a:
4a:85:24:15:02:15:ef:c0:77:22:76:e7:c8:cf:0d:f0:d0:18:
ec:bf:ef:ad:58:8e:2c:de:6e:fd:7a:06:92:ea:87:b3:80:74:
00:8e:fb:21:d4:3a:21:04:1e:c5:8f:3b:8b:53:27:83:19:84:
c2:e5:cd:96:c1:d7:7d:df:49:17:3a:85:33:29:d2:ed:c5:dc:
4b:86:c7:6e:df:58:0e:b3:99:a5:6a:66:a7:54:da:de:bc:d4:
0c:72:5d:4a:d5:13:d7:9d:e2:bf:b1:3d:80:d6:66:64:b9:3b:
2c:1b:b6:46:84:93:5e:1a:ef:ae:09:ad:b1:31:f6:f1:40:f1:
7a:26:55:1c:b1:60:5f:ac:de:84:45:10:bd:6c:25:42:5f:53:
9a:b0:8c:b0:76:2c:e8:e0:05:a6:ff:74:f1:a0:a6:3d:78:4d:
4c:05:e2:34:69:c0:36:16:6b:cf:e2:d7:cc:f3:a4:8f:06:1b:
0b:4a:94:ae:7f:1d:13:05:ec:b7:76:1a:6d:47:13:f7:1d:3c:
a8:1e:e7:f2:c3:35:3e:60:5c:21:3b:4e:4a:95:0f:99:27:f8:
e8:72:4b:3c:c4:ca:e1:c9:e0:ca:4c:ff:85:7b:be:a3:73:c9:
1b:9f:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:34 2025 by rpki-client