Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/188f3817-9ba0-440f-90f2-9c1062b14f66.roa
File: 188f3817-9ba0-440f-90f2-9c1062b14f66.roa (raw, json)
Hash identifier: ua71iyeY0gA1SVJf4uiERhedVs2+3KdP4o2Ns9nXbXs=
Subject key identifier: 09:07:E4:72:76:8C:38:5E:FE:6F:07:A2:1C:51:00:19:68:4B:B3:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D955ABC1E7CC8743C37817353BF2FCA776F2921
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/188f3817-9ba0-440f-90f2-9c1062b14f66.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.52.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:95:5a:bc:1e:7c:c8:74:3c:37:81:73:53:bf:2f:ca:77:6f:29:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=e75c9835d42eb079d8b776b41ef8208ce3823360b755c8a15b38b5d0e70d7d3e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:cc:22:21:b4:df:e9:bf:63:f0:62:4d:9f:
ac:23:99:0f:9a:f7:27:7b:b3:b0:ed:00:5e:66:31:
47:5e:85:82:51:2d:36:0e:7b:69:91:5c:31:60:e0:
71:c0:da:57:ba:22:b3:a8:2e:88:93:63:5d:d0:94:
d0:06:22:5e:63:98:c8:ec:4b:a4:bf:f1:a2:74:e4:
83:88:3c:8b:b1:05:a7:23:d2:65:4d:1f:c8:45:78:
eb:31:96:71:4b:0b:fb:04:19:81:cd:37:44:8b:00:
4c:13:16:ac:61:75:b0:ce:73:e9:a1:43:9c:84:e9:
f3:17:6e:5b:eb:c3:63:61:66:32:ae:c7:d3:53:eb:
3c:75:09:e1:66:c1:40:4a:23:91:29:9a:19:d4:28:
e0:02:db:e7:2d:ff:36:36:1b:c7:e0:4e:23:a6:c3:
0c:34:34:22:9c:85:43:cc:29:a3:c4:f1:28:9a:7e:
4d:33:44:1e:82:f7:03:27:a9:7c:6f:a2:1a:ef:6f:
02:d2:7d:b1:ef:bd:cf:f2:52:50:4b:cd:d7:8c:a2:
d9:ae:8e:3a:ad:85:67:1c:66:53:31:c1:9c:4a:bc:
9f:5d:42:7e:3e:6b:49:e0:01:4a:4b:48:69:74:1a:
08:58:7c:97:79:c6:c8:05:0b:08:02:78:20:3e:db:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:E4:72:76:8C:38:5E:FE:6F:07:A2:1C:51:00:19:68:4B:B3:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/188f3817-9ba0-440f-90f2-9c1062b14f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:85:23:ac:95:90:1f:24:6e:8a:01:0e:a1:4b:d1:1e:07:67:
b1:50:c9:1f:e7:2e:b7:00:52:52:b8:b9:fc:c3:fa:9e:fa:f4:
2e:af:b4:75:ee:33:b0:51:b6:14:ef:90:99:17:49:5c:8d:93:
52:ff:c3:fe:a8:e7:58:28:57:67:e3:f5:cf:67:7b:3d:c8:63:
99:c9:df:ed:06:12:13:03:04:ab:25:fb:a2:3a:b8:d7:48:51:
71:f3:e4:2c:2a:90:33:20:6d:0c:88:6a:ba:13:bc:20:2c:09:
49:bd:7a:d5:04:c5:49:96:28:bb:92:ff:0e:22:f3:7f:86:cf:
7a:b1:1c:41:ba:4a:39:5f:a6:32:d9:7e:d9:96:54:b6:75:f6:
a2:bc:e2:c1:e1:80:b8:05:b5:f0:5b:12:94:17:96:d5:2e:66:
29:20:9b:89:30:81:96:50:ad:6e:e7:19:35:f6:d3:08:9a:9c:
be:15:44:2f:45:41:59:0c:0e:f8:9a:45:d3:3d:09:e8:41:83:
b9:cb:47:1f:58:58:e1:ab:49:a6:0a:db:24:c7:93:c2:33:fe:
e0:3a:ca:a9:8d:f7:6d:dc:f8:2d:4b:06:ee:d4:7c:7e:e6:38:
30:00:1d:a7:0b:5a:67:a4:b7:bd:c1:d6:d0:98:d7:e0:28:f6:
2f:6d:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:02 2025 by rpki-client