Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49aa9e0e-28f1-47c3-99cb-386c7e289d3d.roa
File: 49aa9e0e-28f1-47c3-99cb-386c7e289d3d.roa (raw, json)
Hash identifier: GIs+r82bPZ9Anl15nSnVilD4ntr3CCF62OIHEbiIsYQ=
Subject key identifier: 6B:B8:A7:DF:A1:1F:D0:B2:1C:A1:3F:22:D4:3D:73:24:D3:9E:56:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54B402B3DCB947DCA13B87C11EC7CFDBF1844650
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49aa9e0e-28f1-47c3-99cb-386c7e289d3d.roa
Signing time: Fri 14 Mar 2025 00:00:37 +0000
ROA not before: Fri 14 Mar 2025 00:00:37 +0000
ROA not after: Fri 18 Apr 2025 23:59:59 +0000
asID: 6167
IP address blocks: 139.56.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b4:02:b3:dc:b9:47:dc:a1:3b:87:c1:1e:c7:cf:db:f1:84:46:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 14 00:00:37 2025 GMT
Not After : Apr 18 23:59:59 2025 GMT
Subject: serialNumber=9dd2d036c3a5a2d00a5e2db746bb9f27bd49e4c1ca1dc64d70293a23070815b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:30:24:be:e8:85:89:08:7f:03:70:0a:a5:
eb:09:6d:5a:da:2e:4f:ab:c0:96:2e:1c:2b:e1:55:
da:5c:42:a5:c6:00:7d:e9:83:8a:50:13:cf:d7:98:
53:e9:ca:24:04:26:52:2d:6d:f4:7b:dd:93:af:17:
f8:90:03:c9:69:5c:61:c5:c5:b6:bd:af:3c:c5:f2:
c8:ab:66:46:68:ee:28:1f:ba:7c:99:8e:7a:e5:fa:
23:4b:10:7c:55:b8:d7:40:2d:a5:d3:7e:a6:a1:a6:
08:6b:95:e7:04:67:84:44:95:5e:7b:8e:c5:f6:7a:
50:13:f5:02:eb:60:d9:99:81:2a:ed:87:e4:61:94:
23:1e:0d:72:8b:15:8a:11:1d:c6:78:50:e8:c5:0a:
f1:fe:0c:1a:81:c5:cb:3b:67:df:0b:b4:e1:ee:31:
71:5b:e5:e0:d3:7d:15:9d:88:80:99:d4:e6:b8:01:
19:cd:d8:35:93:9a:ed:6a:04:51:03:71:0e:25:ba:
f2:29:70:ce:5e:36:01:b5:78:d7:60:6a:f6:ad:e3:
5a:ec:49:46:73:05:dd:2b:34:be:ea:c5:af:3c:f3:
60:75:ad:e0:93:ef:db:79:65:e8:52:f9:4b:2a:a8:
b4:35:7f:94:01:46:1f:a6:71:5a:96:ca:e0:b4:b8:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:A7:DF:A1:1F:D0:B2:1C:A1:3F:22:D4:3D:73:24:D3:9E:56:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49aa9e0e-28f1-47c3-99cb-386c7e289d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.6.0/23
Signature Algorithm: sha256WithRSAEncryption
30:1b:b4:80:79:53:81:28:e6:1b:39:4b:c6:7e:21:f4:ac:59:
50:8f:68:c6:d0:49:66:d9:7c:98:e2:08:2f:91:0c:a1:88:cd:
f3:7e:a2:b7:91:e6:50:a1:e1:6b:e1:8d:0f:01:c9:ad:76:02:
e7:38:06:1a:e7:1c:56:ac:53:f0:eb:fc:14:cc:35:68:6e:3f:
35:05:91:aa:ce:0e:df:dd:2e:d0:f9:97:ce:ed:22:10:31:14:
58:75:03:ee:e8:56:20:3b:0f:a1:ea:9d:61:27:ed:a2:80:eb:
ea:a8:fc:67:1b:f1:fe:6a:a6:65:fd:2d:7c:65:58:5b:22:7d:
af:c2:6d:31:c5:61:50:ef:5e:b3:a3:d6:69:89:72:d0:a3:2f:
e2:cb:d2:d4:81:7a:a0:65:23:b3:cd:ba:f3:ab:9f:bc:73:46:
e1:ce:22:6f:ba:ac:5d:90:29:21:3e:62:d0:c5:61:7e:3b:5b:
ea:13:03:1d:84:91:4a:da:eb:b0:93:88:15:c9:32:e7:58:ef:
ab:4c:0c:25:40:89:ef:f7:22:9f:5e:dd:63:b6:8b:55:17:f3:
66:eb:aa:d3:34:a8:13:1d:09:b0:f3:bb:84:92:76:13:4c:a3:
16:b9:3d:1d:fe:63:2c:a4:50:3e:0b:6c:96:13:66:80:ab:06:
24:81:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:49 2025 by rpki-client