Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f3f29ec-1e34-47d9-b084-ef6296b7162d.roa
File: 8f3f29ec-1e34-47d9-b084-ef6296b7162d.roa (raw, json)
Hash identifier: N3N+b756z/TG59QfGI8SW+pGrqWZ1/fJcmKlZpayKiw=
Subject key identifier: 79:8A:77:CF:54:1D:F4:42:6A:EC:11:39:1E:E4:05:AA:47:6C:C2:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4234FA4BE75CF0C97F29986BF1110D945B83A30F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f3f29ec-1e34-47d9-b084-ef6296b7162d.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.180.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:34:fa:4b:e7:5c:f0:c9:7f:29:98:6b:f1:11:0d:94:5b:83:a3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=6a1a451170bf9cad49784f89dfd3be054e2a0a2dc8e116a0f317113cc0503bda, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:92:7d:7d:9a:15:b7:3b:52:1f:ca:b5:6a:
66:43:12:68:c6:6a:aa:a8:8b:7c:a2:7a:6c:d0:b7:
b1:ce:a1:aa:a5:7d:f4:6c:fb:52:7e:3e:22:db:03:
59:ed:97:5b:3f:55:b5:6c:91:c7:ba:0a:a1:ac:1d:
98:b1:ba:5c:eb:c7:e7:4a:5e:84:ce:65:b0:5a:b9:
14:a8:02:3a:80:26:75:cc:a2:e1:d1:0f:63:3c:09:
b1:f6:9d:c2:cf:1e:b0:a8:d9:a5:0f:71:aa:6b:55:
86:c2:91:06:c2:3e:3b:fa:d9:2f:2b:b3:0a:a2:c6:
5c:c3:7c:70:e8:76:93:7f:a3:24:56:3c:d1:2c:70:
37:c4:e8:fb:f9:8d:02:80:9f:d7:33:5b:20:83:1d:
50:52:10:94:a6:66:81:72:d3:b1:c7:6b:f4:08:9e:
39:7a:56:15:14:38:b4:e5:fc:8f:bc:90:97:67:83:
23:5d:b1:9b:0f:a5:c5:d6:9d:d6:98:bf:fe:c1:27:
92:f7:e3:58:26:59:68:af:4f:54:57:cc:f7:ef:7f:
6c:e6:a1:ac:11:d4:41:d0:e2:ce:90:8c:42:50:f8:
72:83:c7:5a:54:85:58:cf:38:64:77:e4:22:fb:ee:
c9:57:6c:aa:08:13:48:4e:62:4f:c6:92:50:f2:b9:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:77:CF:54:1D:F4:42:6A:EC:11:39:1E:E4:05:AA:47:6C:C2:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f3f29ec-1e34-47d9-b084-ef6296b7162d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c6:56:b3:aa:66:9f:0d:45:90:72:59:88:8e:8a:cd:97:c6:f1:
a2:bd:9e:30:51:c2:7b:c3:1d:a8:e2:16:2f:ac:87:41:94:69:
62:9f:bc:ad:2f:37:b0:9d:f2:ad:90:74:d5:ca:c1:26:c0:b9:
a1:3c:9b:81:23:dd:fb:ed:aa:77:57:c6:05:b8:52:66:d1:d8:
3e:62:d9:6a:1e:73:a2:cf:75:6e:8e:2b:e4:09:04:cc:22:4e:
db:37:74:0d:31:1e:61:b7:9f:45:67:dd:94:cc:d9:13:25:fd:
d8:45:28:40:2c:05:7a:ad:8a:cd:de:79:10:cc:54:e1:42:83:
7d:78:9f:49:0f:64:40:db:e9:59:96:3e:f5:75:ad:87:91:ea:
b8:db:ae:29:ba:11:52:ad:07:8f:6a:09:fa:22:9a:25:f0:48:
30:07:58:dd:97:01:3a:3c:82:a7:16:67:46:1a:8e:7b:b8:a3:
ab:d0:c8:17:c0:27:01:64:af:08:50:38:56:77:2e:7a:56:78:
9c:42:7c:9f:c6:ce:38:15:d9:c1:c1:6a:53:b1:3b:3c:c1:a3:
1d:db:70:9d:fd:46:a3:56:72:15:5a:f5:c6:b4:da:23:6c:45:
1e:85:11:4e:17:10:9e:14:f7:ce:7c:de:9f:f1:62:08:9f:49:
ab:96:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:13 2025 by rpki-client