Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9975a1c5-7f01-4703-b3cb-b05ca142b249.roa
File: 9975a1c5-7f01-4703-b3cb-b05ca142b249.roa (raw, json)
Hash identifier: eMgJ5mnB4IBWd51NPZ8gnXNA/oghUvPOQXHYuG8SWGM=
Subject key identifier: 36:97:D4:98:BF:95:AB:43:D4:C5:D0:68:68:E1:FD:8C:91:36:FE:40
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04CB7D3070D00D5E9C6E131A216A6C002057CB3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9975a1c5-7f01-4703-b3cb-b05ca142b249.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 57.180.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cb:7d:30:70:d0:0d:5e:9c:6e:13:1a:21:6a:6c:00:20:57:cb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=97f9df0c742b1742a1d822d61e2f054d3801c3ad53f7667a7960e631a8ff0eb9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:14:8e:6c:27:f9:10:a2:cf:c0:6c:cc:44:
b5:34:d8:b6:a5:34:f9:fb:3c:eb:9a:07:9a:13:39:
b2:a9:d8:36:5f:0c:68:f8:0c:e9:80:1c:b6:3a:f7:
d9:8b:2f:be:d3:d6:46:be:d1:6f:d1:5f:ce:ee:32:
bd:5b:ec:17:fd:e5:e1:05:9a:8f:3c:52:0d:b1:bd:
70:5c:31:48:df:2e:6b:67:54:82:fe:c0:80:93:29:
9b:3e:3a:a0:93:0d:d9:d4:47:8f:c9:8f:59:66:8f:
06:3e:b9:88:93:b8:67:a3:a2:be:d5:e6:57:18:04:
ae:39:cd:f7:2e:1d:97:ca:63:9b:d9:86:1b:f8:cf:
9d:66:bc:af:2d:52:22:53:7c:70:25:e9:5c:37:d6:
e7:6a:53:9f:9a:a4:59:93:0d:7f:64:45:2d:af:f0:
62:4c:21:6b:6c:48:15:bf:06:f8:19:09:1a:a7:61:
0d:e0:a1:3f:b7:38:b9:f4:81:10:3f:f6:c2:24:02:
a9:49:59:c5:25:86:29:69:40:5c:9a:cc:9f:4c:2b:
22:f6:8c:2a:67:a8:97:24:0a:c5:10:1a:ef:19:a0:
76:57:60:43:73:6d:9c:ac:6d:97:e9:b8:60:27:bd:
52:23:d7:f0:b3:75:5b:45:7d:dd:86:43:89:71:5a:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:D4:98:BF:95:AB:43:D4:C5:D0:68:68:E1:FD:8C:91:36:FE:40
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9975a1c5-7f01-4703-b3cb-b05ca142b249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
07:4c:0c:fe:99:b5:28:4a:d1:16:5b:a7:e8:53:04:33:20:90:
ba:c5:3c:f0:0b:62:e9:45:9b:63:56:f4:98:2f:80:7e:04:59:
12:df:48:7c:80:10:d5:61:44:2a:b0:95:bb:b8:cd:62:0a:58:
2b:17:81:1f:22:21:fc:a2:e2:e7:1a:6e:44:f7:25:c7:af:d1:
91:52:28:a7:5d:59:12:56:14:8a:a4:7b:62:d8:aa:f0:7f:2d:
90:54:4d:de:b1:3d:45:f2:b7:93:4b:14:06:d6:ce:9e:10:c2:
d5:a3:11:5a:67:c7:f6:82:51:24:59:b3:e5:78:b7:46:2c:0c:
15:5d:f5:2b:88:10:3a:24:53:7f:91:fd:16:db:4c:12:eb:9b:
fa:14:e7:8c:a0:05:49:f1:7f:4e:28:1f:d1:7e:c8:3e:a0:4d:
2c:1a:88:86:40:be:b5:58:9b:d3:1d:f5:9f:cc:22:22:12:80:
9f:19:2d:04:89:3e:d3:90:0d:d4:65:44:99:60:e3:3e:e0:71:
ee:e7:56:47:1f:51:85:b8:ed:50:96:e8:04:d1:c7:78:51:20:
46:35:ce:65:71:6d:a7:1f:35:49:ec:f4:48:c4:a4:fa:1e:7c:
02:58:d6:6d:53:29:b3:e9:d4:26:d6:66:16:04:82:87:18:8e:
c4:af:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:43 2025 by rpki-client