Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b77d9199-a620-44c8-9dc8-2bfec7d166e4.roa
File: b77d9199-a620-44c8-9dc8-2bfec7d166e4.roa (raw, json)
Hash identifier: kswjcA44O7Da+pt2PLwm5sCF6E1G8UI/PeAB6Eg80dw=
Subject key identifier: 95:B0:AE:21:1D:9B:EB:17:11:37:F5:C1:2D:3A:61:62:AC:4D:76:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56DE4603C1BE554C4611C51D8573BBA98FAAD57A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b77d9199-a620-44c8-9dc8-2bfec7d166e4.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:de:46:03:c1:be:55:4c:46:11:c5:1d:85:73:bb:a9:8f:aa:d5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=798c5d97ebafef696df1f7e9db2ba5449b13fb0088ccc75ff6e4257935888ad1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:5a:73:86:37:dd:e3:55:e7:5e:05:b3:7f:
c7:b4:c3:56:48:db:c2:d9:7c:9d:b6:ad:ca:6e:e2:
dd:6d:8d:dc:2c:1a:f3:12:63:66:03:9a:3a:85:88:
ed:3a:56:d6:83:fe:95:64:c6:ce:46:e8:eb:a8:56:
c8:0e:3b:29:5b:74:5f:cf:e9:66:e9:60:6f:18:d2:
27:da:42:c7:68:ed:58:af:24:ab:bf:ed:ca:c4:c9:
fb:04:84:07:f9:f7:c8:5a:4f:7e:92:e4:84:74:0e:
cb:b3:a0:59:26:93:a5:41:5a:30:d5:6d:04:3b:f4:
12:c2:0f:a0:0f:b0:f3:51:ef:57:c2:b9:02:3a:f3:
1f:0d:ff:95:83:a0:9b:98:30:13:79:4c:c8:2e:80:
5e:6e:71:e0:29:56:7b:57:4b:dc:d7:d9:b2:ac:22:
cc:f0:00:4d:d5:8a:c5:f4:d4:d0:1a:d3:99:71:63:
f4:5c:cb:01:9d:ad:b4:c3:76:a9:7c:72:35:88:85:
70:11:2b:1c:b5:f8:83:35:42:04:20:b3:36:9d:87:
fb:6d:e8:d6:8a:ac:a4:f4:5b:c1:7a:1b:12:2c:d9:
02:d6:ee:29:b1:ec:b4:2d:27:df:dc:36:59:24:8d:
a9:76:85:bf:2f:24:69:0c:0e:db:ab:1e:9f:9b:64:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:AE:21:1D:9B:EB:17:11:37:F5:C1:2D:3A:61:62:AC:4D:76:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b77d9199-a620-44c8-9dc8-2bfec7d166e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c3:1c:af:6a:26:fb:09:19:00:b4:e4:32:f6:9b:43:a6:20:9c:
be:3e:ed:2e:7a:93:f0:7d:af:63:5c:38:25:94:df:04:a8:d3:
4c:76:21:a2:87:86:4f:52:93:52:d9:ae:c3:3e:9c:de:01:91:
c4:ea:7c:93:57:b8:05:17:d3:7a:9b:b3:b0:af:c6:76:31:c4:
3b:60:27:42:c4:b3:d4:72:d4:52:7e:4c:b7:b1:b5:c3:9a:5f:
be:32:0b:8d:f3:b7:26:84:a6:6b:c6:38:d2:01:cf:b4:77:eb:
73:80:17:81:a2:b9:12:f5:8c:64:e2:0a:86:c1:c8:58:2f:3f:
93:3d:fc:b3:e8:2b:58:9f:12:8c:b4:1e:83:52:8b:5c:36:5b:
83:1d:7e:5a:df:b2:23:83:66:30:77:90:ca:0a:67:1c:d9:52:
14:4f:86:6a:d7:1d:b6:9f:ed:f1:30:fe:c1:91:9d:a9:4c:07:
54:db:26:94:e1:52:a7:0a:d5:5b:f7:23:f9:da:2d:e0:db:e5:
c7:bd:69:dd:d8:4c:32:be:92:81:ed:2c:ff:01:64:f4:7e:5f:
b2:22:22:c0:9b:af:fd:c2:ed:71:f4:19:41:f9:e9:26:d7:66:
d4:4b:b6:f8:79:33:a9:dd:50:10:29:e2:06:e8:ea:13:62:02:
0b:a1:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:10 2025 by rpki-client