Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf27980e-cd60-4336-878c-aae9690bc22f.roa
File: bf27980e-cd60-4336-878c-aae9690bc22f.roa (raw, json)
Hash identifier: H3fEfSsoZu6RaR8qkgmMTMJthD62JQFDiRp8JMSxjcI=
Subject key identifier: 80:34:5C:E7:E5:B8:6A:F5:34:FD:5E:F5:5F:E9:0E:ED:AF:43:04:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FD3C3FC8FF00FF0438BCA7A0011B8FF04CAFB21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf27980e-cd60-4336-878c-aae9690bc22f.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 78.14.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d3:c3:fc:8f:f0:0f:f0:43:8b:ca:7a:00:11:b8:ff:04:ca:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=f4de674fe9d144fe2f15505d47506e550777d4ef5cd848548c123b09161ead98, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9a:ed:66:93:6b:15:7e:43:31:6e:40:62:80:
d3:d5:aa:1f:96:f6:42:bd:30:72:af:a1:05:98:4e:
2b:77:ae:28:e4:29:5a:d9:a2:95:26:7b:f1:fd:a8:
91:40:23:be:34:2e:56:59:a1:fa:d4:26:be:51:6f:
15:d9:08:a3:d8:6f:4d:13:2f:95:43:d5:72:5c:c6:
e1:15:c4:40:d9:04:b9:f5:71:ba:6c:42:f0:dd:ce:
68:31:45:9f:0b:04:bd:e6:8b:57:ff:bc:41:b7:3d:
c1:c6:80:2f:22:df:1b:cb:2c:d7:77:c0:0b:29:32:
da:89:6c:ce:b2:15:24:5a:ca:35:c4:84:86:fd:fe:
e1:38:01:60:f1:78:fa:30:c6:e8:8a:15:e0:69:14:
74:33:bf:e2:92:d4:fa:43:9d:24:fe:97:7e:e9:a5:
89:c7:85:1e:25:cf:12:79:be:c8:97:25:fa:55:3a:
fa:b4:cb:41:db:d2:9f:bb:59:32:f1:a3:fb:9b:bb:
44:1d:cd:61:b0:4a:56:3b:8e:f3:02:f3:74:94:30:
3d:66:c8:cd:0c:65:c5:e1:bb:8c:a6:6d:8c:c8:01:
23:5a:d5:ea:13:00:7f:49:44:c7:79:bc:ee:09:80:
f0:14:59:53:92:db:7c:f9:24:5e:28:84:0b:7e:9b:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:5C:E7:E5:B8:6A:F5:34:FD:5E:F5:5F:E9:0E:ED:AF:43:04:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf27980e-cd60-4336-878c-aae9690bc22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.14.0.0/15
Signature Algorithm: sha256WithRSAEncryption
96:05:59:f8:81:e9:dd:4e:3a:bd:50:6f:fa:00:cb:3b:fc:03:
5d:c2:e9:13:10:a2:03:e6:e1:2e:9e:fb:ef:a0:27:78:f7:77:
75:41:57:ab:c1:28:53:10:f6:66:6e:60:26:82:c6:63:2b:f9:
6e:82:4e:c1:7c:ae:e3:32:e8:1e:8b:4c:e7:90:7e:f7:b9:4c:
0c:c2:75:ca:0a:a8:b1:cf:fb:74:ce:e7:30:9a:38:b2:40:a6:
08:5f:b8:3c:92:87:8b:d6:03:91:fb:ea:24:97:06:fd:52:bb:
8a:cd:9f:e2:0f:ba:48:4c:c8:0f:6b:ac:21:d3:e0:f9:b9:67:
6c:a6:c2:5b:a8:47:fa:4e:75:dd:1d:25:64:13:5e:29:0e:3c:
22:a3:06:40:20:65:2f:d8:fc:30:0a:b4:e8:28:44:94:92:a6:
66:d4:bf:cc:98:e5:d7:45:ea:21:70:71:1c:7c:73:36:b2:17:
41:39:95:79:4b:7c:12:58:bf:b4:11:f7:07:f5:91:fe:98:78:
c1:0f:80:1b:d9:63:ab:9e:43:86:12:2d:cd:61:f3:70:59:80:
56:a3:ca:ff:87:96:39:90:27:05:25:e8:54:1e:47:77:32:60:
00:bf:27:76:45:83:77:f2:7f:69:3f:75:4e:f6:52:96:0b:8c:
59:d6:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:34 2025 by rpki-client