Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
File: c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa (raw, json)
Hash identifier: kFJAq2lJs8ubBfJFr/CLbeuF984UCJ0AvAEFlXLCdoU=
Subject key identifier: 95:B1:73:64:AD:95:AD:2D:D8:4F:FF:9F:58:3D:98:FD:EE:DF:80:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 124D3E050B42444AAEB5C17998D1FD75410D0BC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 93.75.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4d:3e:05:0b:42:44:4a:ae:b5:c1:79:98:d1:fd:75:41:0d:0b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=dadaf44a0694100e8345a5cecc442b2849e8fa2bc4163f702eddd76714bdad1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:7e:3c:a5:aa:4e:ca:4b:aa:17:58:b4:de:
1f:12:0f:16:03:e0:c6:d2:ea:48:ae:d2:fa:6e:34:
7c:3a:09:aa:d4:09:37:6c:c6:a4:3d:99:27:8d:5a:
04:50:3b:99:b2:d8:56:89:21:b2:d3:ef:b1:dd:49:
21:f2:52:e7:c4:5f:fc:b4:94:aa:ff:e2:95:de:59:
fb:9d:48:6e:7d:4d:b8:ad:b0:98:5f:a1:44:14:8e:
27:66:0b:28:20:3b:44:4d:f9:d9:69:32:43:c4:72:
39:f7:c6:a7:4b:d8:07:43:5d:58:c6:9f:09:7c:83:
0d:2c:c0:5a:09:08:f3:f0:1a:26:5c:5c:19:fd:12:
94:b3:9b:a8:e5:f1:73:bc:36:e7:5f:cb:f7:f0:72:
1d:12:be:5c:0b:ee:8d:23:c6:62:f4:95:c4:cc:35:
10:a9:d3:33:68:61:c8:40:e1:15:ec:74:ae:3b:23:
9a:4a:38:7d:d7:37:08:e4:17:7c:ff:b5:ff:d4:f6:
a1:a3:e2:c3:68:ab:06:49:d3:42:c3:07:2b:d6:1e:
48:e3:a2:26:73:da:fc:a7:f0:74:5c:02:96:cc:9a:
7b:11:79:5e:1d:06:75:be:eb:eb:3b:13:4c:0b:90:
f0:75:24:2f:cc:b1:a5:fa:d7:4e:2b:a0:9e:e7:d8:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:73:64:AD:95:AD:2D:D8:4F:FF:9F:58:3D:98:FD:EE:DF:80:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d07ae6-b006-4362-aa35-ef23c7fd1438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:2d:50:65:da:c9:69:a7:75:c9:c3:a3:9c:bb:f7:41:b2:26:
b2:0a:2d:21:42:57:76:5f:88:7c:b9:15:aa:89:0b:5b:95:73:
62:bd:30:96:e3:8c:db:f1:2d:67:99:50:3c:be:e3:14:7d:a0:
0f:af:42:59:22:ed:ef:8b:ff:26:91:96:3f:e7:2f:22:99:3a:
f7:72:28:0c:95:c1:e2:39:ad:22:53:81:4a:af:c4:30:0a:9e:
6e:ff:26:25:bc:95:31:b4:c0:cb:5e:cf:97:5e:df:3a:1f:09:
9d:43:5b:77:8c:75:62:01:5f:eb:8a:50:21:84:62:32:2e:a8:
b0:cc:0f:9c:2e:3d:32:bd:ac:d6:71:6f:11:1c:41:20:65:df:
3b:99:53:fc:7f:96:69:da:24:bf:bc:61:28:64:5a:6f:ca:90:
91:7a:ce:da:3f:98:78:cb:09:9e:d8:c6:6a:96:78:40:e8:fa:
8d:47:57:48:5a:ca:30:be:fa:16:f3:23:77:fb:62:0f:b1:55:
86:2e:bf:eb:8d:45:0a:8e:48:32:46:31:18:3d:26:b8:f4:c4:
5d:a8:cd:d9:52:e9:c9:f3:8d:c8:4c:a0:60:3e:fa:a0:56:55:
13:9d:c7:81:f8:4c:72:4e:41:77:a9:f4:bd:10:33:57:6b:a2:
b3:7d:19:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:29 2025 by rpki-client