Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8753baa-8615-4131-807f-c27bb2fe0bcb.roa
File: d8753baa-8615-4131-807f-c27bb2fe0bcb.roa (raw, json)
Hash identifier: ADdzhlm5VUSfZIF1CkTD+q/jF06pZw112JCKbQjn7qY=
Subject key identifier: 5A:E3:DA:0E:F0:EE:6C:47:09:27:F9:BA:1F:1D:7E:75:9A:FA:F9:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61BC4BC087A8B38E481DA0DB2695D4CB07BA3C97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8753baa-8615-4131-807f-c27bb2fe0bcb.roa
Signing time: Tue 04 Mar 2025 15:11:15 +0000
ROA not before: Tue 04 Mar 2025 15:11:15 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 14618
IP address blocks: 139.56.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bc:4b:c0:87:a8:b3:8e:48:1d:a0:db:26:95:d4:cb:07:ba:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 15:11:15 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: serialNumber=c8a8cbef8d23a5cfaf2c07e41518799263eed0539d490b29810e53fbbb166d3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:19:ef:be:5e:0f:64:76:ed:40:5f:53:23:
46:e5:64:fe:79:27:98:bc:58:28:79:64:0e:65:d0:
fc:9d:1e:7e:70:2b:0b:4a:19:c1:c3:77:0b:bf:6e:
b3:81:ec:d6:a5:8c:53:b0:27:d0:5e:49:f7:92:90:
1f:2f:55:05:bf:be:08:a9:8e:0d:55:38:12:e9:f2:
e3:95:86:0b:2e:7c:89:80:0b:a5:b8:54:a4:ef:0b:
08:7e:97:5a:e5:fc:dd:2d:95:c8:ab:47:dd:6d:a1:
92:84:ab:a4:e3:b5:79:9a:87:99:ef:9a:9c:13:a9:
34:4e:4c:4b:0f:28:8e:b1:e3:62:f7:ab:bd:ab:b2:
ec:16:88:5d:c2:9f:b1:2d:50:f4:0f:d4:b4:ac:42:
31:e1:49:c9:db:6e:a0:51:d5:ae:f4:1f:c0:eb:19:
97:27:da:32:8f:2d:13:e8:8c:f5:fa:1b:8b:8e:86:
a5:42:93:21:1d:a4:f5:4a:62:cb:8c:51:67:e0:86:
72:4d:33:ed:33:dd:1c:3e:74:8b:9a:f7:07:65:05:
4a:10:b7:f7:d3:eb:2b:9b:42:c3:1f:49:5e:d6:35:
ad:f2:ee:8b:8f:55:d2:a7:e3:d1:05:43:d2:f7:b2:
49:24:4d:9d:e6:ee:3e:c3:85:db:4f:5e:08:80:22:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:DA:0E:F0:EE:6C:47:09:27:F9:BA:1F:1D:7E:75:9A:FA:F9:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8753baa-8615-4131-807f-c27bb2fe0bcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.4.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0e:7a:ec:e5:98:82:63:24:d3:38:cc:71:a3:ae:b2:ef:11:
6d:60:70:bb:60:98:13:60:62:e8:3d:c1:92:dd:60:8b:76:ad:
9f:58:d5:28:a1:9a:74:48:38:07:46:37:f4:28:e4:a3:8e:68:
2e:c0:4d:7e:a9:af:24:b8:23:df:ce:20:3e:00:aa:65:dd:18:
2d:1f:b6:9e:01:7b:dd:8a:b9:b6:56:0f:ca:3b:41:e0:70:ef:
69:60:1b:24:62:af:17:26:82:b3:2f:be:4b:1e:2c:f4:2c:7d:
0a:aa:e3:4d:5c:69:a9:79:e5:d9:8d:59:3d:41:8d:7d:f9:35:
4a:84:b9:f2:99:46:69:9e:e5:e8:a8:14:da:72:43:d2:6f:7d:
3c:63:7d:5d:04:a1:10:4d:da:5d:86:f8:01:d6:b6:71:f1:7d:
fc:73:43:19:b9:57:df:82:c9:46:3a:8e:ed:46:94:ae:5e:f0:
63:1d:13:a8:a6:ca:8e:49:35:d5:58:6a:be:cb:cb:05:41:26:
b0:be:97:33:bc:df:31:2f:59:9a:c5:1b:e0:0e:78:d9:6b:40:
5f:33:88:65:01:a0:51:02:63:ac:0d:ff:ac:1a:81:be:cc:47:
e9:16:9e:0a:bc:67:4e:0f:21:81:67:a7:a0:a1:91:b8:47:3c:
ed:79:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:39:45 2025 by rpki-client