Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5e47d36-fcfb-48b5-b9c8-fa59a2cdf9bd.roa
File: e5e47d36-fcfb-48b5-b9c8-fa59a2cdf9bd.roa (raw, json)
Hash identifier: 9uspexwvuOWPATA7py/yDH/+lWUYTe+8G+pisApiqcY=
Subject key identifier: 83:64:FE:F5:06:7A:FC:92:F3:A2:D3:19:E8:77:2C:D8:9D:40:D0:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 02BBB176E1A48952137CB755CFF00FE0CF9277CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5e47d36-fcfb-48b5-b9c8-fa59a2cdf9bd.roa
Signing time: Mon 13 Jan 2025 00:00:00 +0000
ROA not before: Mon 13 Jan 2025 00:00:00 +0000
ROA not after: Mon 17 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.245.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:bb:b1:76:e1:a4:89:52:13:7c:b7:55:cf:f0:0f:e0:cf:92:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 00:00:00 2025 GMT
Not After : Feb 17 23:59:59 2025 GMT
Subject: serialNumber=b6524c44dc3e2e00780a390e3cbe9c64e6697153731e74a104bf04a86ce9080a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:07:3e:76:f6:cf:d7:6b:37:b2:94:43:89:
3a:e6:2f:65:8e:5e:4d:ab:c9:69:6b:6c:48:f7:91:
a8:ad:a9:cc:a0:9b:a4:1f:b5:2c:c0:23:f7:36:54:
38:52:b6:df:4c:f4:00:db:00:74:92:47:87:d1:af:
cb:fd:d0:29:72:a4:02:74:ae:4e:07:fc:60:6a:31:
54:2b:ea:82:80:da:8a:30:33:62:b8:57:ef:78:fa:
62:0e:da:42:82:2c:81:2f:3d:aa:26:8c:b6:bd:0c:
73:ff:e5:65:2a:54:2d:8a:93:54:cd:40:94:d6:ef:
88:c5:6b:78:67:be:59:d4:65:f3:be:46:44:0f:91:
30:67:4e:ff:26:f5:e9:e4:c8:24:32:3b:3b:7c:50:
79:d9:2f:ef:f1:e0:5c:16:34:01:fb:d6:89:49:7d:
73:31:dd:2d:82:ca:4f:ef:ef:d8:f5:8f:30:6e:59:
15:a1:a1:f4:31:4c:4d:65:f7:5a:82:12:57:13:ed:
a0:ab:e9:d5:e5:e7:f2:6d:c8:3e:89:1a:e1:44:5f:
41:30:ab:fe:c2:c7:0b:a0:52:a3:c5:33:2e:97:4c:
61:a4:f9:ce:1f:f9:54:a8:00:30:df:98:36:52:17:
6b:28:2d:1e:da:ae:0e:15:6c:72:1d:0a:3b:fd:7f:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:FE:F5:06:7A:FC:92:F3:A2:D3:19:E8:77:2C:D8:9D:40:D0:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5e47d36-fcfb-48b5-b9c8-fa59a2cdf9bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:cb:14:b1:66:50:10:f3:a3:51:9b:00:6c:39:af:5a:24:f4:
3f:4b:8c:9f:07:5f:de:db:68:73:20:59:05:e1:7c:4a:0b:ca:
3a:b1:f8:a5:85:4d:9a:ae:0e:f8:84:65:59:20:2a:96:3f:0b:
42:de:a6:04:1f:8f:f4:f0:0c:02:d7:42:9a:8c:a3:2f:fb:6b:
c9:fd:84:ef:af:ca:99:a9:d0:8b:86:68:8c:30:52:0e:f8:30:
e5:0d:4b:f4:b2:02:c2:5b:0a:97:9d:06:32:c5:07:4a:f5:f2:
30:4f:2e:7d:66:dc:84:79:c6:21:b0:fc:bd:4c:59:8a:ac:fe:
08:9a:b1:a4:61:71:20:74:7d:9d:ca:07:6e:9f:fd:12:c8:cb:
a7:18:c7:98:b3:24:b0:2b:e2:a1:9d:a8:e2:c7:da:f8:a5:4f:
b1:32:dd:57:37:44:76:e5:41:ef:a9:1c:5f:60:52:8f:36:13:
64:30:b1:5c:25:fd:f7:1d:69:9b:92:84:23:70:e7:db:f2:49:
24:d7:a9:a9:e0:b7:65:a2:87:2f:be:52:30:ce:43:27:14:0c:
60:41:46:57:e6:0e:11:a2:35:f1:3f:0f:04:2a:fb:cc:2c:5a:
c2:81:9c:b7:bf:05:9f:94:9b:8e:5d:53:57:22:6e:4f:72:d9:
41:b8:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:01 2025 by rpki-client