Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f95f909e-c92d-454a-a528-13acf83f3bb4.roa
File: f95f909e-c92d-454a-a528-13acf83f3bb4.roa (raw, json)
Hash identifier: J/O8j8HyAiDoHTLfsX1p3PIaLzSGlGzropq2irdKAzI=
Subject key identifier: 68:D6:7D:2D:E6:74:AA:26:F3:73:A0:5F:A2:BE:46:91:87:75:16:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EE16C5E580DC9518391F7282CA94572FB429B3F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f95f909e-c92d-454a-a528-13acf83f3bb4.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.88.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e1:6c:5e:58:0d:c9:51:83:91:f7:28:2c:a9:45:72:fb:42:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=893f2d9333aa3a9fa355ba2e5383ddacbb928f05b7a40bbe0c207d4b6a468499, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:6d:da:b9:08:17:e9:16:af:47:50:1d:6e:
54:9c:ee:27:92:2a:93:9e:28:6a:b7:cf:71:03:1a:
4e:ae:43:68:6e:70:aa:49:b9:5c:c0:07:ea:c7:31:
2e:25:ea:e2:e0:74:68:8a:8c:5a:0c:ec:62:b4:a6:
27:44:54:cd:92:29:a0:46:2e:59:e5:b6:7d:61:6f:
88:c6:02:d7:55:c1:fc:65:94:18:e8:3d:a9:b8:e4:
a6:17:7a:7b:ae:1a:d3:07:0d:1b:b7:42:6a:7f:fa:
5f:e6:0a:8b:6b:c3:d4:d9:ce:24:ad:2d:ea:33:df:
e9:24:b8:4c:5f:b0:17:bc:21:49:fc:66:b9:80:52:
5c:ea:01:a4:75:bf:5a:11:37:3a:23:75:67:5e:4b:
82:bd:08:35:6c:d6:a4:7e:83:aa:7e:60:19:71:c1:
6e:ac:6f:fe:65:d7:aa:ff:6c:58:44:df:11:3a:4c:
f0:62:de:67:5b:e9:3e:f0:2b:bf:d7:f5:3e:06:f3:
29:56:e6:15:e9:e2:6e:00:d2:55:10:c6:3e:3a:d0:
c1:58:f1:62:5f:73:ec:4c:25:f6:c4:44:c3:46:7e:
a7:89:4d:05:d8:f4:4a:4d:5d:f0:9e:ee:bc:c6:da:
68:57:dd:0b:85:e2:7a:c0:ff:f1:d1:49:af:dd:c8:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D6:7D:2D:E6:74:AA:26:F3:73:A0:5F:A2:BE:46:91:87:75:16:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f95f909e-c92d-454a-a528-13acf83f3bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:60:b3:00:23:59:c1:ed:32:c9:d7:b2:4f:53:25:6a:d2:93:
72:b3:71:16:da:f2:10:e5:46:41:fd:f6:5d:aa:65:01:8d:28:
a4:b4:04:34:3d:72:70:93:56:15:e0:67:e0:48:f9:fa:e0:8f:
90:34:d3:36:83:1f:4c:e0:43:d6:1e:fa:4e:b1:b7:6c:76:a7:
a8:4e:3e:ca:81:5d:39:96:30:61:37:34:2c:3e:b9:29:6d:94:
92:f0:4b:84:a4:a6:14:8d:53:42:07:8e:6c:35:86:46:aa:34:
26:b8:d0:06:93:25:dd:0c:fd:00:50:f4:fb:2b:86:7d:a9:4a:
da:85:5b:7a:e4:59:6a:00:b9:01:da:8c:b4:cb:9d:0f:a2:51:
5c:50:66:1c:75:7a:6b:b1:22:a6:91:65:d8:c0:82:bf:34:e6:
69:09:d9:7c:96:3f:43:49:98:1a:f3:87:c9:ae:02:f0:50:49:
0d:6a:be:2a:f7:53:7e:79:34:67:55:8a:d9:31:c6:84:01:39:
df:5f:b0:a0:7d:23:46:0e:00:32:1d:85:15:4f:62:83:96:0c:
e6:4f:b2:b0:87:5d:fc:f1:e9:2a:29:42:d9:a2:b2:e9:b2:05:
11:cb:2b:81:d7:21:c6:6b:aa:ed:e5:71:43:b2:13:dc:be:d9:
fb:16:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:02 2025 by rpki-client