Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/061021ac-40f0-49db-9825-9c83801cbb74.roa
File: 061021ac-40f0-49db-9825-9c83801cbb74.roa (raw, json)
Hash identifier: cDNTKA049ats5tYsmd3w0OuB6qlv0ZWZSm9SoKqT97g=
Subject key identifier: 91:EF:3B:57:5C:C7:AA:8E:5A:DB:15:DB:D1:2E:85:BC:7E:D3:4A:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D4DCC412828782AAA998C212C0F239189832865
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/061021ac-40f0-49db-9825-9c83801cbb74.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.92.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4d:cc:41:28:28:78:2a:aa:99:8c:21:2c:0f:23:91:89:83:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=248566ff6e46c42a8a4449baf6c3e5817c33555ed464a5a08a7cf31432f8b088, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:ce:d5:7e:7f:c6:c2:4d:96:0f:3b:9c:05:
4d:48:e1:47:e8:6f:a7:4e:1d:0e:88:a1:2c:a7:ec:
cb:a8:35:b7:29:81:4d:ea:b0:31:d3:7b:0f:78:01:
f9:1e:85:99:ea:9b:96:c0:51:1a:e6:32:d3:ff:38:
a7:d9:bd:d5:21:e3:52:c8:50:17:71:c1:9b:8d:68:
54:b8:74:dd:55:7f:49:37:98:49:d9:ba:71:76:0a:
89:88:88:8c:ef:01:ec:6e:bf:cd:c3:86:83:0e:43:
3c:52:3a:c6:ca:3b:14:95:fe:df:a0:5e:1f:38:41:
d8:fa:1e:29:88:b4:ef:50:ba:e8:32:0a:04:cc:66:
c5:fa:62:e4:65:ff:ce:7c:ae:31:11:27:41:0d:92:
ad:7e:7d:89:4e:a0:81:e9:50:42:f4:fd:d3:57:79:
9e:45:e8:a3:bd:fa:09:f9:58:d9:75:1a:7a:e0:fe:
37:1f:e7:40:5e:6c:03:71:8e:c7:90:37:b5:17:cc:
49:bf:61:1d:08:65:70:df:80:1c:49:a6:39:0e:b4:
7f:fd:85:dc:e6:42:07:9c:e4:2e:01:4b:fa:28:b0:
18:5d:31:7c:e8:00:0a:a6:a3:b2:b7:ff:19:4c:c8:
e4:a4:d4:41:d0:a7:7b:64:58:de:04:32:0b:b4:0b:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:3B:57:5C:C7:AA:8E:5A:DB:15:DB:D1:2E:85:BC:7E:D3:4A:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/061021ac-40f0-49db-9825-9c83801cbb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:15:e8:1d:2c:27:78:b2:fa:be:95:d1:ef:27:43:4e:d7:90:
cc:a4:b1:46:7c:6b:29:66:72:78:ff:3f:c1:09:a3:c2:77:1b:
6a:c6:bb:89:ff:f7:d0:1b:4e:da:65:52:e9:fc:6c:05:d9:7d:
56:db:cf:6c:98:03:69:de:f0:53:47:84:f3:7e:8d:3e:8a:25:
94:78:2d:28:b6:45:cf:c1:ec:a3:2c:3b:51:a9:9c:f3:51:e2:
dc:a8:69:12:70:bc:f8:62:23:46:6b:a0:de:3d:ef:e5:8c:ab:
29:53:a0:13:56:57:40:65:a7:ae:a2:0f:c5:ea:7e:2d:c9:11:
12:c3:20:a2:8c:0c:e2:67:59:a5:b8:53:83:b9:40:b6:b4:44:
3f:78:a4:c6:00:08:8e:88:08:ea:6e:bc:0a:8f:3a:2f:77:ec:
a9:41:9f:5e:b5:c8:81:5f:20:e4:a3:7a:57:4f:bb:ac:92:c4:
d6:99:ca:9a:b6:27:4f:0c:76:70:52:a0:21:e6:5b:92:2d:cb:
22:06:53:85:04:de:5f:c2:5a:df:eb:2b:f8:7a:00:db:d2:75:
d2:ec:7d:f6:0a:55:81:e4:b8:55:2c:cd:7c:da:e2:84:20:78:
28:8b:2d:6c:59:ae:eb:8b:47:24:85:08:ac:76:fd:67:2e:c2:
85:08:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:05:48 2025 by rpki-client