Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fb1bb9b-7e95-4ff5-91b6-f2ece5082f0a.roa
File: 0fb1bb9b-7e95-4ff5-91b6-f2ece5082f0a.roa (raw, json)
Hash identifier: YZi2IDFhcAnp/n4mBATVY8ttByXmCBgO+fvc/s/on6I=
Subject key identifier: CC:41:77:C2:33:DB:CB:4B:5F:FB:DC:63:99:5D:68:41:AB:A0:EE:0F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61310CC8835AF45FFB453482D6B99FB40B8BB3E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fb1bb9b-7e95-4ff5-91b6-f2ece5082f0a.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 56.30.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:31:0c:c8:83:5a:f4:5f:fb:45:34:82:d6:b9:9f:b4:0b:8b:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=9af3e5ca92aecc43c32e1035028cdb36d336850370406f76760dafc024c6953d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:6f:85:1b:e8:9e:a2:63:48:41:09:a2:3b:
f1:02:df:8c:91:11:91:d7:37:63:ac:29:ec:03:0c:
ba:80:77:d1:9d:8b:53:c1:f8:b1:84:f1:40:5f:3c:
ac:d6:db:3a:b2:71:4f:79:57:be:fa:00:49:a5:ad:
12:2c:59:0b:33:1a:a2:36:10:21:7a:ec:49:d0:0d:
b4:01:d2:b0:79:a0:80:9d:f6:64:3a:c6:2a:45:cd:
73:50:9a:a5:62:20:de:a5:d6:c5:8a:9d:53:b7:d0:
f2:bc:b7:9e:58:5d:a4:5b:25:b9:b3:70:1d:7f:fe:
5a:10:2a:90:1d:7c:ae:3d:8d:b2:62:13:39:6f:15:
c6:c2:2e:6e:03:1f:18:ee:47:90:7e:88:cd:8b:83:
a2:43:26:2b:35:76:c8:d5:95:08:9c:d4:ca:29:f2:
a7:4b:6f:b3:43:96:22:0b:8c:ba:15:d2:23:a5:5b:
3a:6b:4b:97:2a:93:90:0f:61:32:61:27:5b:21:59:
00:21:f3:fe:49:b7:4f:e3:cf:8a:ef:5c:df:84:92:
e2:66:e1:96:9c:18:e4:d4:91:4b:32:dc:25:4d:58:
ce:fc:2f:d5:f4:bf:81:f2:2a:df:6c:fc:a9:20:49:
43:99:0a:8d:ab:a7:bd:e4:33:12:75:90:b3:d0:db:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:77:C2:33:DB:CB:4B:5F:FB:DC:63:99:5D:68:41:AB:A0:EE:0F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fb1bb9b-7e95-4ff5-91b6-f2ece5082f0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.30.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:65:3c:4b:72:ef:2d:9f:4a:d8:b1:e4:4e:98:f5:13:e7:0c:
e6:3e:ac:a6:37:a4:c6:ec:96:c2:84:92:ce:ea:ee:60:3a:dd:
f1:c2:c0:90:d0:3d:8e:b2:98:f7:41:56:1e:e7:3a:93:c3:22:
5a:9a:87:3c:91:1f:9b:36:60:ba:2a:9d:e4:ef:8a:b4:92:49:
08:27:6c:3b:05:7a:ff:e7:12:26:d8:44:72:e4:25:26:d2:ff:
00:b8:67:c9:e5:f5:f8:ae:98:bd:09:b7:56:31:3a:43:aa:9a:
37:38:a2:14:15:6c:6f:41:55:c6:17:aa:f4:15:5e:e1:c9:cb:
99:ed:f8:12:38:02:34:4e:a1:92:f4:41:5a:62:28:8a:43:10:
c5:3b:0a:af:f4:3d:3c:71:e9:ef:79:db:52:4c:4a:1f:67:ee:
41:da:f3:3f:9a:ed:c2:9b:5c:4c:63:cc:f9:67:39:bf:21:c3:
9d:9e:92:83:72:09:10:2f:14:f8:2b:8b:b9:f9:04:e6:c1:5f:
30:a1:0c:df:a9:43:7e:8b:71:49:ed:a9:ae:f7:01:f1:40:8b:
91:b1:c8:26:e7:35:94:d0:47:be:b5:55:a0:c9:e4:d4:c0:07:
0c:03:20:c1:85:7f:14:42:44:53:b2:63:8c:0c:7e:66:82:7f:
62:3f:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:52 2025 by rpki-client