Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ab9a45f-f639-47b0-acab-8dd4314d89ba.roa
File: 3ab9a45f-f639-47b0-acab-8dd4314d89ba.roa (raw, json)
Hash identifier: e4WLbsIAOUbevbXC0WX7uWgl1L4X/Il1y8jGJUzj5n0=
Subject key identifier: 9F:B8:72:E5:A5:4D:DA:04:0A:9A:8D:F0:8D:03:A2:91:BA:DC:92:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D4328B5427809D7FCAB8DAD8F2CFB9EFAD4EAF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ab9a45f-f639-47b0-acab-8dd4314d89ba.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 57.75.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:43:28:b5:42:78:09:d7:fc:ab:8d:ad:8f:2c:fb:9e:fa:d4:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:5c:b9:18:9e:2c:67:86:d9:5f:43:47:5c:
4d:ea:3c:de:40:25:60:bc:d8:30:d6:eb:9e:3e:ed:
db:bb:e9:0c:bc:12:2d:e6:bf:08:d0:0e:f7:16:f8:
1a:0c:b6:e5:3e:45:40:6d:22:87:65:d9:73:43:35:
c8:84:b2:65:85:9f:35:c9:e2:dd:d4:66:2f:9c:87:
76:e0:fc:bc:c0:4a:b4:89:6a:39:87:9c:a8:42:4c:
e6:6a:68:be:a0:c4:06:20:64:1a:e8:df:ff:4c:36:
f4:e5:59:95:f0:b4:89:e6:23:d5:20:09:01:5f:26:
ec:7c:ca:65:63:16:34:c4:45:90:e1:c6:dc:aa:09:
ca:11:92:e1:68:8c:7f:f9:57:5e:52:ea:12:2a:41:
09:2b:19:67:48:4d:c9:29:48:51:f1:85:40:4a:a9:
47:1d:3f:ff:63:c2:13:11:05:50:96:cb:4c:f8:d3:
27:4e:67:7b:5e:1f:7e:d0:e7:aa:2e:ce:65:0c:90:
56:83:ea:c6:e4:0b:e2:b8:22:0c:9b:30:ba:3a:b8:
3a:f8:ff:fc:17:77:29:19:fa:9d:72:cf:76:3a:82:
01:be:93:28:5f:e8:23:98:71:e0:26:4b:68:8d:3f:
65:9d:15:41:7b:60:2a:c8:ac:87:c9:7c:3d:7f:f3:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:72:E5:A5:4D:DA:04:0A:9A:8D:F0:8D:03:A2:91:BA:DC:92:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ab9a45f-f639-47b0-acab-8dd4314d89ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:2c:75:22:e0:7e:bb:bb:4c:49:2e:b9:75:11:5f:bf:15:81:
e7:2f:59:22:3e:22:a7:05:ff:35:c7:f3:1b:9c:2e:3a:de:01:
07:53:85:ac:ac:6a:24:90:f0:f2:73:75:a3:46:54:55:3b:bf:
aa:82:c7:2c:da:5a:77:29:8d:dd:9a:0f:3b:8f:66:61:f7:e8:
c6:a1:a8:60:b4:35:ae:04:39:3e:9a:04:db:6d:3a:f4:66:c3:
cb:a2:70:69:3b:79:74:f7:2b:f9:1e:c7:b6:5e:3a:ac:71:59:
e9:8f:a6:4f:aa:47:99:3c:3a:ec:01:63:d6:91:9e:6d:b1:c6:
e4:c9:e7:47:8b:94:fd:51:c6:45:82:fb:c5:5c:03:3d:d2:2d:
db:21:63:5f:48:d4:2b:77:8f:6a:3a:c7:50:58:5a:27:63:d7:
6c:68:20:da:1b:73:9b:42:86:e1:7e:cd:5b:3a:25:94:db:40:
7d:1b:70:49:e3:e9:31:00:45:bb:fb:35:07:31:66:4d:55:39:
3e:28:09:0d:6c:39:ce:5e:3d:68:b6:ba:98:1a:12:61:df:17:
eb:b5:32:9d:2e:ea:46:af:13:83:be:1d:f9:7f:ed:71:15:41:
33:43:dd:5d:6b:32:c3:c8:e2:65:b9:82:3b:9a:49:48:02:19:
7d:bc:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:27 2025 by rpki-client