Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63961034-e855-4142-9d1c-8eef953439bf.roa
File: 63961034-e855-4142-9d1c-8eef953439bf.roa (raw, json)
Hash identifier: nxyDM8Hd1NrPWeHG32vuvwTVSsWBt3RdYzEw0ba7H/c=
Subject key identifier: D4:81:4F:3F:57:B8:4D:10:F1:43:32:96:73:38:1F:6B:13:9B:46:A9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4273F17311480D049B77BEF05C959011CE6001A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63961034-e855-4142-9d1c-8eef953439bf.roa
Signing time: Fri 07 Mar 2025 00:01:42 +0000
ROA not before: Fri 07 Mar 2025 00:01:42 +0000
ROA not after: Fri 11 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 139.56.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:73:f1:73:11:48:0d:04:9b:77:be:f0:5c:95:90:11:ce:60:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 7 00:01:42 2025 GMT
Not After : Apr 11 23:59:59 2025 GMT
Subject: serialNumber=c114817adfab4a08ded1213e99a538caedc232337786c754980e485fb038f5ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:43:5c:f1:75:5c:76:30:6f:21:2e:4e:43:
9f:7c:ec:ce:29:83:ab:bb:80:73:b6:9c:88:34:d9:
36:52:ea:28:73:69:c7:61:70:a8:74:43:45:5b:ef:
45:8c:71:dc:4e:4b:b1:bc:97:be:71:3f:d6:9f:74:
a3:6b:8e:7d:6e:70:52:bc:0e:4c:08:d3:0a:54:c9:
2c:c2:b4:54:62:40:b1:71:30:79:33:a1:31:d2:62:
3f:d1:8b:44:5d:d3:59:c3:cd:12:83:54:a7:f0:d3:
0a:9d:aa:7b:ba:dd:5b:62:8a:22:5c:7a:7b:37:b6:
35:3c:9f:c3:92:95:43:11:f1:ef:b6:ff:1b:0a:1c:
9b:6b:f6:cc:ef:01:b6:f9:d6:16:71:11:b4:38:34:
b1:67:37:98:82:65:62:d9:1a:96:c2:0b:7a:5f:ee:
8d:00:b2:d4:04:e6:c4:7d:61:61:1c:20:c8:54:24:
90:b9:96:51:ee:c8:60:c5:76:6b:09:7e:1b:65:8f:
39:ba:71:2f:76:cf:5f:54:9b:0a:0a:cf:f9:00:57:
1c:72:93:d5:19:3f:eb:3f:19:3e:75:34:af:bf:80:
8e:62:34:11:e7:e4:79:90:47:f4:ae:76:af:c4:68:
ea:9e:fb:a4:d6:17:89:4e:92:6a:77:2e:62:b8:bd:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:4F:3F:57:B8:4D:10:F1:43:32:96:73:38:1F:6B:13:9B:46:A9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63961034-e855-4142-9d1c-8eef953439bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.5.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cf:5c:71:44:74:10:8b:cd:99:ec:87:f6:dd:65:7f:c6:18:
63:d7:64:d4:4c:c7:6a:8a:18:f3:ad:fd:32:75:74:1d:d0:99:
07:bb:6c:57:7d:35:47:b2:20:98:11:ca:02:36:97:2f:6b:2d:
26:fd:94:44:93:62:28:7b:32:e0:dd:70:a6:6c:b8:e7:21:fe:
2c:97:8b:8c:a7:2c:a4:80:ca:d3:f9:c7:0c:e9:04:8a:e2:0c:
f1:52:f4:37:ed:6a:40:08:6e:74:04:6c:f2:cb:61:d8:9a:b8:
05:d0:95:2a:36:a7:9c:30:54:6c:23:1f:42:83:a9:a6:8e:1a:
a7:21:81:d1:96:e7:42:c3:90:ea:63:7a:5c:32:b7:fa:a6:25:
56:24:4f:16:fe:24:ab:71:73:b1:89:1d:b5:16:5c:79:d1:f6:
a2:ff:0b:f6:ea:0c:3f:fd:1a:74:d6:bb:9e:cb:90:f2:b0:64:
b6:76:30:87:ac:c7:3d:0b:46:d5:c6:8b:36:00:65:8e:97:ed:
fd:51:f8:42:ca:3f:99:70:2d:5b:27:ed:04:f0:17:e9:42:29:
dd:5d:16:f7:ae:2b:d4:3d:81:18:e3:fc:53:e5:c0:ad:e7:45:
b1:33:f3:0e:4d:f3:4c:03:99:61:de:4e:c4:a8:8d:3d:a4:f7:
c8:e0:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:15:44 2025 by rpki-client