Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b79be41-2591-492d-b79f-0405d918bb9a.roa
File: 6b79be41-2591-492d-b79f-0405d918bb9a.roa (raw, json)
Hash identifier: rRyfZqmS/g8tJm/InccfAA0JgTX0nDxmi20F5u3Pwlw=
Subject key identifier: 93:94:66:2C:37:85:33:85:2D:AF:AE:E1:7D:30:A3:F2:9A:FF:40:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E4848DC23D03C0CD6A19E5B8789A4E1C61CE657
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b79be41-2591-492d-b79f-0405d918bb9a.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:48:48:dc:23:d0:3c:0c:d6:a1:9e:5b:87:89:a4:e1:c6:1c:e6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:dd:d5:a5:49:2b:02:37:90:ad:e1:94:29:
46:19:e3:05:6b:1f:96:d7:bd:5e:56:95:4a:b7:d7:
1e:db:cd:07:e9:87:e5:ef:45:52:dd:73:56:6c:56:
4e:34:31:fa:59:51:27:15:1c:74:d8:03:c5:65:3b:
0a:f0:8e:22:4c:36:ab:22:66:25:5c:e5:12:48:58:
4b:3c:95:f9:97:a0:ad:ad:70:d2:0c:70:e3:76:12:
43:e5:f1:0b:e2:48:e6:06:7a:8f:85:6c:12:39:b6:
66:2c:f5:94:69:42:e3:9a:97:a4:3b:3a:47:39:aa:
a3:c8:77:57:61:87:f1:51:d9:28:ee:8f:a6:23:9c:
6d:4d:10:80:ab:92:fa:e6:1b:d9:89:4d:c2:22:36:
fe:e5:c4:33:bb:6c:4c:a2:91:a1:db:e6:7d:33:a5:
1b:f1:74:e3:ca:f9:9d:a2:0c:ef:40:0b:0b:a6:1d:
f0:22:93:50:73:30:01:ec:30:d0:0f:99:9f:fd:83:
0e:27:df:a2:fc:a8:fa:51:bd:fa:ff:4e:82:42:61:
71:96:2e:36:1f:1b:a3:94:53:f4:a9:b6:0d:7c:ab:
4c:25:69:bc:d6:6e:ee:b3:64:b6:3f:47:f8:21:ee:
f5:73:72:e4:1e:b4:6b:7c:9f:30:22:a2:92:7d:7f:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:66:2C:37:85:33:85:2D:AF:AE:E1:7D:30:A3:F2:9A:FF:40:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b79be41-2591-492d-b79f-0405d918bb9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.68.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:49:01:52:ff:b3:89:ba:ac:d8:64:33:f8:e8:05:a0:7f:3a:
d6:93:69:10:16:1c:9d:8c:58:ef:34:82:b0:c3:29:fa:4f:c0:
21:a9:b0:8f:06:24:f0:8c:1e:05:b5:39:ef:d7:fd:96:22:20:
23:b1:ba:f1:cf:7b:41:42:e5:a1:09:86:38:c7:eb:27:1c:52:
ad:cd:8b:2e:81:85:cf:aa:2c:9d:f6:3f:9d:56:3c:67:da:ca:
8e:21:b5:09:67:74:d9:19:67:a2:19:21:48:66:9b:34:62:3c:
6f:59:3c:5d:2b:ed:0b:a1:a0:fc:c4:13:d4:57:a2:8c:2a:36:
49:2e:d9:7d:66:ef:e4:c4:76:93:68:e6:f9:d8:63:8e:ed:65:
ad:bd:9d:48:ce:35:b4:e1:c8:16:03:35:ec:ec:92:d1:a2:99:
62:4a:1f:66:3d:20:2c:e5:db:7a:df:65:55:36:c1:b2:e4:2e:
6f:00:8f:8c:3f:82:53:49:b9:25:bf:f9:05:20:03:49:2c:4d:
aa:a6:c5:9d:57:c1:e4:74:a6:ce:bf:78:6b:5b:f5:9c:3e:2f:
b7:ef:a5:a0:ac:b5:41:84:43:5b:a0:14:37:63:3b:6f:76:41:
b2:a3:16:a5:af:c1:9f:1f:e6:2f:2e:54:dd:7c:a8:25:2f:c7:
09:de:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:00 2025 by rpki-client