Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7016bb7d-f3cc-4800-9235-15983606a24c.roa
File: 7016bb7d-f3cc-4800-9235-15983606a24c.roa (raw, json)
Hash identifier: V0fRL3fISN4wTLa3shEHsW4glSjwGMZdapDhRW/hWbM=
Subject key identifier: 88:A6:98:CD:FA:D5:54:8A:A7:33:2E:FE:7D:91:F1:7A:85:A4:D7:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 578605C6185AB2C0C2E701BD8791F218A8A52F96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7016bb7d-f3cc-4800-9235-15983606a24c.roa
Signing time: Fri 29 Nov 2024 00:00:00 +0000
ROA not before: Fri 29 Nov 2024 00:00:00 +0000
ROA not after: Fri 03 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.155.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:86:05:c6:18:5a:b2:c0:c2:e7:01:bd:87:91:f2:18:a8:a5:2f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 29 00:00:00 2024 GMT
Not After : Jan 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:8b:2c:3b:09:82:41:35:d4:5a:05:66:8b:
84:ec:7a:d3:02:4c:fa:cb:76:19:ee:83:94:c2:26:
1c:f3:91:30:d5:88:3e:9a:2e:3f:5c:c5:87:85:92:
03:50:af:06:30:f9:52:54:3d:40:31:3b:b7:30:94:
5d:ee:50:e7:95:42:d3:ea:7b:9e:e7:a8:ae:0b:74:
85:71:c6:d4:61:3f:60:f3:ee:b5:6a:e2:4a:04:60:
bd:9a:55:4f:b7:db:4d:f2:86:86:2e:1c:5e:2f:df:
be:ae:0a:05:20:d3:d1:7a:53:fb:21:ba:bb:ca:09:
ed:fb:7e:30:78:0b:2b:e5:36:87:12:6b:6b:43:d3:
e0:7c:d3:3b:d3:91:e7:8d:f9:3b:2a:33:fa:26:08:
db:25:3d:0c:c2:1b:c0:e6:2a:d2:02:65:fd:e6:6d:
50:f5:41:ca:f2:8c:07:1a:d6:c1:cc:39:d5:6b:b2:
76:37:d4:85:7d:46:fc:61:0b:fb:4d:41:e6:7c:fb:
e6:f8:29:eb:89:2c:88:cf:db:8b:c4:c4:83:50:be:
9a:8b:87:e6:87:75:b6:04:76:b1:03:0d:2c:eb:6e:
75:f0:55:01:39:c9:3a:97:63:1a:40:31:c9:59:d4:
b1:0f:44:69:85:cd:3a:ea:52:c8:c0:1f:0e:dc:d2:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:98:CD:FA:D5:54:8A:A7:33:2E:FE:7D:91:F1:7A:85:A4:D7:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7016bb7d-f3cc-4800-9235-15983606a24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.155.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:ca:47:4a:53:08:ba:16:7a:ac:46:d6:17:25:8f:74:35:58:
d2:ca:98:d1:ec:0c:bb:01:1c:24:2f:53:55:89:1a:51:fc:4c:
4d:8b:cd:60:aa:14:af:63:23:37:6d:34:67:89:ca:27:f6:20:
b9:af:e2:58:fe:3d:f8:3c:20:0e:c6:81:0b:61:22:6b:57:91:
5c:7e:a5:f0:43:00:9e:33:c6:11:69:f5:87:cc:56:85:c3:49:
56:31:fe:fb:7e:45:79:0d:c7:c2:0c:96:b9:81:11:4b:15:ac:
b0:b8:c0:56:4f:39:27:65:9e:14:d6:37:b9:3b:94:b9:e6:0e:
5e:94:34:72:47:89:8f:bb:b5:7f:a4:8c:78:4e:34:63:43:e1:
eb:66:36:c0:08:15:18:e0:08:d8:0a:69:62:e6:0b:99:35:10:
cc:96:00:0b:5c:4e:62:87:ad:1e:f6:82:a9:d0:5d:46:e8:45:
7d:b8:e9:48:e5:6f:3c:bd:c4:c3:bd:c0:67:4c:1f:be:21:1e:
88:4d:cf:bb:cb:26:2c:a8:79:f7:83:51:5a:1d:e1:11:03:1b:
51:10:54:7e:b8:ba:94:4a:6d:24:7f:27:68:92:7c:7a:bb:13:
a9:66:52:33:00:94:5c:38:86:6a:20:8d:75:28:bb:ca:51:51:
39:5c:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:26 2025 by rpki-client