Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70c7c370-beca-439e-ac98-27cc3dd03383.roa
File: 70c7c370-beca-439e-ac98-27cc3dd03383.roa (raw, json)
Hash identifier: Q9f/asusTgvi+x3r8ogkI2vywoa5Tgb4q+1b+GJM2VA=
Subject key identifier: CA:2D:4B:91:4F:32:75:21:3A:55:8E:B0:86:B4:AA:FA:AA:2C:54:FC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6030CF020D635B86FE649C097F2E03C7D6265433
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70c7c370-beca-439e-ac98-27cc3dd03383.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.6.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:30:cf:02:0d:63:5b:86:fe:64:9c:09:7f:2e:03:c7:d6:26:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=b0c54aaf4b6f65c304acfdfa23b9207dbc1fe41ce588ced375abcf642fd15bbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:7c:5c:cf:7a:20:b4:52:eb:53:35:9a:19:
0d:35:e5:ab:17:8d:63:cf:80:3c:9e:0a:d3:53:c8:
c1:87:08:d0:c3:ce:56:ec:11:3b:29:8a:10:ea:ec:
53:6d:c3:7e:5d:41:a8:45:86:47:4a:ea:ef:83:d4:
79:ef:2a:7e:02:5d:1a:68:3b:5d:2a:bc:e8:01:0c:
3a:e1:a3:85:63:d7:cd:00:59:1b:07:64:a4:ca:3a:
32:e9:15:92:2a:52:b9:a4:b5:a9:f7:7a:0a:78:f6:
ab:a1:64:c2:f5:17:55:07:31:64:ad:a6:28:41:9b:
85:44:62:9e:73:a9:3d:0f:9e:73:d7:9f:d4:b6:29:
17:76:70:21:97:56:46:10:79:6f:1b:f7:e4:35:7e:
5b:41:fd:81:83:8d:51:af:66:60:16:5b:79:23:0e:
cf:c4:3f:4c:d3:fb:9f:81:c6:0f:68:49:a6:56:e9:
b6:4e:03:d4:dd:43:31:f6:e0:d8:b0:5c:ef:74:28:
03:65:cf:d8:92:be:1a:ce:0a:62:7b:6b:fb:54:42:
6c:b6:e0:81:29:b4:7a:97:07:2c:db:1d:66:4a:ec:
80:48:00:70:37:40:29:17:5d:c9:fb:10:ac:74:41:
30:1a:9c:41:f5:96:7f:63:f9:2f:0b:96:30:1f:0d:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:4B:91:4F:32:75:21:3A:55:8E:B0:86:B4:AA:FA:AA:2C:54:FC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70c7c370-beca-439e-ac98-27cc3dd03383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:76:ae:03:87:f9:8c:08:a3:83:54:d8:34:0c:29:75:66:6b:
27:14:99:a0:d5:66:90:91:30:4b:c7:f7:e8:12:85:0a:54:4a:
51:c0:7a:1b:cd:c5:9a:29:3c:cb:34:00:7f:eb:fd:00:3d:a7:
17:38:c6:74:ba:8e:b2:da:eb:88:52:a9:92:d4:a3:95:be:20:
5d:52:7e:ae:58:3a:c6:bb:77:5c:bd:f4:08:9f:6a:ba:ad:87:
9f:84:2e:69:fb:ac:77:0d:ff:e9:91:0c:91:46:6e:5a:8f:71:
50:19:b9:1f:e0:ef:9b:0e:75:c0:c8:5c:a3:28:ef:17:60:ae:
d4:34:ef:43:c4:02:c8:35:a6:69:20:a5:6a:4d:20:bf:eb:a0:
31:19:92:b4:30:18:c1:af:1b:26:f1:41:e5:eb:4a:22:a6:ac:
12:48:85:cd:16:74:6d:66:48:61:95:7b:b4:c1:fb:85:5c:33:
1c:6d:16:7a:14:88:62:16:b1:c6:2b:17:f2:58:d6:ec:5b:a2:
24:6f:ce:53:fa:50:c3:42:fd:15:bb:c4:4e:b2:1e:d6:52:77:
bf:90:5a:52:33:10:96:f8:cc:6d:60:05:33:54:97:d6:fa:9a:
ef:51:04:46:30:42:16:ec:d1:02:06:7e:7a:20:ee:f7:b5:f9:
45:55:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:17:45 2025 by rpki-client