Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d15b818-f019-40e0-8b56-fede468949cc.roa
File: 7d15b818-f019-40e0-8b56-fede468949cc.roa (raw, json)
Hash identifier: MO59Xo9yTvSMMDPLfoZ6WLMxIx2UWHydWDQvgFAfr/o=
Subject key identifier: CD:BF:59:B4:FF:FB:AC:90:2A:5A:31:76:A8:29:5D:AC:7D:C0:83:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 591C4CB145AC3B2E53E337C487A0FBF1500115DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d15b818-f019-40e0-8b56-fede468949cc.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.82.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1c:4c:b1:45:ac:3b:2e:53:e3:37:c4:87:a0:fb:f1:50:01:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:7f:a8:bf:75:aa:59:dd:64:eb:0b:cf:4b:
d9:81:06:aa:2e:5d:ee:a9:87:63:bf:14:e5:2d:49:
00:31:71:5d:2b:bc:96:5e:4b:70:dd:11:8f:cf:bb:
1c:38:06:2e:f1:79:c2:2b:93:24:fa:52:43:1f:01:
c8:e4:50:f3:52:67:07:4d:04:dc:8b:e9:4d:25:b6:
3a:44:58:53:95:8a:47:13:73:eb:cd:0e:16:2a:4b:
05:06:70:97:d4:09:47:24:e8:32:52:b7:85:51:9e:
fd:7b:17:7b:fb:00:cf:e7:fa:48:47:50:08:7c:c0:
95:2f:e7:c1:06:44:70:9f:2d:07:4b:c4:69:57:26:
ee:dd:f6:87:91:05:9e:86:0e:5c:ed:dc:42:30:51:
13:92:86:59:c2:0e:8f:c2:e3:83:2d:2e:ce:ea:78:
ad:75:0c:0f:e6:2b:13:f9:b5:77:ef:d1:60:c3:7c:
8e:6d:e7:d8:dc:fa:b0:a7:ed:69:f9:31:e6:d1:ad:
d8:e7:55:b2:df:d0:ea:e0:69:30:bd:b2:30:14:c0:
19:19:f0:fb:16:0e:5e:b4:9c:ae:fe:d3:a3:f8:67:
6a:19:b9:e2:40:b7:9f:ac:25:23:85:02:35:22:4b:
0f:88:d4:67:22:5e:07:4f:e4:89:1e:92:52:03:1e:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:59:B4:FF:FB:AC:90:2A:5A:31:76:A8:29:5D:AC:7D:C0:83:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d15b818-f019-40e0-8b56-fede468949cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:44:9c:a3:7f:47:e0:82:4d:72:55:e3:f5:34:1e:06:e9:62:
19:d7:b1:d3:34:e8:03:da:e6:56:da:f6:64:57:c6:cd:a1:26:
0b:6d:e6:ff:32:56:93:d9:06:c9:9f:68:bc:d1:b7:98:ec:4f:
ee:e4:bc:16:84:c9:08:22:40:28:cd:5f:33:7d:f1:bd:6c:ce:
f6:9a:cb:18:f6:b1:85:3e:50:ea:31:fb:b8:41:07:ee:59:06:
2c:99:7e:f4:00:37:e7:a1:bd:ca:21:2a:e0:da:43:b2:ae:ab:
cb:eb:5c:bf:b7:ec:b7:8a:3f:3c:4b:4d:c6:7d:16:6e:c2:fd:
7f:42:bf:52:dc:f0:7c:7e:5a:30:4b:63:9b:16:13:ed:29:bb:
84:bd:bc:39:bf:17:36:24:b7:64:cf:a6:d8:cd:e9:32:65:12:
a8:1f:df:f4:d7:5b:66:4c:76:26:ed:c0:da:a5:2f:04:e1:6c:
91:c6:4a:2d:ee:20:da:d3:b4:86:b2:1b:aa:9f:b1:50:be:58:
74:e2:10:6c:9f:f2:bd:03:1d:d0:db:c2:a6:b0:30:49:7c:5e:
c1:31:ef:a9:c0:af:69:3f:6b:15:e7:e6:67:14:f3:40:8e:b9:
7b:47:f5:0a:c3:9e:47:64:d9:20:d9:36:dd:92:e6:32:21:d0:
c3:a5:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:26 2025 by rpki-client