Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a820e19c-d2a4-4167-8148-f793a45b5c6b.roa
File: a820e19c-d2a4-4167-8148-f793a45b5c6b.roa (raw, json)
Hash identifier: Y1i5bH3M8Hlf9i1m+o9x4Tflf6lpbylt2iDi0C8rwgE=
Subject key identifier: BB:A5:EE:78:FD:32:50:D9:A5:65:2D:DB:01:F8:24:C5:3B:45:97:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EED2D11A420557C4D050C48B2B21F29F9CC564A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a820e19c-d2a4-4167-8148-f793a45b5c6b.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 159.47.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ed:2d:11:a4:20:55:7c:4d:05:0c:48:b2:b2:1f:29:f9:cc:56:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=5fa69f609ff564ed9316214e70eda22a8b66b2b00d3edd6908fd0047085f0fbf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:7c:02:fa:15:b4:f3:60:58:04:2f:c3:08:
bb:0a:1f:36:cd:37:16:d2:4a:0e:4c:9a:bc:61:4b:
5c:e5:f8:9b:8e:a4:b5:fb:5a:78:9f:4a:fe:20:c8:
40:11:47:db:c8:4a:b8:61:b9:58:47:36:e3:83:db:
34:69:c7:71:be:ec:79:d4:43:a0:d8:8e:ad:fe:5a:
41:e3:c7:23:fa:4e:23:74:b0:38:7b:79:6b:e6:58:
7e:14:48:30:ec:8d:f7:de:41:e8:48:ac:ed:4a:ce:
b4:59:03:19:7f:43:2a:4d:4f:9f:5f:93:da:00:93:
e1:88:15:59:ac:4e:b3:89:aa:20:cc:6c:b7:f4:85:
1f:47:cf:67:87:43:99:49:b1:90:08:cd:16:b7:9f:
72:ed:1d:14:73:3e:49:22:55:59:26:1f:ca:a5:24:
77:da:25:13:de:b8:09:ad:2d:c3:87:d1:dc:95:62:
f8:b3:cd:25:01:25:52:57:9d:e5:07:1c:63:41:ca:
47:d0:4c:0c:29:21:f1:1a:7f:e5:c5:ef:63:e5:e7:
8c:7b:fa:9f:f0:ae:07:99:bf:3c:20:bd:68:a7:7e:
e5:e7:e5:3e:4a:bc:36:1a:cf:22:fa:f8:cf:5f:90:
4c:e1:0f:16:80:78:93:ff:35:fb:55:90:73:71:ef:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A5:EE:78:FD:32:50:D9:A5:65:2D:DB:01:F8:24:C5:3B:45:97:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a820e19c-d2a4-4167-8148-f793a45b5c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d8:cb:1f:5d:fe:7a:68:3f:cb:3f:97:40:2e:e2:9f:63:8f:2e:
7f:07:e1:88:8c:09:a8:45:eb:f6:f7:8a:79:ff:1a:eb:fd:52:
ce:0a:9e:25:8b:58:b4:33:dc:b6:59:0a:0c:c2:e3:69:92:d2:
51:2d:ad:fc:57:c0:e0:1e:9b:23:c1:ba:53:33:80:57:9b:77:
36:17:37:d3:d6:be:68:d4:48:f4:a0:09:01:73:79:c7:ec:64:
da:fe:39:e7:05:96:6c:91:9e:3f:ac:9b:76:7a:ef:da:48:ea:
26:45:27:63:0d:a5:a6:b3:7a:66:d4:2c:11:3b:32:06:63:c3:
ba:dc:dd:a7:5d:82:57:57:a6:65:95:d0:12:98:63:64:da:42:
96:a8:77:94:c7:b3:e1:33:3c:a5:80:e2:87:93:3b:28:29:d9:
66:fb:bc:95:cd:78:62:a2:af:44:df:05:75:c1:57:43:3b:8d:
d7:cf:f0:16:29:43:41:4d:ba:e1:c2:0d:23:ef:e4:78:25:48:
d1:cf:7f:a8:83:f6:1e:92:28:a8:64:0e:91:98:a7:85:67:f5:
a9:b5:e5:83:42:a6:3c:b1:82:de:10:39:b3:90:93:ee:89:d1:
54:83:7f:37:2a:34:e7:0f:30:19:7d:ed:4d:31:23:a4:6f:ab:
aa:37:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:52:21 2025 by rpki-client