Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4e1625e-f6b1-4a82-a05b-a33a8dbdce1d.roa
File: c4e1625e-f6b1-4a82-a05b-a33a8dbdce1d.roa (raw, json)
Hash identifier: aDC7ahi1XUly18KX5MtarmpdUoAaWYmeAcpH+IZtPwA=
Subject key identifier: E3:28:01:05:88:BD:66:E8:CC:64:82:74:B1:96:28:51:C6:34:62:71
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C7DEA946F52B400323AC06305A7B789F60E5498
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4e1625e-f6b1-4a82-a05b-a33a8dbdce1d.roa
Signing time: Wed 04 Dec 2024 00:00:00 +0000
ROA not before: Wed 04 Dec 2024 00:00:00 +0000
ROA not after: Wed 08 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 114.56.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:7d:ea:94:6f:52:b4:00:32:3a:c0:63:05:a7:b7:89:f6:0e:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 4 00:00:00 2024 GMT
Not After : Jan 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:02:a6:8a:fd:db:19:cd:21:f3:34:96:84:
21:30:20:9a:c1:12:bd:d4:a8:37:49:df:84:49:ce:
96:ee:0d:05:41:19:dd:b4:70:57:98:17:d1:ab:44:
45:6b:bc:02:b0:3b:b7:e3:74:db:99:63:ae:0d:93:
cc:8a:0b:b8:b7:c9:83:db:5d:db:17:72:31:94:0e:
42:55:48:2e:e6:6c:b7:c5:67:06:3f:98:b6:33:78:
80:bf:b6:4b:d2:cd:0d:91:eb:da:e9:e3:03:82:e0:
c3:41:95:21:9e:66:53:b5:67:70:81:5e:6a:77:75:
59:40:bb:ca:f9:35:84:27:93:ea:97:5f:0f:2b:64:
22:a4:31:20:c8:04:4a:3d:6d:3a:70:03:c6:ed:7e:
3f:a2:1b:5f:45:90:1c:36:cc:33:8c:ce:6d:ce:86:
1c:7c:7e:74:86:5e:fb:a0:8b:4e:13:77:bf:10:9e:
76:7d:da:92:f2:5f:e6:f1:f7:20:ee:cb:a5:0b:ba:
5a:10:03:38:e2:5e:57:cd:ad:7a:e1:a7:1a:ec:6d:
ff:d1:9c:82:34:ae:77:14:82:da:0f:da:44:c2:ef:
cf:28:59:a2:cd:ee:29:07:ab:f1:c8:07:06:10:18:
9a:3a:71:fc:4e:3c:4e:6c:88:c1:5b:18:f2:65:6f:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:01:05:88:BD:66:E8:CC:64:82:74:B1:96:28:51:C6:34:62:71
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4e1625e-f6b1-4a82-a05b-a33a8dbdce1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.56.0.0/14
Signature Algorithm: sha256WithRSAEncryption
83:c0:68:ae:db:71:3f:6b:2f:3a:d1:55:d4:c3:78:60:f2:90:
19:ef:91:a3:71:da:43:6b:8b:8a:76:f4:da:80:b9:2e:1f:53:
28:49:d7:02:1d:f1:b3:49:ac:fa:cd:88:34:15:a1:73:0a:83:
43:40:96:a1:53:5e:f8:67:13:0d:13:c3:9a:47:c6:b5:1e:1c:
40:99:dd:5f:71:f6:0a:b3:56:0d:e8:70:e5:72:2d:d3:7e:ca:
93:6b:59:10:aa:2b:bd:11:da:1c:fa:44:75:d4:ec:09:94:2a:
f3:a8:ca:9d:ac:e3:3c:3d:d7:22:91:a9:1a:49:eb:1d:32:59:
e0:77:90:97:f7:4b:bf:9a:1f:0b:06:da:55:e3:a1:24:80:54:
37:11:0d:2e:4c:0e:00:a3:bd:9d:2c:88:32:eb:9e:87:0b:4d:
5e:dc:7c:a3:16:9d:34:54:17:2e:41:9e:c0:e4:38:b3:c4:80:
6d:b5:b7:94:2f:3b:66:6c:b0:6e:55:da:1b:0e:e6:57:f0:d0:
0a:43:25:9e:66:50:1d:fc:69:ab:8f:9f:b9:9c:79:25:1e:5e:
94:03:e6:3d:9e:6d:fd:de:2b:b3:8e:2c:3f:6a:8a:03:b2:fb:
db:25:91:60:ef:14:60:be:8b:32:68:e7:b3:2a:92:cd:da:91:
d7:80:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:48 2025 by rpki-client