Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7f5551d-9176-441e-b0c0-d35db72555b3.roa
File: c7f5551d-9176-441e-b0c0-d35db72555b3.roa (raw, json)
Hash identifier: R72Ip6HXUVd1WSLVg7n5/KHhuSQDP8DTMj8HwJNdp7U=
Subject key identifier: AC:AA:5F:D4:8B:54:EA:8E:77:D4:1B:73:40:B0:DB:8C:DD:93:60:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F776264E5DEAB315C10922D8534AE5BBD008569
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7f5551d-9176-441e-b0c0-d35db72555b3.roa
Signing time: Fri 07 Feb 2025 00:00:00 +0000
ROA not before: Fri 07 Feb 2025 00:00:00 +0000
ROA not after: Fri 14 Mar 2025 23:59:59 +0000
asID: 14618
IP address blocks: 5.60.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:77:62:64:e5:de:ab:31:5c:10:92:2d:85:34:ae:5b:bd:00:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:00:00 2025 GMT
Not After : Mar 14 23:59:59 2025 GMT
Subject: serialNumber=08b6927563d1cb85ffe335e6105de1770601ee641b6f49e09fa29767d88a5dcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:83:cc:cb:45:31:3d:23:0f:d9:af:37:ab:
67:89:60:d0:6f:7e:f5:6b:56:16:45:38:8f:58:39:
9d:e9:a7:12:32:ef:a0:0f:74:9f:1a:63:a5:31:a6:
b7:f5:04:44:cb:fb:87:b3:04:b7:5f:a5:b1:78:d3:
ba:cd:fd:91:d6:69:ba:32:16:6b:5b:99:83:34:a1:
be:a2:d2:fb:2b:b9:ab:06:ab:81:2c:59:64:0c:b0:
bf:cf:da:77:85:40:5d:15:3d:19:27:f6:c8:37:5c:
e3:30:56:48:85:f0:74:c3:f5:51:a7:1d:fd:2f:2c:
3b:6b:10:a2:f6:e0:d6:bf:a5:63:34:89:4e:d3:b8:
f1:dd:88:45:c9:e6:a7:87:b0:4e:8c:39:a5:8b:54:
ac:81:3b:99:d4:58:6d:fe:ea:82:ce:ef:0a:61:a2:
45:7c:b8:b3:de:45:8f:08:17:ee:94:43:90:27:3a:
97:af:b5:be:00:5b:0f:01:fe:23:f8:c2:1e:54:13:
0e:f6:c9:00:65:5c:ea:bb:93:86:e9:d7:68:5d:77:
5f:7d:f8:30:87:30:62:ba:b1:76:89:d0:5f:76:8f:
e3:9c:c3:db:4d:5d:3c:9d:d1:db:65:bc:04:22:3c:
37:56:7d:1b:84:ee:f4:26:ee:2a:ca:c4:02:65:ca:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:5F:D4:8B:54:EA:8E:77:D4:1B:73:40:B0:DB:8C:DD:93:60:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7f5551d-9176-441e-b0c0-d35db72555b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.72.0/22
Signature Algorithm: sha256WithRSAEncryption
95:28:f2:49:47:c0:a4:0d:03:c8:f0:31:48:1a:f3:0d:87:59:
28:d2:9b:5c:a7:26:56:59:0c:f9:2c:13:c2:74:7a:5d:de:86:
13:25:b1:8d:96:06:78:c5:9a:f3:9a:b3:2b:03:df:de:9c:19:
e6:c3:cb:d7:e9:c8:c3:5e:4e:cc:5d:a7:92:cd:61:d5:27:c6:
70:86:dc:70:3a:c4:dc:96:54:92:b4:32:80:2b:db:15:11:b2:
f7:3f:76:fc:c8:62:f0:cd:10:2c:1c:37:ce:9e:1c:0a:3a:09:
0d:48:76:af:7f:ea:c5:72:61:fd:fa:2b:d2:bc:ab:fb:be:ec:
33:df:34:74:0a:02:ce:b2:38:16:b0:46:2e:84:d6:36:db:66:
db:b1:c1:68:d2:7b:6e:a8:11:17:42:3a:ba:ac:23:01:59:a9:
46:72:b2:a4:39:2b:02:37:22:9a:47:95:6d:72:27:2c:da:99:
60:7a:12:61:b2:02:0a:e8:f6:af:81:f5:76:4e:1c:6b:f4:6f:
76:52:2c:f6:ba:24:74:6e:b4:31:b7:7e:f5:96:8e:94:ae:45:
cf:e3:99:65:df:5e:19:3c:f4:97:31:fb:86:5a:4a:7d:25:1c:
fe:89:1c:e1:93:af:55:cc:49:8d:17:4e:5c:be:04:aa:14:02:
b3:05:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:39 2025 by rpki-client