Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2222eb5-a461-43a0-a9f2-fbe7c8531a7d.roa
File: d2222eb5-a461-43a0-a9f2-fbe7c8531a7d.roa (raw, json)
Hash identifier: evLnUGO5OHVCqIj016TjlUZUUdloa/yVEaGgPDVMkf4=
Subject key identifier: 43:FF:9C:7F:D6:96:17:5C:28:95:D7:83:75:D1:80:D9:C6:12:37:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38D164F44B9C0F4F43BA5625A16D1E1291ED2B10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2222eb5-a461-43a0-a9f2-fbe7c8531a7d.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 5.60.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d1:64:f4:4b:9c:0f:4f:43:ba:56:25:a1:6d:1e:12:91:ed:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:ad:62:ee:71:ed:1a:cf:f3:44:1b:08:01:
5e:7f:4e:f0:09:d6:90:d0:99:8c:45:47:0b:65:d5:
22:c9:dc:7e:1e:1d:c9:69:41:fc:ba:6d:15:68:15:
d3:74:d8:fc:a9:e5:8a:32:e7:4d:cd:e8:9a:cf:7d:
79:8a:ce:40:3f:35:98:b6:f7:2c:c2:00:f5:9d:ba:
78:b6:4f:73:43:eb:b4:0b:95:4f:3a:69:f4:6d:2d:
97:c7:13:b8:1f:bb:88:89:a2:36:17:af:88:55:47:
53:31:52:4c:d1:59:37:f0:5a:8d:ab:a5:6a:42:0c:
8a:68:ca:ab:54:37:84:8f:85:97:7f:00:36:ee:81:
f4:a9:aa:6e:af:81:0c:6b:37:93:6f:4a:78:4c:de:
e8:03:22:59:90:13:0c:65:71:4e:eb:32:c4:91:df:
e0:32:72:94:f9:36:e1:a3:27:4d:a9:7f:45:d5:f7:
d4:ac:f6:b5:63:13:58:61:9b:29:37:cb:26:fe:92:
fd:77:bd:34:32:28:d3:be:2f:bd:e5:7f:06:20:26:
2d:27:ef:8f:6c:c5:3d:9b:cf:fe:4a:4e:b5:69:36:
67:dd:0a:81:a4:92:3b:4b:5e:f7:19:e4:f0:94:9a:
88:45:89:ee:b7:0c:5b:56:6c:b7:39:07:3c:d8:6c:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:9C:7F:D6:96:17:5C:28:95:D7:83:75:D1:80:D9:C6:12:37:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2222eb5-a461-43a0-a9f2-fbe7c8531a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.0.0/22
Signature Algorithm: sha256WithRSAEncryption
be:1d:a3:8d:5a:8c:03:53:96:26:bf:6c:13:37:41:01:bc:7d:
99:32:02:5f:ee:af:64:fd:19:4c:96:ab:f9:8f:27:06:fd:fa:
e2:11:2e:7e:da:34:56:f2:12:ce:ce:54:38:32:03:5a:de:c8:
22:0e:ee:d6:7a:3d:a1:79:32:a4:d8:83:aa:b2:dc:75:ad:0e:
c5:19:61:cd:79:29:89:07:bc:61:6c:fb:92:3f:fe:a4:d9:2f:
e2:97:5c:6a:5d:49:fe:fc:ac:d0:09:bd:90:7c:ea:35:13:69:
02:82:90:64:46:2a:49:3f:ec:60:37:7c:1b:89:7a:79:f7:60:
8b:a3:61:b7:df:ab:f8:63:10:41:21:55:7f:18:1c:cf:5e:18:
7e:bb:2a:ae:fd:9d:07:0a:9f:e1:f4:58:b3:b5:5a:c7:5a:ac:
2b:62:97:88:1f:6a:0b:ca:ee:dc:11:60:ee:ae:cc:08:c6:f7:
d2:16:de:d5:79:7f:57:3c:6a:8f:fb:cd:c8:c0:fb:96:a5:dd:
74:3e:e1:72:73:79:15:39:a8:49:72:76:38:e2:79:10:81:7f:
1c:41:30:fb:41:9a:59:74:22:b1:b7:1e:62:e1:3e:c7:28:39:
25:18:5d:a6:48:ca:68:3f:06:8e:6e:6d:39:13:21:67:ff:93:
ad:c1:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:14 2025 by rpki-client