Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa
File: d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa (raw, json)
Hash identifier: PWHkR1UR3JDupZAkHirYTnfVFGrfS29b7uoJ5BPj0GU=
Subject key identifier: DE:BD:9F:78:14:E6:F7:DC:26:EA:31:DA:CD:62:5F:DD:FF:F6:08:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11B27A0C5E9617DEC03705AC240C8E5E963F947B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.47.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b2:7a:0c:5e:96:17:de:c0:37:05:ac:24:0c:8e:5e:96:3f:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3f:44:7b:7c:04:4a:01:a5:6d:0e:95:9b:ad:
42:62:57:99:19:6c:84:5f:3e:b0:e2:d7:c6:70:03:
06:2f:30:37:22:20:b0:d6:26:5c:0d:24:b6:95:4f:
4d:7f:85:f7:21:df:b3:6b:3e:57:3e:26:9a:83:f8:
57:ec:01:3f:d6:79:65:bd:0b:09:35:5f:ec:b7:cd:
59:05:45:c1:32:9a:71:bd:7e:9b:21:20:12:bc:c7:
01:5c:15:b3:70:32:07:18:a6:1d:ba:98:d0:38:60:
2a:14:ea:d3:3c:cc:17:90:e0:81:57:3a:a5:ab:2a:
11:f2:9b:a7:00:cb:47:29:30:14:ed:37:11:c8:e2:
48:51:5f:27:93:9d:f4:c5:79:7b:98:00:a0:40:26:
90:fa:b8:60:1a:82:e1:6a:80:a3:29:cc:74:1d:42:
71:a1:ff:64:ca:87:66:0a:fe:8a:f5:90:42:32:c7:
3f:55:f1:ce:fb:e9:f9:a7:99:6d:e9:53:21:3e:fd:
49:40:ae:0f:fd:0f:75:cb:ea:46:8b:b1:58:1a:f3:
d2:b9:a9:5d:ba:85:4a:e0:d2:ad:a3:d0:cf:56:28:
17:c8:f0:c2:47:a7:65:c5:cc:50:2f:58:65:c0:b7:
b7:a6:29:da:b4:7b:85:b7:be:6b:fd:5f:c6:97:d1:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BD:9F:78:14:E6:F7:DC:26:EA:31:DA:CD:62:5F:DD:FF:F6:08:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8175b0b-6ddc-4c01-b903-2c28c1424ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:e5:7b:d5:86:24:eb:37:e7:b5:1b:3f:23:44:8e:b7:de:9f:
a8:b1:3a:e3:20:cf:9d:3c:4a:2d:88:b9:e0:51:cb:91:ed:ba:
45:5b:27:0a:5c:da:87:67:e2:d1:ae:a3:95:e3:4f:0f:c6:ff:
92:ad:c6:28:e9:56:b1:20:e9:3e:5c:69:5e:d3:82:66:f0:01:
6b:e9:b9:3b:86:40:4b:07:d8:d2:a3:de:12:fb:17:9f:a9:92:
1d:02:a1:e3:cb:a4:d1:9f:9f:f9:64:f4:28:c0:f2:7a:7f:1c:
cd:47:0e:e6:11:a2:15:8a:4d:51:12:14:59:9d:cd:6c:42:ae:
bc:9c:1a:0d:c3:83:72:c0:62:c5:83:93:7d:bc:8d:84:9e:81:
0f:f6:41:1e:aa:ed:6b:49:7e:08:a2:9a:9f:8f:58:4a:6f:11:
83:98:24:e4:ba:a1:6d:8b:86:8e:b4:dd:79:a8:b5:9c:2e:ae:
f9:fd:a9:25:ba:40:39:15:b4:5a:2c:4f:ee:ea:eb:5f:a8:cd:
46:e0:56:b6:3e:f5:76:28:0d:34:fa:be:3b:1f:4d:7c:5a:d2:
de:cd:82:25:cf:ad:fc:5e:63:a0:cc:c0:51:29:a6:4c:0b:9d:
4d:bd:06:b4:ba:4d:1e:4f:23:d1:cb:71:ae:b6:8a:a3:0a:5b:
b6:bd:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:59 2025 by rpki-client