Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c7f07f-b89a-43dd-8573-8593f6ae6a52.roa
File: f0c7f07f-b89a-43dd-8573-8593f6ae6a52.roa (raw, json)
Hash identifier: FhyVpuO/8nY35Syw95ig+Sw59CyXirnA2qVxbwfmXlA=
Subject key identifier: AF:34:D9:4C:C5:E3:89:E7:96:E8:1E:8D:A6:51:BA:DD:7D:C4:53:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D15BD3CE080823B84B6E0B9AAAB5BCE7E2C6379
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c7f07f-b89a-43dd-8573-8593f6ae6a52.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 75.47.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:15:bd:3c:e0:80:82:3b:84:b6:e0:b9:aa:ab:5b:ce:7e:2c:63:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: serialNumber=a4e02acba3a8348693e9958bc873833259979835aa9bb479ccea08c0d46f7060, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:9f:61:2b:d7:8b:e9:4e:91:4a:f3:2d:72:
5a:67:a0:12:c5:c0:b0:8f:61:47:34:00:7a:d4:c2:
29:61:8f:2c:4c:31:df:77:9d:13:17:e1:03:89:a8:
14:28:cc:af:24:19:62:5f:7d:c8:ee:b5:1a:c1:a0:
dc:ab:0e:da:ba:3f:20:da:30:0e:99:7d:08:5b:90:
c3:7c:d3:c2:af:ad:83:dc:8c:5f:19:cc:9d:31:ba:
f3:a4:7d:a0:6f:6b:fe:99:2e:97:5a:e0:96:a2:88:
1e:7f:ce:f8:af:a5:9a:58:b3:14:01:0a:65:98:30:
93:99:a6:98:f2:f8:91:82:24:d4:fb:7e:fb:ad:31:
90:e9:0c:4f:4e:40:07:1c:88:82:82:0a:b5:83:fb:
c1:f6:6c:2b:f8:ff:b2:f6:54:53:a7:fd:84:82:24:
1d:80:6f:bb:91:b2:dc:5e:ae:52:78:e5:46:1c:6e:
c2:e7:10:4b:28:41:9e:39:22:b2:4f:c7:81:bc:f9:
1b:d1:68:00:f4:5f:f3:96:b2:3a:23:97:8e:8b:d2:
21:0b:c6:7f:a5:b2:30:79:35:e2:36:fe:39:e1:17:
8f:e0:13:93:01:b4:21:26:7f:54:9a:91:0e:a1:4d:
03:96:ef:3d:5d:a4:9f:c8:80:bd:36:8b:50:7c:39:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:D9:4C:C5:E3:89:E7:96:E8:1E:8D:A6:51:BA:DD:7D:C4:53:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0c7f07f-b89a-43dd-8573-8593f6ae6a52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.47.128.0/18
Signature Algorithm: sha256WithRSAEncryption
d8:00:07:52:40:16:14:7b:11:4a:84:7a:40:6f:94:52:15:70:
95:48:8c:a4:b5:8a:0c:c0:a0:77:3a:ea:a0:17:e9:a1:3b:06:
a1:ed:4c:19:fe:af:41:9c:f2:2f:f4:69:f0:58:96:b9:ff:4f:
97:88:3e:af:fb:ef:f5:69:a5:bf:d5:27:c9:93:9d:2c:49:07:
4a:ee:fb:6e:ee:5f:49:a1:06:29:ba:8a:ef:ff:17:7a:9c:ed:
eb:b7:be:09:25:71:78:da:a8:b1:2f:6e:bc:5f:b0:c3:0f:86:
11:4b:b8:96:cc:0f:ff:cf:05:b9:21:b4:25:4a:04:e6:44:af:
f8:62:21:2e:96:51:73:90:11:70:d8:bd:43:c0:58:3d:59:92:
e9:b7:86:a5:ee:10:29:cb:cd:ed:c6:13:be:04:ce:29:d0:ef:
c3:8a:2d:58:9f:34:06:a1:fa:44:bd:3f:0a:3e:c6:de:b1:d6:
e1:ed:a3:6a:21:38:97:71:16:ae:26:9f:4a:3b:42:c6:55:02:
d7:e7:84:6f:2a:46:21:e1:cf:e5:20:3c:18:6f:8a:92:8c:59:
0f:5d:cf:fb:58:4e:61:15:53:88:74:e3:3d:7b:ff:b6:de:73:
f6:16:00:83:16:92:6b:1c:cd:23:5f:65:0d:67:45:55:56:27:
07:4e:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:25 2025 by rpki-client