Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f2a1b5-7277-45b1-a673-5d7786ef1a9f.roa
File: f2f2a1b5-7277-45b1-a673-5d7786ef1a9f.roa (raw, json)
Hash identifier: 3mt/pU0VYu7GGXLHtclF0By7dPtaXTEAh8+5nSElnnA=
Subject key identifier: D4:12:A0:7B:5D:A6:FC:48:6E:DC:E5:2C:D8:4E:44:FB:05:6D:AF:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22194E074DB070E001D9DEDA829E4A9C253A47A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f2a1b5-7277-45b1-a673-5d7786ef1a9f.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 75.47.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:19:4e:07:4d:b0:70:e0:01:d9:de:da:82:9e:4a:9c:25:3a:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:12:7a:c1:63:97:de:5e:bc:ed:c2:e9:d8:
ad:43:f9:ec:43:7c:a7:d4:23:9e:2c:9d:ed:2e:a9:
1d:1b:16:e2:d5:f0:94:cc:71:f0:78:ac:46:7e:87:
97:79:36:cd:c2:a3:1b:af:ee:ee:b9:bb:50:82:3b:
5e:39:aa:ab:7b:9d:84:d5:a5:49:13:c1:ac:bd:e7:
c5:1b:66:ae:96:f5:21:8e:03:30:55:ec:5f:b0:59:
8b:e7:07:85:64:cd:a9:ec:a1:20:43:57:77:0e:eb:
93:dc:63:96:11:80:d8:dd:84:6b:23:82:b6:55:e5:
b2:4a:6c:59:8d:88:95:20:8f:29:1a:41:4e:04:16:
d4:b5:fc:a0:81:71:b6:51:dd:49:c2:6f:f4:52:87:
a1:67:64:b7:34:86:67:45:f9:47:4b:c6:03:00:93:
cd:bc:08:58:9c:0c:b8:74:99:b0:28:29:ae:d4:42:
41:d0:5b:39:92:b6:2c:cf:8f:1d:a7:3e:29:cc:35:
fe:27:f8:d7:9b:49:79:7d:89:b1:d8:6b:b3:e5:3a:
1b:d8:b2:81:26:8d:78:af:46:85:5d:66:ee:61:fa:
8b:1c:84:02:ba:06:54:d9:6b:73:07:29:f7:b1:cf:
ee:63:a1:ae:ce:03:8f:69:1b:70:ac:cb:73:b0:f5:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:A0:7B:5D:A6:FC:48:6E:DC:E5:2C:D8:4E:44:FB:05:6D:AF:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f2a1b5-7277-45b1-a673-5d7786ef1a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.47.128.0/18
Signature Algorithm: sha256WithRSAEncryption
43:d5:47:98:25:8e:4e:7d:0d:22:aa:e4:ab:35:01:d3:51:11:
3a:04:fe:33:9b:5e:af:7a:d7:53:ca:19:aa:83:99:39:d6:48:
6a:21:3b:a4:50:32:36:6a:76:7a:5b:bf:f9:3c:60:d4:78:b3:
d0:d4:67:1d:4d:00:49:80:0f:8a:96:91:d9:8d:5a:b4:b0:21:
6c:99:68:d8:4b:3a:47:56:36:4c:08:1a:fc:ad:d6:09:be:26:
ef:a3:21:be:96:13:46:27:9d:4b:18:2d:05:a9:83:67:67:34:
29:4d:f8:ff:19:fe:85:2f:0c:7c:45:c7:86:71:2d:6d:9b:bd:
9b:e5:25:4a:23:34:2b:89:e6:b5:2d:73:8a:72:e7:b5:2b:7b:
e3:7f:b3:3a:e5:59:cc:7b:96:b0:44:59:35:49:13:22:ed:6a:
f4:3a:3f:99:93:ae:32:dd:ca:a5:7b:90:8d:37:63:58:cd:9d:
94:11:80:d7:14:b6:cd:47:97:88:b1:16:0e:69:6c:92:bc:5a:
e1:e2:25:a5:63:24:5f:34:87:75:0d:40:8b:cc:e9:e3:47:da:
bd:f5:b2:5c:ab:eb:b8:76:29:b4:dd:bf:b4:57:92:c1:b6:27:
de:95:68:4e:18:48:a3:65:f7:e7:06:77:17:4e:9d:a9:35:12:
10:08:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:15 2025 by rpki-client