Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf903a4-db72-449c-a9f8-9df41cf27d70.roa
File: fcf903a4-db72-449c-a9f8-9df41cf27d70.roa (raw, json)
Hash identifier: mSHTDn3b+zWLgL3Sq0LS9PLOfNC3oLcU1vwz1BGpKrE=
Subject key identifier: DD:9D:D6:16:60:01:A9:D0:EB:0F:22:96:46:26:D4:A7:DE:8E:4F:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E20D49EAFC594335B94A166E88777D46131459D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf903a4-db72-449c-a9f8-9df41cf27d70.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.70.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:20:d4:9e:af:c5:94:33:5b:94:a1:66:e8:87:77:d4:61:31:45:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:6f:5f:4c:54:2f:be:69:96:b2:1b:28:38:
cf:7e:79:f7:8f:91:fa:f7:f6:76:3a:3d:30:53:70:
ab:5d:d9:c4:ad:19:db:bd:00:9f:15:8a:a4:91:eb:
56:b5:05:9e:e0:19:b1:f0:2a:ca:5b:9a:85:7b:4a:
34:a6:87:3c:28:94:ad:41:29:5e:0d:5c:d1:9f:07:
41:67:6f:4b:90:8a:7b:36:ce:72:36:6d:3c:0b:73:
54:46:84:a8:90:6e:90:81:4d:ae:c3:51:50:6e:da:
29:3f:5c:74:b9:aa:f6:24:ed:de:21:bc:63:71:dc:
b4:48:72:0e:85:4e:30:59:10:c9:23:da:b0:25:28:
82:42:a7:61:72:f8:99:08:57:9e:13:a4:57:c7:68:
2e:f5:af:cb:f0:f2:36:85:d7:65:e4:23:45:be:11:
c1:75:1f:87:ed:64:d4:83:56:6d:2e:9e:2d:da:d4:
c1:fb:4f:0a:51:71:73:01:fa:ab:fb:e2:85:25:3d:
f6:c3:91:96:5a:a8:75:f0:10:66:97:de:a9:72:5c:
69:3d:39:03:b0:d2:a6:22:fe:dc:22:57:32:0c:96:
82:f9:53:58:55:f1:02:d2:55:9b:ce:9a:3f:6b:79:
25:a3:30:84:c3:6e:5a:3e:b8:34:a3:ec:15:f2:6b:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:D6:16:60:01:A9:D0:EB:0F:22:96:46:26:D4:A7:DE:8E:4F:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcf903a4-db72-449c-a9f8-9df41cf27d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:f0:37:1a:f4:c6:5a:93:9d:0c:3c:c5:8f:00:35:3e:de:c1:
e5:2b:d0:a9:fe:63:e1:b9:22:ea:a5:1b:56:4a:64:a8:6e:06:
c5:ae:4b:f0:70:63:9d:81:42:28:34:e1:45:5c:9c:00:b9:82:
d8:f6:16:59:b9:d1:a4:eb:ea:02:57:23:f6:16:24:8d:d1:68:
21:90:b3:0d:0d:1f:b9:e1:05:04:bd:80:a1:35:2d:fa:87:88:
90:6a:a5:35:99:fb:b3:55:9a:a0:ef:7f:61:bb:97:17:d8:09:
bc:44:b2:05:01:e9:df:6d:7d:d7:bf:27:24:b4:c0:89:c4:42:
c1:72:79:28:d6:41:68:4a:83:65:86:91:ab:89:41:c6:91:65:
4b:ee:a4:83:ff:be:65:31:da:17:14:89:28:c0:9a:ec:5d:0b:
33:b1:24:84:a5:53:6d:c6:54:78:98:89:90:51:f0:e4:68:d9:
e4:e3:fd:03:ae:ec:3d:4f:de:24:a3:c1:97:58:91:2d:e7:39:
1d:e5:66:43:e1:10:b4:d9:77:e1:0d:a9:8a:4d:0e:9a:43:e1:
41:78:d9:fd:54:cc:c6:f3:07:0f:c8:e3:a9:51:ed:51:ea:8b:
70:85:fd:7c:30:ba:16:79:fd:97:99:84:39:a0:49:be:b4:d9:
18:5a:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:38 2025 by rpki-client