Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11e48f6b-70a2-4565-8614-e77e3bff90a0.roa
File: 11e48f6b-70a2-4565-8614-e77e3bff90a0.roa (raw, json)
Hash identifier: eWCbHiAE6BLHp1T4GWEjcOCBDYeKMsX3Oi5Y28+0q38=
Subject key identifier: 61:D6:20:8B:44:B4:6C:2C:1F:30:B1:68:5E:6F:94:B2:96:F6:36:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73B42D289AEBD5F4BA7C46C0F7FA48D4F8104D9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11e48f6b-70a2-4565-8614-e77e3bff90a0.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:e000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b4:2d:28:9a:eb:d5:f4:ba:7c:46:c0:f7:fa:48:d4:f8:10:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:ab:dd:69:b4:93:f9:31:04:91:28:aa:2e:
f3:91:d7:87:3e:06:ff:c0:6a:92:de:e8:2c:d7:e2:
e1:21:47:93:dc:60:b2:76:50:94:e7:45:98:fd:75:
83:a9:21:11:42:b4:8b:51:0c:8d:e3:0a:5b:7d:4b:
18:02:0a:20:b6:50:e4:08:ef:e1:7e:f9:db:91:5e:
7a:73:53:d9:ba:e0:d4:01:16:db:a2:2a:9e:63:c8:
43:82:47:2f:74:02:58:d1:da:ef:d4:54:a5:57:4f:
0a:4e:1d:8f:db:4d:98:9e:d7:05:10:2e:22:c3:30:
87:5f:03:d1:e7:63:81:07:27:49:97:52:98:4d:8f:
bb:07:84:a0:2d:f6:09:da:d4:8c:73:50:4b:0f:c5:
3e:41:c2:88:da:7c:b6:c3:1b:92:7d:7d:82:0d:5f:
97:ae:2f:44:d2:b7:08:25:13:dd:d5:6a:29:a0:78:
91:b2:6e:6c:e1:59:2a:a4:55:ed:7d:eb:3a:41:3a:
a7:9c:54:7f:35:86:6d:05:31:44:bf:50:7c:08:2e:
e3:b3:14:ed:93:1b:dc:bd:aa:83:d7:04:05:6c:b3:
ee:3f:a4:9b:54:82:42:e0:1e:ba:b4:32:a3:4f:69:
87:ef:c4:45:df:b9:47:98:a0:0d:48:f5:95:46:a9:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:20:8B:44:B4:6C:2C:1F:30:B1:68:5E:6F:94:B2:96:F6:36:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11e48f6b-70a2-4565-8614-e77e3bff90a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:e000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:19:09:f2:87:d5:77:aa:66:d3:55:28:9e:8c:f9:9e:07:19:
53:e3:b5:4a:b7:77:b0:df:eb:ed:5f:26:9a:9a:63:fe:06:24:
a1:90:63:8a:7b:8b:e4:30:8f:25:b3:e3:60:5d:cd:bd:5c:1c:
8f:6d:b1:38:13:3e:e6:38:0a:a1:25:47:b1:f7:5f:0c:30:24:
a7:3c:68:73:59:02:aa:f5:e5:ab:c0:8a:6e:09:f3:73:15:b4:
eb:a0:3e:7c:dc:b6:b5:0e:5d:0d:a7:20:60:3d:9e:6e:49:33:
b6:0a:9e:a6:15:5c:61:f9:4a:6d:b2:70:e6:2e:33:f7:62:32:
76:59:a6:85:40:0f:e4:51:e6:ec:a6:ef:23:90:c6:d4:af:86:
08:20:15:5e:0f:a4:ad:1a:cf:ea:7e:9a:0a:de:97:5a:e8:2a:
e8:84:06:fa:53:a3:4d:e7:fb:31:e7:d0:a4:46:f8:01:47:0a:
41:8d:72:c3:be:a3:e0:a5:2c:8a:91:d7:d8:44:ea:9d:66:56:
d4:99:48:59:b7:52:c8:ff:53:a2:42:d8:2c:77:96:63:33:f1:
44:86:cd:01:0d:2f:c7:7e:d7:d0:48:b9:b8:c6:1a:89:cc:61:
27:62:f3:67:45:b2:71:b9:d0:fa:39:ce:e1:5f:69:44:19:5b:
d4:98:88:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:46 2025 by rpki-client