Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50067b5b-f740-4a9b-bfd2-118c40c9df68.roa
File: 50067b5b-f740-4a9b-bfd2-118c40c9df68.roa (raw, json)
Hash identifier: dm6Zu/1EWMVOYfCmCEtOcNyyuKeTdzckjwHygijEvRk=
Subject key identifier: 95:06:4F:27:64:D7:92:92:29:D1:3F:FC:2E:23:9D:E8:55:1C:86:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A856A3C534C86258AF3B93B200FF75792A80771
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50067b5b-f740-4a9b-bfd2-118c40c9df68.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f30:6000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:85:6a:3c:53:4c:86:25:8a:f3:b9:3b:20:0f:f7:57:92:a8:07:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:08:61:9b:b5:0e:d7:63:7b:6d:be:21:bb:
6b:46:9d:7e:41:44:56:2a:b2:ac:5b:d8:21:24:d8:
d0:68:8b:7f:9e:b2:63:9c:54:6e:0b:3f:b5:21:ec:
ad:6f:06:38:e3:85:90:80:53:31:5b:9f:b1:b2:ce:
9a:bb:1c:fe:a7:fc:c1:ec:b8:69:9d:fb:7c:97:07:
d2:bc:42:8c:1f:e2:23:77:c1:7e:12:d8:b9:e6:d0:
cf:b1:c3:b7:f3:e7:d8:76:45:4c:d3:12:5b:b0:23:
6a:c6:55:11:e4:37:81:7b:ea:84:23:33:cc:2f:7b:
c8:a9:bf:35:d3:d5:f8:ae:28:b0:2e:9a:61:2b:4e:
db:34:02:87:6e:e7:4e:7b:26:34:3f:53:3b:b7:56:
bf:15:52:e4:24:66:1c:b4:a8:d5:ee:98:99:d8:bd:
42:07:7b:62:da:1f:31:6b:fc:4a:60:d2:16:9a:91:
f4:9a:cf:24:72:99:15:09:ca:8d:b4:5c:9a:03:1b:
1c:c9:16:4c:36:46:33:d5:37:2d:69:a7:9a:c4:21:
8e:19:fa:d2:62:04:66:e5:b5:fa:93:a4:0c:2b:16:
16:94:0d:56:f1:0e:e7:28:2e:66:a8:bb:98:fe:73:
cf:7a:35:3a:c9:84:27:48:f3:67:2c:27:81:51:8f:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:06:4F:27:64:D7:92:92:29:D1:3F:FC:2E:23:9D:E8:55:1C:86:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50067b5b-f740-4a9b-bfd2-118c40c9df68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f30:6000::/40
Signature Algorithm: sha256WithRSAEncryption
94:e4:c4:0d:00:2b:9e:cd:0c:33:27:94:a1:d9:34:86:d1:d3:
ad:58:52:5b:38:d9:57:1d:e8:1d:94:4d:f0:e2:20:b2:46:28:
b8:b0:4d:31:1b:ef:81:c0:71:9e:70:7c:5c:21:13:02:1c:a1:
7d:a4:a0:93:fb:20:0e:51:da:1c:04:5b:07:06:a5:08:93:ce:
af:d0:ae:50:58:e6:ee:f7:1a:aa:aa:a6:1d:08:13:0c:3c:2e:
10:54:63:ff:c6:47:36:8b:12:2e:95:cd:80:04:2a:8c:93:3b:
f6:df:08:58:47:e5:88:93:1e:f3:ef:67:49:30:37:60:f5:f2:
2d:03:cd:ee:af:3d:51:ac:55:41:69:da:45:91:ef:78:28:34:
8a:88:d7:30:e8:88:eb:0f:1f:d3:f1:06:be:0e:97:1b:6b:ef:
4d:64:bf:bc:f0:23:89:e2:c2:e1:74:fe:a1:90:a3:e5:be:b4:
be:66:3f:64:1b:ef:76:94:d4:9b:07:8d:27:af:27:03:14:b2:
de:ba:1f:5c:7e:b9:ca:fb:d9:09:09:e7:7a:4b:a6:e3:40:1d:
1e:5a:7d:cd:de:64:30:5c:9c:13:84:ea:66:b8:19:bd:fc:b7:
fb:c9:16:35:f9:a5:39:e5:1e:fa:fc:40:93:10:34:5c:1a:12:
ac:93:7d:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:48:57 2025 by rpki-client