Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96650e67-0d1e-40a5-9d15-7a6311f13e17.roa
File: 96650e67-0d1e-40a5-9d15-7a6311f13e17.roa (raw, json)
Hash identifier: OIo7epWzv6DLbv8e85q4OPvivBz1zZxgSSk2y4TaxFA=
Subject key identifier: 43:D5:21:05:A4:4D:2F:9A:5A:50:C3:0C:9A:40:F7:6C:84:5A:D9:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 143AE630C4852845340705F7EFDB20DC1D7983AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96650e67-0d1e-40a5-9d15-7a6311f13e17.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f01:48d0::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3a:e6:30:c4:85:28:45:34:07:05:f7:ef:db:20:dc:1d:79:83:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:d2:a1:f4:8e:93:14:4f:77:58:b6:03:2a:
6c:b9:12:39:3a:d9:49:ab:10:6e:86:f0:95:78:33:
88:b0:1b:f9:6e:47:14:22:4e:6d:ee:c1:90:94:4e:
74:fd:6a:7e:6e:d1:87:b9:1d:23:12:d0:58:e6:67:
af:1b:2b:78:f1:0c:7e:32:77:2a:32:05:f2:ab:f5:
51:f6:7f:e0:38:25:e1:9c:fd:20:43:b0:83:61:4e:
a7:9b:05:67:06:8b:3f:d4:13:7a:15:0a:f9:d7:a1:
32:52:23:e6:83:bd:a4:da:9b:5e:ce:21:c6:59:13:
e6:fb:23:bb:d2:a6:b4:0c:da:ca:c4:80:c5:84:34:
7b:a2:07:d5:08:18:83:b5:84:fd:80:28:67:78:4a:
6f:be:26:28:04:16:77:a5:41:7f:06:15:4e:2a:bd:
a6:cd:5c:7a:a5:a1:df:8f:55:47:d5:b0:35:92:e6:
c6:3b:df:bf:00:a6:6d:96:1e:42:9b:62:b8:7b:56:
0c:d6:34:1e:3e:aa:26:67:ad:90:ff:24:27:c8:c8:
a5:71:4e:59:14:6c:8c:f2:14:6e:0a:88:1b:dc:3a:
7c:14:87:b7:ff:6e:8a:50:f0:91:9a:cd:1c:e9:cd:
59:44:ee:5f:34:c8:26:e5:31:ce:71:41:c6:83:69:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D5:21:05:A4:4D:2F:9A:5A:50:C3:0C:9A:40:F7:6C:84:5A:D9:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96650e67-0d1e-40a5-9d15-7a6311f13e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f01:48d0::/47
Signature Algorithm: sha256WithRSAEncryption
64:7b:43:56:77:0b:65:ab:ba:cd:d6:78:00:2a:da:cc:15:2f:
20:41:5e:f1:24:a6:78:36:67:7d:da:10:ae:e7:61:08:59:05:
15:b9:16:13:5e:19:da:e8:a4:89:6b:7b:b7:1a:9a:71:d3:3b:
ca:9c:46:0f:f4:dd:f2:49:7e:c4:3e:bd:14:44:07:1a:8e:57:
4b:17:6d:d4:cc:f2:77:66:91:07:d5:5f:c3:00:5f:cd:76:64:
d6:17:8e:71:8d:14:2d:de:ce:cc:f3:02:aa:a1:d6:da:9b:9b:
4b:f1:2d:54:cd:a3:7b:5c:18:2a:bb:55:ed:73:40:d1:c0:7d:
54:aa:1c:63:be:2f:80:11:c2:05:2d:6b:19:ef:01:c0:cc:e0:
da:92:8b:d0:99:73:a5:e3:e7:4c:f0:65:25:51:e8:6d:0d:53:
de:bd:4f:54:3a:1e:a7:ce:c2:a8:10:c3:d4:20:83:78:f2:e1:
79:b3:f7:1a:76:83:a2:c1:12:23:e8:eb:22:43:87:6d:31:83:
28:cd:cf:f8:a9:d7:55:61:71:fd:7b:2d:8b:98:5d:c2:9c:3d:
dd:86:b5:18:71:b7:c6:93:73:36:78:e7:31:73:fe:7a:53:02:
74:36:12:e4:b5:78:ca:18:3d:80:8b:6d:8d:52:e2:ec:d7:a2:
68:80:da:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:00 2025 by rpki-client