Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a32546f0-94be-4720-b283-64ccc22c57a6.roa
File: a32546f0-94be-4720-b283-64ccc22c57a6.roa (raw, json)
Hash identifier: jvJhEGYBwGpM1d/aV8F3E3KaV83L8GMUlrlVqYD3Rvs=
Subject key identifier: 95:56:E5:76:D0:91:B0:D9:36:09:E6:86:D5:91:97:E5:29:C4:04:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0217AE386DC3B8D92A656DFEF0D4DE5109D3E68C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a32546f0-94be-4720-b283-64ccc22c57a6.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1f:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:17:ae:38:6d:c3:b8:d9:2a:65:6d:fe:f0:d4:de:51:09:d3:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:b6:d0:8a:2b:62:c4:94:17:7c:1b:3a:39:
26:5a:85:8c:1e:da:b8:6e:17:ea:63:30:1e:51:fb:
8a:aa:5e:fb:27:a6:8d:e9:cf:bd:b5:77:f9:e6:a2:
cb:2a:c8:23:9e:f1:f9:52:3f:12:80:5d:24:79:c5:
d2:85:33:28:95:cf:92:e8:c0:c0:cf:0a:19:25:53:
33:84:b2:6d:07:66:2b:95:84:2a:f5:68:f3:69:60:
d0:b2:aa:05:9d:43:c2:18:70:80:1f:ab:ba:71:2d:
06:dc:1d:eb:80:3d:eb:eb:fe:35:49:da:87:71:f4:
7c:34:e5:07:87:4f:71:d0:c3:aa:3d:fa:80:89:03:
cd:26:c9:8d:c0:08:1c:84:e5:de:81:6c:0a:5b:ca:
61:87:ab:e0:95:ff:59:a4:97:c7:4e:5b:5f:36:c6:
23:96:34:25:94:f1:53:58:3d:e9:3a:f4:dc:bb:d1:
1e:cf:60:23:d0:e4:fa:90:46:f5:02:f2:82:f7:bb:
83:e4:0d:76:32:a9:fd:6d:4e:6e:44:33:e0:e6:0d:
38:f9:70:35:87:47:0d:bc:b7:50:24:db:2d:7a:f3:
0a:30:b5:5e:3d:85:84:d2:69:24:e8:02:cf:cc:af:
a7:97:bb:25:a7:6e:21:f5:37:ab:4b:55:13:8a:b5:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:E5:76:D0:91:B0:D9:36:09:E6:86:D5:91:97:E5:29:C4:04:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a32546f0-94be-4720-b283-64ccc22c57a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1f:4000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:42:4f:e1:b8:65:f6:13:48:8b:85:07:7d:c0:08:46:62:c0:
63:e2:19:c7:01:b3:67:a8:52:94:4a:2f:6d:6c:68:c5:6f:d1:
a4:5f:23:4f:7a:cb:cb:9b:22:e2:a2:07:26:97:ce:e3:1f:38:
cb:12:a7:1e:02:c7:cb:b5:71:75:0c:34:0c:f4:c3:28:32:52:
66:ae:54:d1:78:77:c2:fe:67:62:85:4c:1c:1d:02:b7:b2:70:
35:3b:39:58:cb:b5:dd:00:9c:9a:b5:09:19:a7:a9:8f:ae:a0:
42:0a:29:30:91:b6:88:96:71:b0:a2:8a:46:07:55:92:8f:e0:
71:5d:29:ce:5c:4e:37:42:5e:bb:2e:1e:87:42:6f:37:dd:e5:
c9:53:de:4d:44:da:b6:3e:9f:3d:3c:88:41:43:d6:44:bb:b9:
32:2b:65:12:17:77:40:8d:97:da:cc:56:60:0b:1a:bd:b2:dc:
35:fb:17:9d:39:43:0d:5c:a4:26:98:a7:dd:0e:d1:0f:9c:d9:
e2:c5:25:68:b1:07:57:88:9a:3a:03:d6:2d:ce:5c:fa:d2:a5:
03:91:97:23:53:69:39:26:77:8f:d2:89:48:b3:70:bd:c8:54:
2e:01:af:de:ab:c0:c2:ca:2c:ce:9a:b8:31:d1:87:86:57:a5:
2d:cf:13:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:36 2025 by rpki-client