Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad87789-e71f-4a6a-9f28-b5cd9e041c25.roa
File: bad87789-e71f-4a6a-9f28-b5cd9e041c25.roa (raw, json)
Hash identifier: ChFX3d0kFyyP4Ti/gIpXQyhrKgV6MfEZURyk9YAMcHQ=
Subject key identifier: 23:84:CE:CB:62:7D:CA:A6:78:31:0F:49:51:84:2B:5C:EC:9A:90:BB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15D4EB056EC74F10A1A35C623F4D8CED15A6A4BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad87789-e71f-4a6a-9f28-b5cd9e041c25.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f2c:c000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d4:eb:05:6e:c7:4f:10:a1:a3:5c:62:3f:4d:8c:ed:15:a6:a4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:e4:07:81:be:98:6f:64:05:1c:6a:46:5d:
74:96:3c:45:36:df:05:ce:85:f7:ce:1c:45:30:72:
f6:b3:df:dc:ef:43:de:d5:0d:95:5b:88:a5:eb:63:
09:97:5f:ff:2e:cf:28:ca:4f:ee:50:b3:f1:d0:70:
c8:30:21:8b:5a:b2:74:90:5c:95:06:f6:93:20:6a:
55:f8:bd:57:d9:78:91:f3:dd:78:be:4f:cc:37:54:
8f:41:e0:b1:5b:3a:3a:bf:01:72:d4:62:db:60:c7:
da:67:f3:e5:9f:47:07:cc:b4:ea:e4:0a:4c:3f:e4:
d8:30:76:df:73:74:27:1a:7a:19:66:50:03:d7:c4:
93:99:6d:c6:5e:d6:53:45:c5:10:0a:b5:ba:04:57:
fe:da:62:12:ad:9b:03:c4:7c:eb:d7:83:0d:d2:c2:
54:14:81:fe:f1:d8:0f:63:e7:c5:c6:83:b7:85:f5:
6a:7d:2f:a6:d4:00:f4:ee:b3:d4:f4:57:6f:c4:f3:
6f:b5:bc:89:91:bc:30:e9:52:41:da:b1:89:28:0f:
77:e0:10:b1:3a:bc:57:a4:15:b2:6e:2f:90:f3:6c:
41:a5:ed:6c:c1:55:e0:86:0b:68:d7:ce:bb:9e:47:
6c:ee:9d:95:72:f1:2d:d8:76:0d:5a:7c:b0:27:23:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:84:CE:CB:62:7D:CA:A6:78:31:0F:49:51:84:2B:5C:EC:9A:90:BB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad87789-e71f-4a6a-9f28-b5cd9e041c25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2c:c000::/36
Signature Algorithm: sha256WithRSAEncryption
cd:3d:67:fb:76:15:52:10:62:be:98:4f:98:dd:28:fb:a5:04:
71:3e:f8:aa:82:1b:dc:ac:d0:2d:f4:e5:1d:14:8a:21:92:ce:
89:99:1f:f0:37:e5:bf:e0:e0:72:93:7e:6b:eb:5d:a0:01:5e:
d6:d9:6d:2f:58:32:a7:fb:b1:5a:69:a4:9d:7b:ea:17:82:12:
60:29:cd:a6:50:9b:f5:c1:7e:97:29:43:b8:d3:07:d1:c0:55:
b8:25:d3:1d:4a:1e:92:8a:52:c6:e1:aa:fd:a3:bc:cc:25:c3:
1b:32:4c:a2:cf:13:4b:0c:83:58:8b:a5:d3:c3:7e:ac:11:68:
df:a2:25:b4:f5:fb:e9:b1:51:95:80:e3:c6:b1:9c:19:40:a6:
ef:a6:f4:d9:03:22:5f:70:1d:77:12:6a:b0:0f:52:af:89:4a:
60:f2:27:2c:89:6f:7c:a0:b4:af:de:1e:90:0a:15:73:4c:7e:
ec:63:a3:2b:76:6d:7f:2f:5d:21:38:14:03:6d:50:5f:4d:5b:
3f:d8:67:18:9f:d6:91:44:f8:75:3a:65:92:6e:bd:13:f2:b2:
8d:64:5d:75:8e:61:2b:9a:f5:bc:b8:48:da:2d:af:67:46:dd:
64:da:f3:8a:ce:a6:8c:9f:70:3e:67:6e:e0:41:2c:38:8c:cb:
cb:e8:cc:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:02 2025 by rpki-client