Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb066706-7653-4cd6-87c9-363d0745606c.roa
File: eb066706-7653-4cd6-87c9-363d0745606c.roa (raw, json)
Hash identifier: x8izvCBSe4+FXqVSI5k+bUQ2rcv6d50YiTrdmvOn7zY=
Subject key identifier: 8D:7B:AE:51:8E:0A:F4:7B:8A:C4:92:25:74:CD:3A:EC:06:ED:60:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2790D469665813A5361EDB19A17929F4025C6EF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb066706-7653-4cd6-87c9-363d0745606c.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f12:4000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:90:d4:69:66:58:13:a5:36:1e:db:19:a1:79:29:f4:02:5c:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:a8:cc:97:f2:ac:57:45:9e:d1:f4:78:f2:
57:c9:75:38:ff:46:24:c4:b9:6d:7c:e8:a6:c1:8f:
08:fc:ad:b2:25:f3:f7:c2:bd:46:89:ba:89:81:4a:
f5:0b:0f:02:e1:10:8f:2f:23:2a:d6:87:4f:8d:67:
cb:c5:ca:5f:1b:76:c5:18:17:4f:07:88:65:ad:a4:
e5:a0:fa:c3:54:86:58:eb:4e:75:c3:17:c7:cf:64:
f6:65:d6:20:eb:d0:37:10:3a:8d:cc:54:fe:cb:ec:
11:5e:be:a3:fb:60:79:ce:ae:49:8a:c4:aa:29:48:
8d:64:eb:10:fe:50:8c:85:eb:ef:01:ac:2b:0e:5b:
02:f3:a9:9c:61:11:b6:b7:9d:5c:fd:7f:24:3d:5d:
60:8b:75:9b:5c:ce:eb:30:6b:74:6e:84:05:5a:91:
9a:b2:c4:3f:86:09:cd:dc:91:a7:d8:9e:57:fc:da:
e1:02:2a:a0:ba:1d:57:ad:db:2e:4d:a7:75:c8:cb:
d2:57:bc:c6:23:7c:04:b5:74:06:bb:89:34:f5:6a:
fe:61:f5:38:8a:9d:6b:97:e7:0a:ca:6e:87:74:2e:
67:86:a2:86:7d:de:d2:75:a3:c9:09:9c:cf:38:27:
63:74:e9:ca:81:d1:9c:5c:15:1f:05:bd:4e:e7:f4:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:AE:51:8E:0A:F4:7B:8A:C4:92:25:74:CD:3A:EC:06:ED:60:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb066706-7653-4cd6-87c9-363d0745606c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f12:4000::/36
Signature Algorithm: sha256WithRSAEncryption
00:3f:4b:9a:b3:28:b5:3e:0c:7f:22:d7:3f:a1:81:90:63:7d:
2d:01:38:9b:53:d4:03:84:4b:5a:67:58:29:13:b5:37:8f:26:
d6:4d:34:8d:75:e8:21:f7:74:77:92:cb:29:e2:44:78:e9:6b:
83:18:8c:02:64:38:a0:b4:79:cf:d4:14:50:ed:f3:5a:95:17:
27:46:0a:d4:d9:9e:3b:9e:68:dc:cb:fa:6f:40:a1:82:9d:a5:
09:60:74:98:b4:2e:2c:7c:08:c1:62:0b:6e:c7:6c:32:4d:12:
5f:8e:81:74:8a:3a:90:c1:b4:0b:ff:03:08:27:a0:5c:74:09:
27:ed:95:1c:5d:eb:5b:6a:73:05:4e:42:b8:24:ea:c9:12:1c:
3c:68:e4:ab:51:81:42:da:15:aa:7b:f8:79:05:30:a7:84:06:
50:ce:62:20:07:dc:5a:ac:71:12:56:9f:20:c6:2c:23:d0:03:
e4:b2:33:08:ae:ad:14:5e:3c:fc:3b:95:45:9b:58:71:ca:55:
71:ce:86:c8:34:9d:75:3a:e7:da:b3:86:b6:eb:0c:30:cd:72:
12:57:dc:4d:de:5f:13:4a:20:12:2a:57:e1:91:eb:0b:bb:a5:
23:a5:0c:7c:8f:7f:65:57:4e:94:ce:a1:06:80:11:44:8a:ed:
ca:e3:df:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:11 2025 by rpki-client