Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa
File: 1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa (raw, json)
Hash identifier: rAgK/LRN2EE0g5v/3SoltkNELKFo/jlcx1HAnz0UxMI=
Subject key identifier: 8C:84:31:C1:4F:9F:69:3A:F3:C3:EB:0F:65:F4:98:93:52:E6:A2:FF
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1ACEA6E1E07DD5F0BEC33AF7387E0F54B0354FDA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:520e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ce:a6:e1:e0:7d:d5:f0:be:c3:3a:f7:38:7e:0f:54:b0:35:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:a2:a7:5d:96:6d:03:81:c2:d1:5e:d0:eb:
0a:76:f9:f6:1d:b3:18:8c:3b:57:4b:d8:67:5e:41:
23:25:06:36:a8:6e:72:50:d3:3a:8e:75:8b:6b:d3:
37:d7:12:ce:b7:be:2e:14:df:08:f6:39:9c:37:7a:
d1:ad:1a:33:46:b3:ee:d1:8c:54:55:c3:ef:ad:50:
3d:3d:68:3d:a2:9e:fb:2e:dc:98:e1:68:cc:13:07:
cf:26:48:33:00:b5:a2:62:5d:4d:1f:3f:4e:4c:a6:
98:89:cb:f3:a4:77:fa:45:5f:1d:e3:5b:5d:3f:ff:
86:77:e7:aa:fd:b2:ec:3b:f1:41:0f:b8:1b:71:79:
9a:e6:8e:95:d2:32:ab:b9:ad:20:73:e7:c5:b4:bc:
36:68:5a:58:5b:73:b4:de:6f:4c:7a:69:bc:ce:02:
c0:fd:3d:b8:45:40:29:87:4c:40:49:28:52:9c:a0:
a6:b2:c4:a3:32:18:37:03:f7:13:3a:0f:9c:c8:85:
dd:a6:d4:d8:b0:0b:3a:7a:16:55:07:1c:10:33:d0:
92:0b:5f:7b:6f:d2:3a:96:1e:52:df:b7:80:dc:fd:
8d:e0:a5:45:d7:71:1b:3c:ac:46:02:d8:a8:3e:22:
d3:9d:ec:c7:66:a8:9e:72:fe:8f:ec:34:42:7a:29:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:31:C1:4F:9F:69:3A:F3:C3:EB:0F:65:F4:98:93:52:E6:A2:FF
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fb1b2ec-1723-461b-a643-7e2c5b8741dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:520e::/48
Signature Algorithm: sha256WithRSAEncryption
9c:1a:dc:f2:97:62:9d:65:03:86:6c:09:1c:21:9d:a0:c1:75:
35:7a:0f:1a:de:99:a5:7b:60:48:2d:a0:20:fe:3b:ca:e3:34:
d1:21:15:23:a4:bb:a1:4a:55:26:d7:82:35:fa:64:e9:30:85:
ec:c5:65:ca:8a:96:af:11:e5:a1:a7:d1:08:8b:a9:05:a7:1a:
cd:61:d2:50:59:60:3c:0e:86:18:54:c5:5a:be:1d:92:8b:d0:
f3:3b:c1:db:fe:36:ea:1f:56:5f:af:f8:bf:f5:34:5c:fc:81:
cb:7f:65:43:8d:f3:d0:d1:0c:22:89:e7:20:fc:78:f1:21:b1:
ce:5b:43:6a:1c:a5:07:6b:54:e9:2f:e8:dd:4c:46:9d:15:76:
ad:00:9f:ae:40:f4:bd:f8:94:96:26:c3:42:2b:09:8b:6b:9e:
90:d0:9d:ad:70:7d:b9:f9:ef:99:18:21:9e:c4:b0:d1:fd:65:
09:76:7a:4a:64:42:ed:00:85:7b:8c:f7:8c:56:ec:0a:38:6b:
b8:71:63:d3:fe:4a:70:a0:72:9a:b6:5e:be:55:b2:6d:cd:c3:
ac:1a:29:55:25:ad:51:7a:c1:74:fa:ff:49:93:2c:c7:a0:e9:
cd:d2:37:ae:02:3a:03:fd:c1:31:1f:f9:b1:a9:f8:86:a9:75:
04:2e:dc:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:50 2025 by rpki-client