Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86c15cc4-15de-4fc4-80fd-a97ace5c7e52.roa
File: 86c15cc4-15de-4fc4-80fd-a97ace5c7e52.roa (raw, json)
Hash identifier: iQQZp3ZH4PzDIVYOK+LkZugKkzNgQ+ffg9OaGDh5yzs=
Subject key identifier: 77:A0:64:08:03:35:4B:E5:46:31:B1:5A:D6:C8:1D:7B:85:12:1A:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A60848C2EC76DD95DF851BE04B4BF583385F8E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86c15cc4-15de-4fc4-80fd-a97ace5c7e52.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f60:4000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:60:84:8c:2e:c7:6d:d9:5d:f8:51:be:04:b4:bf:58:33:85:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=44d838bcead3820752105cb815267cbc88632ca03d7a8c6befb7070f50ac2f5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:1c:d2:6b:05:a8:79:b2:fa:a2:0d:80:2b:
44:bb:c8:9c:88:73:88:dc:d2:57:3b:a3:4e:27:b0:
d4:c0:78:10:3e:9a:3c:b4:34:2a:94:13:98:00:04:
97:f2:ca:bb:26:64:02:f0:5c:06:5f:26:3f:32:f0:
76:ad:e7:de:36:8e:3a:17:ab:23:ac:bc:80:b3:bc:
90:08:65:a1:46:e1:6e:19:79:d2:dc:5e:1a:7d:24:
53:ef:9c:36:6f:7f:fd:fb:2c:e1:45:78:05:96:a5:
41:ee:36:0f:b1:5e:19:08:43:3f:93:de:4b:6f:b8:
ba:47:8c:05:54:7c:8e:2c:f4:29:86:2e:3b:f9:76:
eb:44:21:bb:69:13:bc:ac:15:a0:13:1d:43:33:75:
65:67:94:39:99:b5:cf:5c:8c:b3:a7:d1:60:a6:8d:
13:26:82:65:3a:3d:6c:04:ee:8e:2f:c9:51:ca:9c:
ae:62:ef:48:b8:8b:59:5b:47:cf:cb:b7:b2:5a:a9:
c1:66:1b:54:82:ac:8b:37:fd:b6:e9:3f:e8:cd:94:
c5:05:1d:66:7d:fe:03:27:93:95:00:5a:f2:cf:7d:
ec:44:3d:a0:5a:77:72:82:66:d5:84:66:a0:95:9f:
84:3c:42:2a:ae:86:e4:5a:c3:77:a2:bb:cf:47:fe:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:64:08:03:35:4B:E5:46:31:B1:5A:D6:C8:1D:7B:85:12:1A:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86c15cc4-15de-4fc4-80fd-a97ace5c7e52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f60:4000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:67:23:69:9e:74:c9:ae:ec:ea:95:43:29:0f:d9:29:3d:b4:
67:57:67:61:06:a2:0e:c0:3e:fa:38:2f:06:97:71:70:d3:ce:
2f:fc:53:ed:0e:b9:08:11:b9:be:83:16:af:42:63:48:f5:9d:
8b:77:19:33:53:69:b9:47:33:85:77:47:b5:76:9d:c9:b5:0e:
0c:64:cf:96:f9:17:c3:89:10:04:40:90:64:e9:8c:16:fc:ce:
7f:93:0c:66:44:55:73:74:ba:04:39:11:f3:31:16:fd:1a:54:
78:d3:e4:10:53:ad:56:bc:aa:d3:db:3b:28:d9:49:fb:6b:26:
40:df:17:5b:b7:51:a4:07:25:18:79:bb:4b:38:cc:9b:dc:85:
71:50:e7:dd:d7:60:8a:20:7f:30:87:59:2e:d8:3c:19:c3:8b:
62:18:24:7c:8b:78:4b:2f:f9:8f:87:79:3a:e7:18:1f:aa:39:
1b:ff:a4:93:ac:ad:3b:1c:24:01:7b:c4:59:fe:91:6e:84:40:
7e:17:74:f1:ae:71:e9:01:ad:23:53:30:91:57:9c:4e:b1:ae:
e6:51:6b:6b:de:b9:66:d1:db:7f:d4:9e:29:bc:35:27:19:9d:
89:c5:bf:6e:56:79:01:e1:78:81:41:4a:de:c8:4b:fc:3b:a7:
9f:6a:7d:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:02 2025 by rpki-client