Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa
File: a712235f-f228-4cce-81b4-d68686df5c8e.roa (raw, json)
Hash identifier: 55ywLn0WcNKDGmDU1ftqjif4B2spCGVYx3kUoWsaxIQ=
Subject key identifier: C6:77:1C:31:B1:07:4D:97:68:A0:42:6C:E3:C7:61:FA:D5:0D:1E:C5
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 32EE80374C7BF2C29F5D091681412DAEEB676096
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa
Signing time: Fri 06 Dec 2024 00:00:00 +0000
ROA not before: Fri 06 Dec 2024 00:00:00 +0000
ROA not after: Fri 10 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ee:80:37:4c:7b:f2:c2:9f:5d:09:16:81:41:2d:ae:eb:67:60:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:00:00 2024 GMT
Not After : Jan 10 23:59:59 2025 GMT
Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:ae:7c:d7:1d:73:76:5d:aa:4e:2d:30:e5:
28:96:6a:a9:7e:35:da:27:11:df:a6:1b:e1:4f:f1:
36:f0:e4:b2:81:97:12:b6:c6:41:8c:24:67:b0:9e:
e7:64:a5:8b:be:a3:88:78:2e:a4:0e:d5:eb:5d:60:
15:f8:a4:3b:a0:aa:1d:c7:5d:81:70:ce:f0:1c:08:
db:70:9e:01:63:47:8e:01:72:82:96:76:a5:62:24:
7e:cc:9b:f5:f1:ee:e8:04:fd:18:b4:a0:f2:bc:a4:
9c:10:c7:3c:f8:43:3c:d5:71:1a:da:7f:ea:c6:5e:
c9:f2:44:78:92:ff:80:83:97:74:e8:58:d2:27:7a:
64:46:40:8b:43:1b:90:54:7c:ac:07:a2:92:92:a1:
95:e8:49:8f:6b:33:f2:45:76:a4:73:ca:9b:1e:e0:
b7:9f:96:f3:fa:0e:98:35:97:9b:1c:b2:32:f6:8b:
b2:9b:30:d1:86:39:e5:a5:d6:e4:91:c5:da:16:35:
01:f2:db:c5:1c:4f:4f:40:8f:35:70:d7:b3:46:8f:
87:f8:bb:fe:32:3c:74:e3:15:86:09:b8:9d:51:83:
4f:62:c2:06:ec:2a:fa:c8:3d:22:f1:89:a6:e7:a1:
a5:5a:f2:16:b7:fd:40:7a:e9:3a:c8:bb:52:d0:20:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:1C:31:B1:07:4D:97:68:A0:42:6C:E3:C7:61:FA:D5:0D:1E:C5
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a712235f-f228-4cce-81b4-d68686df5c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.178.0/23
Signature Algorithm: sha256WithRSAEncryption
26:eb:62:17:71:44:ee:be:15:90:98:ce:19:b9:ee:3d:26:24:
ab:e0:bd:8a:7f:ef:a6:d4:c4:0a:63:06:5a:63:f2:df:16:0e:
7b:08:1d:76:8a:b9:ff:d1:d9:79:42:86:27:ac:4f:e4:fe:46:
1b:d9:9c:83:9e:8c:49:b0:25:e2:ae:46:06:50:20:98:4d:36:
c5:48:1c:1c:f9:88:a9:f2:ab:08:d3:0c:e0:ac:e2:e4:b0:60:
b2:60:82:9f:a9:88:29:4d:82:b7:25:ab:62:14:99:a4:bb:b1:
fa:cb:bd:6d:b0:dd:7d:b3:c6:1d:60:e2:67:a1:a6:f3:8e:ad:
85:29:39:83:3d:51:dd:51:93:2f:9d:45:48:ff:d5:0f:5f:71:
9d:1c:27:ac:25:ef:10:83:2a:7a:55:fb:b1:33:39:86:25:ca:
14:2d:73:8f:dd:16:18:d8:ca:ae:0c:de:51:36:84:be:80:db:
db:8a:dc:66:d7:bb:e3:9c:25:58:00:bf:09:d3:23:bd:ec:2a:
62:bb:70:a3:81:79:ef:60:27:9f:06:52:0e:84:7e:bd:71:06:
3f:33:f2:e8:25:e5:22:96:70:dd:20:79:3a:14:5d:da:7e:87:
3a:18:fc:d9:eb:73:7f:6c:6c:fb:d1:ba:ae:4b:0e:72:9e:8b:
6d:e8:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:32 2025 by rpki-client