Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e20313939313830.roa
File:                     3230342e31302e3139332e302f32342d3234203d3e20313939313830.roa (raw, json)
Hash identifier:          3IdR83ADirTY3qde5CpZKiOdr//tz2O9Ro+jzfdvfcU=
Subject key identifier:   55:BC:F9:24:C6:7C:5F:02:62:28:A8:FE:CC:3E:C9:D6:11:B3:FF:06
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       40FCFC8DAE5C7036DBED143F87C794BA403895E2
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e20313939313830.roa
Signing time:             Sat 15 Jul 2023 22:45:55 +0000
ROA not before:           Sat 15 Jul 2023 22:40:55 +0000
ROA not after:            Sat 13 Jul 2024 22:45:55 +0000
asID:                     199180
IP address blocks:        204.10.193.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fc:fc:8d:ae:5c:70:36:db:ed:14:3f:87:c7:94:ba:40:38:95:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jul 15 22:40:55 2023 GMT
            Not After : Jul 13 22:45:55 2024 GMT
        Subject: CN=55BCF924C67C5F026228A8FECC3EC9D611B3FF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:03:bb:ee:d1:a3:b3:7a:cd:c6:63:61:2c:
                    29:ea:35:b9:11:93:79:bd:52:3f:8e:04:38:cc:6d:
                    20:c3:f0:4a:3d:a9:02:66:54:ad:d8:ce:48:c0:c0:
                    7a:fd:a1:96:31:71:41:3c:56:bd:7d:af:ce:23:ef:
                    f9:9e:50:0f:15:70:10:6c:64:28:5a:2a:8f:72:6c:
                    46:eb:fd:7b:0b:d6:5c:78:8a:81:79:ad:1d:65:a9:
                    7f:1f:da:4a:a1:9e:b8:cd:72:02:d5:d5:3c:79:93:
                    de:40:c2:08:3c:e4:e1:37:9f:0b:d5:8b:d3:5e:9c:
                    73:0f:cb:7e:0b:69:be:c6:46:c5:a1:77:03:00:15:
                    f8:e4:b1:48:67:11:a6:c5:11:4c:28:66:e9:af:6d:
                    10:f7:aa:4f:fe:9a:57:69:fb:d4:99:34:90:4b:e8:
                    b9:72:19:62:4a:ee:4e:0f:cb:f9:7f:e5:f2:c6:f2:
                    88:34:4b:16:0d:36:b8:ba:f9:56:d2:d3:77:ce:e4:
                    fd:32:2c:d7:64:48:8f:e0:a6:70:89:98:67:5a:ba:
                    2c:fc:0c:14:5a:c6:d3:28:65:a9:0a:9f:05:5e:52:
                    6c:e1:86:09:6a:3d:33:43:73:4d:2e:d1:76:8a:06:
                    db:23:8a:e1:2f:6e:17:0b:cb:6d:8b:05:85:9f:e5:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BC:F9:24:C6:7C:5F:02:62:28:A8:FE:CC:3E:C9:D6:11:B3:FF:06
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139332e302f32342d3234203d3e20313939313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:74:9c:b7:25:34:65:4f:9b:07:f6:69:3d:d0:f2:e7:b3:
         41:f0:96:f0:97:a1:d4:5e:9d:61:40:e1:f3:97:c0:3d:33:2a:
         f3:8b:07:08:e6:c8:81:9b:f3:98:b1:7c:2d:9e:13:a4:0a:37:
         d8:67:d5:27:c3:65:ad:3a:b8:45:dc:46:3c:54:3e:3b:60:12:
         24:47:e8:d1:00:14:7d:59:be:07:87:23:69:1e:3e:71:d2:21:
         0f:8a:c0:a4:16:26:e8:d8:4e:65:87:af:83:e0:f1:12:f4:91:
         a7:92:88:19:d6:b3:34:3d:10:67:0d:df:e3:ce:b1:fc:c7:6f:
         23:ae:f8:b0:26:56:e8:f4:ca:ab:3e:40:fc:b6:46:93:3b:e8:
         dd:90:35:dc:e7:65:1d:d5:26:41:e1:c1:02:ff:4f:3c:7a:17:
         3a:e2:9e:25:2d:b8:70:1d:8e:22:56:8f:f0:48:03:be:be:85:
         34:f9:fb:81:df:12:49:51:c1:a9:3c:9b:55:94:40:0f:3b:8b:
         8e:ee:cb:21:b2:aa:1a:a7:d3:04:f8:21:63:71:f3:97:27:87:
         b5:37:63:da:a2:9b:2c:ff:06:42:96:fb:fd:6e:bb:03:53:a3:
         d3:b0:ef:b9:ca:8d:bc:77:45:80:05:eb:d8:fa:86:f8:50:54:
         be:b7:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:19 2025 by rpki-client