Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/172204aa-2661-4169-ab73-9a73de52258c.roa
File: 172204aa-2661-4169-ab73-9a73de52258c.roa (raw, json)
Hash identifier: DoYSGfwfTHu/Zz7PngBK7JtG7CR3aTYfBD66yO82ROg=
Subject key identifier: AA:0A:11:90:B6:51:1E:80:2A:69:7E:40:4A:62:B8:E4:CE:83:EB:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48AB501BD7F72F3B5BFEF86AF47D0FAB14797136
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/172204aa-2661-4169-ab73-9a73de52258c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ab:50:1b:d7:f7:2f:3b:5b:fe:f8:6a:f4:7d:0f:ab:14:79:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:63:43:71:23:06:78:41:13:ef:88:f1:f3:
d8:8e:78:23:8b:57:31:9e:bd:ae:d5:f5:4f:ea:34:
b9:26:d3:86:8c:52:f3:08:a0:36:c0:3b:5a:a0:78:
8e:97:41:ab:f6:24:a3:a7:48:5d:11:90:a7:ba:3c:
66:e0:51:22:a7:cd:91:60:32:2f:9b:df:f1:72:05:
bb:fd:50:e4:3d:79:40:b0:99:68:7e:38:29:de:67:
65:65:d6:92:99:3f:0b:79:7a:2c:03:7a:ce:4a:67:
29:af:cf:c2:3a:93:e8:3e:83:06:61:b8:3e:d5:1f:
5a:37:e3:29:af:6d:c6:d8:5d:3b:77:57:b4:73:a7:
0e:e7:04:c5:b7:67:c3:45:f4:48:3a:da:b4:be:87:
82:cf:c9:c3:8d:61:cd:b7:4e:5b:fe:a4:92:4f:de:
f3:4c:87:11:5b:68:94:56:85:44:cf:5a:b7:a4:5c:
75:42:cb:72:85:3b:d6:10:d6:c3:57:03:4d:5c:34:
6c:41:28:48:d2:35:fd:5f:62:22:27:65:27:b3:69:
40:1b:e6:69:c2:14:09:0c:ca:1d:fe:a7:9f:b1:86:
9d:19:83:26:cb:2f:76:83:b6:60:8f:ad:e1:19:21:
db:08:52:78:21:d3:66:e0:f2:6e:0c:15:bf:d5:b8:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:11:90:B6:51:1E:80:2A:69:7E:40:4A:62:B8:E4:CE:83:EB:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/172204aa-2661-4169-ab73-9a73de52258c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
Signature Algorithm: sha256WithRSAEncryption
47:ab:02:b5:fa:9f:70:da:23:07:6b:51:9c:19:61:9a:b9:cf:
1a:fc:9a:9b:47:7f:53:02:0f:37:24:36:23:3a:5c:50:c3:cc:
e0:9b:5a:56:4b:ae:f8:76:07:55:61:5c:44:20:c1:54:77:11:
b2:45:af:4c:6d:ed:21:89:f0:6f:d8:81:80:01:c3:04:47:2a:
2e:b9:9e:fe:bb:68:fe:da:85:c7:27:81:32:13:0c:34:02:6f:
58:1b:50:23:8e:50:fe:50:c3:a7:84:f9:61:d1:82:b9:75:1a:
24:c7:69:dd:81:f2:7f:ac:58:a2:d1:f9:a9:07:87:e6:d7:7d:
b0:64:86:d8:05:2d:88:4d:7b:a2:98:a0:d5:60:33:55:be:66:
06:5a:5e:de:9b:ba:95:f7:da:93:38:81:99:e6:52:ec:ee:97:
54:c8:3f:3c:68:bb:fa:45:c7:db:12:04:7e:27:ec:69:8b:fd:
b7:ba:d1:6a:d2:dc:da:62:46:3a:d5:29:10:0e:88:d0:ae:33:
3f:8c:d7:3c:1c:08:0f:d5:1e:b9:c7:51:d1:a5:bd:50:2a:bd:
d7:61:f7:52:3f:36:34:21:a1:42:99:5a:ad:f5:d2:cf:2f:18:
ca:74:cb:8d:7b:56:a5:9f:ba:a4:dd:5e:ef:99:13:cf:ab:41:
bb:a0:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:54 2025 by rpki-client