Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cb54279-c8f8-4ce2-ae01-6bcb78ba2c26.roa
File: 4cb54279-c8f8-4ce2-ae01-6bcb78ba2c26.roa (raw, json)
Hash identifier: hl0AsoGCwvIj+ZlRJptoyupVHPPZ071P2ApOaGq6BxQ=
Subject key identifier: 80:5C:27:03:6E:FB:34:64:B8:31:6B:46:62:3A:69:B1:FB:8D:32:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40A7B8FB167169058F61544DB4581014800005B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cb54279-c8f8-4ce2-ae01-6bcb78ba2c26.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a7:b8:fb:16:71:69:05:8f:61:54:4d:b4:58:10:14:80:00:05:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=1b2f7f1e7a3c26d4be2e08d730677bf71c0228e00d90d58a5219e26bc391220b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ca:38:50:1f:ac:81:ae:8b:c0:83:76:67:03:
46:83:18:2e:a3:c1:eb:3d:d7:ae:5e:76:02:4e:de:
bf:5e:c5:fb:b4:9f:e8:ad:ee:10:e4:2b:6d:6e:9b:
7b:5d:eb:a5:bf:44:c2:b5:68:61:f5:24:57:16:ca:
55:76:1d:2b:f5:a1:67:52:4c:fe:f8:35:90:76:70:
33:91:5b:54:f9:00:2d:9f:86:bd:9b:47:97:4c:f0:
44:4f:56:5d:bb:26:8c:63:1d:9f:a3:ce:a5:e8:ed:
f8:02:ee:7a:bc:ae:47:fd:01:d0:0d:d8:b5:b0:87:
ba:e4:97:7e:12:9f:d8:19:66:95:1e:e3:b5:5d:22:
85:fc:1f:81:4d:aa:2b:a0:82:6a:84:c3:63:81:58:
e4:4c:0d:d9:fe:20:e9:57:f7:a2:f8:cc:c4:78:f9:
4e:f3:23:9d:8f:bc:32:62:88:72:53:7e:33:46:2a:
e1:61:4a:95:23:1a:cb:d7:5e:8f:a3:94:4f:54:08:
3e:bf:6e:f9:fb:8e:27:26:26:2e:3a:f3:e1:43:4b:
f6:4c:db:6a:4d:0a:62:80:18:cd:5e:b2:b3:48:f6:
63:e3:57:9a:be:04:b7:94:bc:c8:8b:35:88:9d:a8:
3e:cf:df:42:8f:32:a2:d9:b0:b5:1f:af:c9:76:3a:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:27:03:6E:FB:34:64:B8:31:6B:46:62:3A:69:B1:FB:8D:32:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cb54279-c8f8-4ce2-ae01-6bcb78ba2c26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.148.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:c4:d0:67:ef:01:ff:0c:d4:83:3c:e6:b7:4f:a3:02:36:6b:
68:39:f5:62:05:37:b7:3d:2b:c5:ba:7d:4d:85:56:19:54:1b:
24:9a:f3:b3:35:4d:13:d2:93:3b:38:50:fa:0c:15:8a:62:c0:
3c:90:f1:76:e8:82:8c:37:bd:86:36:18:4b:0c:dd:8f:e4:c1:
05:c3:20:b8:3b:99:08:f0:cd:77:f1:45:f2:bc:db:5d:42:73:
be:90:74:13:a3:42:2b:83:06:64:88:95:1a:1c:90:fd:2f:99:
10:46:65:54:81:30:6b:0f:5f:9a:f4:a7:81:84:db:a3:86:98:
3a:ba:4d:87:77:b6:25:80:70:85:f8:2a:31:6d:0c:4d:32:fc:
c4:4e:88:5f:72:45:37:94:61:9d:d7:2f:a4:29:1b:a8:7d:b6:
67:cd:f6:c1:04:e5:22:3c:dc:6b:dc:ac:93:1e:77:e3:a6:16:
04:16:2e:5a:db:6f:5d:06:55:1e:5a:f1:66:d9:ff:3c:c3:e5:
c1:07:3a:2a:02:4e:c5:f6:81:7e:d4:da:2d:b1:6d:92:04:56:
64:99:af:30:87:61:16:85:14:7f:73:37:c6:41:4f:a7:09:6f:
fc:89:97:9f:2b:5b:fb:de:02:71:8f:51:0e:e9:eb:07:c9:86:
10:a1:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:57:18 2025 by rpki-client