Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f76b96-5919-4b9e-9efe-6f535fe7fb42.roa
File: 76f76b96-5919-4b9e-9efe-6f535fe7fb42.roa (raw, json)
Hash identifier: T3pkFYB1TxgLfck5kowUmU9pDTBltBPV06ZYvY6qArI=
Subject key identifier: 57:F8:4B:9F:40:4B:BE:3C:23:36:2A:B7:4B:B8:26:4D:E2:7D:93:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6192EF6548762888140E678DA104DA9FC5A6A788
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f76b96-5919-4b9e-9efe-6f535fe7fb42.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:92:ef:65:48:76:28:88:14:0e:67:8d:a1:04:da:9f:c5:a6:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: serialNumber=95d31ee0f66b283d5aad0e6a918af12163f5cb347f88f7230dea77abbc31c641, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:56:98:33:78:58:0e:08:26:1f:cf:d6:79:
cf:a8:ef:02:0a:1b:b7:63:0c:5b:b0:8a:d0:80:4f:
ae:95:fb:a8:04:cc:f6:ec:94:d2:cf:41:79:0f:c1:
aa:57:35:64:7c:d6:8a:4d:57:80:fe:71:bd:8a:68:
88:73:b8:b9:e6:19:52:57:ca:9f:9c:4d:16:e4:78:
75:44:8e:02:9b:95:a8:be:e6:93:ff:8f:ef:92:c0:
31:7d:fd:4f:d1:b9:6d:f7:14:1d:70:b7:62:16:9b:
84:df:e9:62:00:b9:75:6f:59:c9:d0:d7:35:92:76:
b9:33:64:96:ea:78:67:5f:75:f7:f3:ec:05:ef:1b:
59:ea:38:25:95:59:eb:06:89:04:c6:61:1b:54:d0:
d1:5c:42:ed:e4:51:81:50:8e:93:8b:b8:78:ff:22:
e0:c0:6f:36:5f:03:7d:e8:f4:f9:71:57:3d:50:3e:
8f:7a:04:52:51:d2:ab:9d:50:66:84:2c:14:39:90:
0f:87:08:47:96:b0:dc:85:26:fc:8a:99:69:42:b9:
b6:19:3b:64:7b:b2:82:69:ee:03:94:cc:bc:dc:9b:
8f:77:01:43:bc:02:a9:67:83:81:c3:75:d2:cb:2c:
98:8c:a2:b4:a8:da:a9:24:23:8d:ce:37:03:92:04:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:4B:9F:40:4B:BE:3C:23:36:2A:B7:4B:B8:26:4D:E2:7D:93:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76f76b96-5919-4b9e-9efe-6f535fe7fb42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.154.0/24
Signature Algorithm: sha256WithRSAEncryption
15:93:e5:cf:eb:66:17:ce:fb:6c:4a:52:d8:1d:81:b8:8d:5c:
3b:72:54:90:7a:0f:a5:99:eb:2e:78:51:16:a3:d8:bd:0f:27:
fe:9c:eb:14:d9:d4:05:5e:f9:28:e9:f2:80:a5:41:6d:21:ce:
6a:b5:d6:10:b8:93:1c:a4:b4:31:21:61:47:97:8f:0e:52:e4:
60:a2:cc:8d:36:45:b0:ec:44:b3:c3:72:68:46:04:e8:b9:24:
1b:93:ef:8e:98:dd:4b:91:93:a6:f5:5f:fc:28:20:5a:02:3e:
aa:c7:69:fb:11:7e:f7:b2:5e:f3:22:ab:a4:f9:55:99:97:4b:
91:b2:8d:a4:9f:d6:74:eb:c8:96:83:03:bd:f9:d2:96:d0:26:
87:94:6c:e4:71:cb:71:07:b8:94:46:73:3e:c3:15:e7:8e:83:
4b:0f:fa:66:da:24:b5:52:72:8e:ae:32:eb:24:4f:a5:39:8d:
29:3f:32:7e:ac:ab:7c:88:64:56:51:6e:80:b0:c8:ea:c4:fb:
ec:d9:c2:a6:47:f5:dc:30:46:35:9a:17:5b:c3:20:b7:a1:29:
e3:2b:91:c5:17:07:14:02:75:54:3c:dd:aa:6b:b0:a1:52:01:
f9:71:b8:f3:d2:5a:27:ea:e7:07:17:92:e1:46:e5:61:98:08:
dd:7e:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:33 2025 by rpki-client