Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786f0c29-e2df-4478-b9cd-67444b292a06.roa
File: 786f0c29-e2df-4478-b9cd-67444b292a06.roa (raw, json)
Hash identifier: F9yje0sTyTruvlOwqsPReUK9wMlvxzbxZnRjAZPDAnk=
Subject key identifier: 2E:16:11:F1:CC:03:73:EF:4D:14:C0:50:9F:02:95:62:A2:A0:61:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4440A7DB00BB1530ABC2C1D2E506E60A80ABB9C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786f0c29-e2df-4478-b9cd-67444b292a06.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.78.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:40:a7:db:00:bb:15:30:ab:c2:c1:d2:e5:06:e6:0a:80:ab:b9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=22120cd0cb8645dd809b04e5029f76ba501311c5100c41217ab9b53c17df9791, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:51:bb:52:0f:75:53:3b:cb:9f:8b:2b:66:
69:9e:61:13:e0:97:ef:11:af:68:52:36:a0:0c:b9:
f4:f4:21:67:98:4d:f3:1a:d1:07:52:ce:18:6b:47:
34:55:c9:27:b3:a0:8a:cd:f0:ed:24:42:17:69:6b:
26:43:b4:ea:5a:5c:09:22:4b:80:8b:ac:3b:d3:e7:
90:23:b2:0c:14:f0:a3:9b:04:e4:a5:f4:f9:e0:32:
36:a9:68:99:4f:08:f0:f6:40:7a:a0:ed:bd:cb:1c:
94:d9:6f:dd:9d:43:dd:9a:9f:33:97:d2:ad:f7:7e:
5c:17:30:82:23:92:22:fd:fd:f0:49:f8:eb:6b:32:
d8:8d:19:92:0b:e9:5f:19:84:1e:39:bc:7e:3f:d0:
0a:e4:74:4e:1b:d1:ab:cb:9a:d4:0e:a8:86:5d:65:
0c:9f:e9:e8:ce:79:c1:41:3b:c1:f5:62:0b:31:af:
9a:f8:7d:38:d2:af:ac:f7:8e:d1:50:29:f1:b1:b6:
da:fa:8f:11:0e:a3:bd:2e:21:7e:78:ad:d0:cd:48:
0d:1c:cf:c6:21:fb:52:41:55:d4:0c:7b:d2:da:b2:
bd:dc:42:0c:ba:f7:d7:c2:61:86:ef:7b:b0:cb:bc:
2d:ee:71:67:0c:7d:c2:7d:7b:44:50:7a:10:98:d0:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:16:11:F1:CC:03:73:EF:4D:14:C0:50:9F:02:95:62:A2:A0:61:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/786f0c29-e2df-4478-b9cd-67444b292a06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.78.134.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bd:a4:51:7d:b4:5a:11:66:b9:13:6c:67:55:06:c9:6e:b5:
f9:93:11:80:2e:df:84:b0:4d:f7:43:c5:92:69:e1:e4:b1:3f:
50:88:a7:88:f1:b1:30:af:92:2c:e6:2a:16:a3:64:cb:ef:b3:
04:ff:0b:78:79:2c:98:7c:65:26:98:bd:9c:44:6e:d2:33:c2:
b5:f9:6f:d9:a3:b1:3a:fb:3f:ac:a6:86:65:e2:bb:1d:be:43:
c5:05:b9:43:cd:da:2e:91:85:48:b7:91:8f:fc:42:e6:09:11:
93:98:b5:37:a6:81:d8:3f:0a:06:4c:4f:b5:8d:f2:04:15:86:
2c:82:af:6c:0b:27:d6:c5:8f:f6:57:45:fd:b4:71:04:2a:c2:
a0:4b:44:60:16:4e:8f:19:88:6a:96:6a:c1:02:4f:fe:5f:f3:
c4:c3:70:2e:7b:38:c2:2f:ee:85:7b:0e:06:91:ed:96:96:d1:
e1:67:93:82:84:8d:5f:f9:b9:cf:8d:4d:83:6d:80:94:af:f4:
09:7d:90:b4:ae:a4:e8:af:29:af:bb:6a:60:3d:c6:ec:91:f1:
a5:11:d9:22:02:35:9c:52:8f:a0:4c:37:49:2d:f7:d6:99:f6:
14:23:be:66:d3:9a:a7:69:b8:96:44:65:f0:bc:b5:67:65:a1:
d9:77:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:43 2025 by rpki-client