Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0253e8fc-d715-4286-be20-4363d8df7233.roa
File: 0253e8fc-d715-4286-be20-4363d8df7233.roa (raw, json)
Hash identifier: 0x+BiR3ag/YLuml2M8/pWm5oSFNkPaUuGMEjXTIOTdg=
Subject key identifier: 9D:24:D3:D6:AB:98:1D:60:42:69:36:02:5C:0B:D1:F0:CC:3A:17:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1671C8C3B7A8827B6F4A64A2BC5B714F4F67D992
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0253e8fc-d715-4286-be20-4363d8df7233.roa
Signing time: Mon 17 Feb 2025 16:58:20 +0000
ROA not before: Mon 17 Feb 2025 16:58:20 +0000
ROA not after: Mon 24 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:71:c8:c3:b7:a8:82:7b:6f:4a:64:a2:bc:5b:71:4f:4f:67:d9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 17 16:58:20 2025 GMT
Not After : Mar 24 23:59:59 2025 GMT
Subject: serialNumber=56ae94e0d2cf828aa7edbf7d73d4bb2db6074a52b8c657331ac2351f4f00f1d0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:52:e6:16:c0:05:f3:71:66:4b:8d:2f:3c:
ea:91:e9:1a:3f:a3:c6:c3:af:03:86:1e:98:d7:b0:
5d:d2:1b:7c:d9:2d:26:57:5e:cf:59:cf:a6:17:79:
e1:55:87:fd:7a:e8:5c:e6:14:1a:0d:c4:97:6a:e5:
cd:04:87:9b:d2:30:ba:f5:e0:17:77:b3:61:dd:fd:
ac:60:21:f5:bb:10:96:a8:61:16:90:2f:3b:04:74:
98:31:cb:b7:c0:70:d4:d8:4c:b3:3d:f5:3b:81:a7:
09:9f:39:fb:e2:48:73:d9:af:ed:60:05:70:a5:e7:
01:0c:8d:cc:ed:3b:6d:5d:0e:c3:50:b7:a0:37:49:
4a:86:d9:a9:fa:99:89:8e:a2:43:53:2a:56:08:d0:
e2:4e:32:6b:98:18:ad:dc:a8:ab:ac:d4:49:3e:d7:
ab:33:40:1d:2c:c1:ea:cc:9f:7d:f2:00:23:92:2e:
fe:bf:2a:fc:95:e8:84:bc:58:84:8f:89:e9:6c:82:
ee:3c:39:dc:ec:9e:26:76:d2:62:55:be:65:a1:da:
88:d0:8b:7f:d3:e1:55:2f:7a:f0:b5:a7:80:04:44:
af:2f:5e:e3:3a:4d:aa:2d:16:8f:b7:4e:f2:d8:a4:
14:9a:07:86:2c:0b:76:97:8e:c4:6a:c8:54:97:5a:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:D3:D6:AB:98:1D:60:42:69:36:02:5C:0B:D1:F0:CC:3A:17:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0253e8fc-d715-4286-be20-4363d8df7233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d8:7d:c5:0b:91:26:34:a2:3e:3c:0f:a4:da:3d:72:b8:a5:
b8:3d:72:81:65:c7:62:55:cd:b4:ca:84:b3:9b:40:10:9e:1a:
07:37:75:a7:74:a4:f1:42:e1:b7:70:6f:02:a8:28:23:41:ff:
7d:27:62:d0:b7:9a:54:6b:79:1d:8e:d3:b2:48:c8:ee:32:cc:
57:40:1c:d2:c3:5d:5f:85:dd:b1:8c:fa:49:06:34:26:41:d8:
4a:5f:ad:5d:88:fe:5c:32:20:ff:18:fc:f5:9e:d3:5a:22:46:
93:02:fc:ee:b3:46:6b:74:20:97:1d:f4:bb:ab:45:a8:e7:e2:
28:c3:3b:91:cc:37:6a:54:f5:eb:c7:bd:83:29:0c:53:db:ca:
7e:a3:1b:09:e3:50:12:43:66:97:3d:6b:f7:6b:64:ca:82:c8:
39:d2:5f:e4:af:30:59:c2:ad:93:87:54:fd:c3:cd:20:a1:c6:
9f:97:73:94:fc:85:dc:13:56:b8:73:dc:5a:46:c1:53:3c:74:
0e:60:4c:1a:21:94:b7:93:10:c9:c7:68:b0:6b:85:75:f9:e0:
25:c3:d9:70:52:fd:e5:79:57:9d:12:3c:d2:56:f2:91:05:f7:
90:74:52:2a:5a:e9:0a:4b:36:ed:b2:3c:68:af:30:78:74:32:
0c:5e:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:30 2025 by rpki-client