Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02a6028c-ab8e-4528-9f54-ed01f9d3dd33.roa
File: 02a6028c-ab8e-4528-9f54-ed01f9d3dd33.roa (raw, json)
Hash identifier: 3wVaDWIT10G3Z5jVPQPEmT/abPWkgXNfLuq+MdtMtbg=
Subject key identifier: E0:C8:BB:43:77:D0:D7:F2:E7:1C:24:C5:A9:80:FD:E3:6C:C7:2E:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 011734C6CF57A78A34F1C51408E555A2954673E7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02a6028c-ab8e-4528-9f54-ed01f9d3dd33.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:17:34:c6:cf:57:a7:8a:34:f1:c5:14:08:e5:55:a2:95:46:73:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=6b678a51dc5ee3b371bfdc9a2628775c5334e44835f5c55796d9639a22de52d4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:02:5d:1d:65:29:27:63:5a:3f:cd:1a:0c:
80:aa:30:2d:02:86:d5:8d:29:b0:81:2b:7d:c3:1b:
cf:56:ca:56:b4:e8:40:97:6a:af:a6:46:86:4e:88:
3c:a8:45:67:15:fd:62:e5:dc:54:87:26:d1:e8:b9:
6a:95:2b:fc:3e:b7:60:8b:21:4e:e8:6a:56:79:81:
51:fa:9d:62:ce:64:38:eb:90:03:6c:59:b1:86:c8:
2d:0c:af:cc:99:0e:59:cc:08:e5:5c:c5:c8:7d:26:
f7:b9:98:19:2a:03:f2:cb:cb:46:ca:87:85:46:0a:
74:ea:bc:9a:2f:4c:a1:53:50:60:51:0c:88:c4:51:
b6:f8:2b:ee:ac:19:bb:0f:63:45:3d:c5:77:2f:ef:
0f:95:f2:3f:9f:a0:ae:96:06:bd:32:b6:75:19:65:
6f:e3:c6:8e:cb:86:85:78:5a:77:38:39:d7:cf:2e:
88:ec:e6:df:dd:7d:d6:ca:2c:d9:01:d7:46:fa:38:
85:7d:a7:d1:e5:9e:37:86:e0:ea:b8:cb:02:be:56:
30:85:41:fe:ec:cf:c0:2b:1d:c0:0d:43:75:61:c6:
29:70:87:e9:00:93:af:1e:e2:e3:3e:26:83:f0:c8:
c3:2b:9d:76:16:74:51:ce:a5:83:47:a3:f8:25:29:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:BB:43:77:D0:D7:F2:E7:1C:24:C5:A9:80:FD:E3:6C:C7:2E:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02a6028c-ab8e-4528-9f54-ed01f9d3dd33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9c:64:85:dc:e2:6e:ea:5e:68:fa:53:a0:02:c0:b3:2c:fc:
58:20:c2:f9:8c:80:a2:e8:df:f2:58:e3:07:35:00:7e:d8:6e:
9a:0a:92:bf:43:a2:63:23:6b:75:d6:2e:e4:d1:82:9b:b1:b3:
1d:ad:e2:70:d9:27:cc:f7:f1:ee:cf:d7:aa:c3:63:c4:58:47:
66:0b:31:8e:44:d2:c3:1e:36:1b:66:57:c5:f6:5b:87:c5:45:
62:5a:fa:a0:ba:d3:87:08:98:5f:9b:e2:a0:69:55:20:b2:e7:
8c:06:5b:4b:50:ed:0a:82:ee:46:10:18:f5:05:11:f1:88:c2:
7d:ac:ca:48:41:aa:8b:05:9c:d8:ee:f9:5f:db:84:4c:c0:dd:
52:1a:8a:1a:d5:3e:bf:fe:83:d8:8c:26:16:0e:ec:8d:6b:37:
80:a3:e0:cc:e1:05:82:35:cd:77:9c:7f:7c:a4:44:a9:f1:df:
52:3a:36:58:39:26:6d:0e:96:ea:de:eb:a0:8c:7d:2c:19:41:
8f:e8:d9:fb:cd:fb:87:70:4a:24:ec:52:b3:90:89:e4:04:71:
57:77:4f:57:5a:34:dc:0f:43:0a:6a:9f:95:10:05:14:8d:33:
2a:fd:1c:95:18:1e:b6:c9:07:35:0d:a6:a4:11:83:d0:85:fb:
b1:38:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:35 2025 by rpki-client