Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0562045f-c83e-49ef-8b8a-190061d1ba22.roa
File: 0562045f-c83e-49ef-8b8a-190061d1ba22.roa (raw, json)
Hash identifier: jCBEn2YoOQTbc5CK2fjgb0KZfaKqmJ3YeJcOxBedcGQ=
Subject key identifier: 69:3A:81:0E:31:F8:8A:43:FD:96:B7:FD:26:1D:63:7F:A4:77:34:A0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 783C30D7645296882DB5014AF5F0070D83E2C124
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0562045f-c83e-49ef-8b8a-190061d1ba22.roa
Signing time: Mon 22 Jul 2024 00:00:00 +0000
ROA not before: Mon 22 Jul 2024 00:00:00 +0000
ROA not after: Mon 26 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3c:30:d7:64:52:96:88:2d:b5:01:4a:f5:f0:07:0d:83:e2:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 22 00:00:00 2024 GMT
Not After : Aug 26 23:59:59 2024 GMT
Subject: serialNumber=f2948586310cb48d95dd63f4ea2be9fc6f8b8299a81a6abc4293e2b2158625cf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:1b:b9:e2:87:33:19:0e:f8:0d:08:8c:68:
17:a9:67:b8:a8:16:b1:81:ea:91:8a:cb:f7:fc:11:
43:79:2a:b9:9a:c5:42:0f:89:5b:d0:aa:35:2c:03:
a7:3e:b7:25:14:c6:39:f5:7e:31:76:ac:be:24:e7:
ef:69:e9:db:ea:c2:1e:a6:99:eb:9d:22:2e:8b:e6:
87:40:3b:c9:e9:f1:91:24:e9:8c:34:02:03:51:42:
68:a3:df:8c:47:fb:51:2a:a3:ae:52:b5:b6:dc:49:
04:d9:30:f6:9e:36:88:89:89:31:ee:fa:43:15:09:
59:97:fe:6f:96:69:ba:19:2e:34:71:5a:6c:32:1d:
a5:f7:5f:5a:7e:a2:a7:5c:1d:c8:7a:60:76:85:b7:
bc:62:bb:c1:38:3f:c4:df:ef:69:cb:de:e1:4a:ac:
8e:22:f8:a7:c2:80:74:11:3c:91:34:2a:24:44:9d:
8b:9a:2f:01:a1:06:ae:59:85:b2:56:c5:51:2f:77:
1e:1d:a4:61:f1:3f:18:43:02:25:fa:f2:98:ba:07:
93:bb:61:ea:68:5f:2d:54:de:f8:30:a3:26:f0:68:
85:29:cb:9c:31:7c:9b:5f:76:9d:03:6c:6c:70:e8:
b8:26:96:0a:07:c4:37:f8:ca:59:a9:6b:59:1b:ee:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:81:0E:31:F8:8A:43:FD:96:B7:FD:26:1D:63:7F:A4:77:34:A0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0562045f-c83e-49ef-8b8a-190061d1ba22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
41:17:e7:bb:f5:36:f9:e9:8a:28:62:0d:55:54:73:b5:25:da:
dd:2f:46:b5:20:e0:df:25:69:b6:85:b2:fb:d6:60:83:55:48:
12:34:f7:f2:69:e4:6e:63:c6:77:f8:2c:95:65:02:8a:af:4b:
87:a0:2b:f2:70:57:97:66:81:02:db:5e:25:7a:8f:c0:d5:ea:
05:02:48:f8:a7:b1:0b:55:08:59:09:bd:f5:ab:1d:27:67:16:
3a:1c:9a:c6:6b:c0:19:90:4c:74:59:07:14:41:b9:8c:4f:3a:
93:8c:cd:f9:ae:f9:31:c3:4e:56:00:62:ca:c0:22:27:12:55:
df:ce:d5:ae:1c:67:9b:66:3c:e8:34:cb:01:cf:ff:34:4f:39:
38:83:a1:55:0f:6f:b2:84:96:a3:b0:9d:4b:dd:99:92:21:8c:
3f:cd:cf:77:f2:6b:7a:33:b7:a4:8c:8d:34:27:cc:81:fc:8b:
22:0b:97:ae:7c:e0:c8:da:58:c0:11:dd:8c:74:24:20:9b:e3:
15:a9:5b:c2:0c:bc:fe:78:bc:01:21:f9:a7:6d:1e:9a:76:2e:
63:14:24:22:99:04:9b:24:2b:f1:40:23:4a:66:e8:07:f8:77:
5c:a5:fe:50:a0:64:93:1c:3a:ca:30:5e:0b:8b:a9:0e:f3:94:
85:25:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:52:28 2025 by rpki-client