Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b8d1787-8405-45e7-9949-ef3c3ef4cbaa.roa
File: 1b8d1787-8405-45e7-9949-ef3c3ef4cbaa.roa (raw, json)
Hash identifier: OkD+EPoyzskTWFUtbN8QvkCRs8de5KvlUl/KO/GKzJo=
Subject key identifier: 74:D1:15:2D:04:00:86:E1:E0:0C:15:5F:7A:AA:E0:4C:DB:FD:A7:7A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D29DA8CBC1A550A365A83284F175AB3E5DE60FC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b8d1787-8405-45e7-9949-ef3c3ef4cbaa.roa
Signing time: Sun 10 Dec 2023 00:00:00 +0000
ROA not before: Sun 10 Dec 2023 00:00:00 +0000
ROA not after: Sun 14 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:29:da:8c:bc:1a:55:0a:36:5a:83:28:4f:17:5a:b3:e5:de:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 10 00:00:00 2023 GMT
Not After : Jan 14 23:59:59 2024 GMT
Subject: serialNumber=fc95b9c30661ed1113c97e0f0cf82b43038941a2831a332c272988fb25bc21a4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:fd:0c:45:55:42:cb:08:84:f3:c3:e6:97:
f8:29:7f:8f:d5:46:3f:c6:8e:c2:1e:26:ce:69:fa:
57:5d:03:99:df:9a:d1:e9:00:13:80:26:2b:c0:c9:
36:c1:5c:e7:b9:6c:cd:ca:b0:ca:ba:07:d7:f2:d2:
3e:28:61:d8:48:75:c9:bb:2f:e7:0c:14:01:7d:1c:
74:a6:9a:a4:29:11:e5:16:2b:16:e0:35:24:33:36:
ef:f1:ba:06:e7:a8:2f:c6:44:6e:69:11:26:08:6f:
0d:2d:46:27:11:13:f0:e1:5f:e0:b2:8e:ed:80:b3:
08:7d:49:bf:2f:70:92:a8:a2:8b:b4:64:9e:f3:b0:
a8:8a:d2:c0:7c:a3:19:92:49:17:cf:e3:c8:01:e5:
f1:fe:31:c2:6f:94:a8:12:dc:74:f8:5a:19:5c:3b:
d0:cc:d4:53:cf:3b:88:9e:48:c6:c5:f4:90:3b:dc:
32:6e:ab:a0:19:8b:98:40:15:37:7b:61:47:4a:e7:
ca:31:88:57:91:9a:d0:2d:60:71:ac:73:8e:79:8b:
09:5b:ac:8d:72:b7:b1:9c:3b:35:42:4b:05:8c:0c:
9d:81:5b:3a:c6:61:81:d4:ff:e6:3a:ca:a3:f4:a8:
ac:64:56:66:b9:98:4b:3b:51:6c:75:2c:60:9f:94:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D1:15:2D:04:00:86:E1:E0:0C:15:5F:7A:AA:E0:4C:DB:FD:A7:7A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b8d1787-8405-45e7-9949-ef3c3ef4cbaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:08:a1:33:05:7b:31:18:8e:83:4c:22:24:77:4e:3a:d8:32:
bc:91:7c:a6:6f:f4:db:c2:ab:ba:61:0f:a6:5e:34:0b:73:13:
34:7a:10:ec:e0:8b:c6:a0:d9:83:36:3c:6d:09:43:be:dd:2d:
c6:04:63:97:1f:57:00:ec:9a:ad:d4:17:76:25:50:af:8a:b4:
28:a6:db:ee:5e:89:17:86:d6:63:b7:9a:3a:c2:b6:31:75:53:
1d:f7:cc:aa:fe:e4:20:d2:5e:bd:8d:c5:d9:c2:79:08:c2:2e:
44:8d:ac:a7:eb:05:6d:7f:e4:40:ca:1c:e9:7a:55:47:50:bf:
0c:73:58:13:cf:34:05:35:a5:85:db:b4:b6:40:79:9f:b1:ed:
49:33:37:3e:a4:d0:ae:5b:2d:53:95:97:52:43:fc:e0:d8:95:
a5:50:9b:bd:61:db:3a:47:5a:52:17:cf:eb:fb:7d:33:61:05:
85:62:35:13:ec:8b:94:8f:f3:f3:08:e9:38:ae:92:17:bb:17:
aa:33:1c:91:1f:f3:48:f2:a7:f2:50:6f:a2:16:8e:ee:ec:b3:
13:d5:8c:ed:a8:e1:e7:32:a1:6b:8b:99:05:2a:c9:a1:f3:41:
22:c1:66:fb:f0:07:8a:7c:79:1e:36:51:b8:e0:03:f3:73:11:
c5:6f:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:59 2025 by rpki-client