Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bb68cd3-16f2-4cec-af8e-5760d71f49fd.roa
File: 1bb68cd3-16f2-4cec-af8e-5760d71f49fd.roa (raw, json)
Hash identifier: QpqdqvX/XI7rZsInimM2DZgfBd+0BcAOYY3hSysBTkg=
Subject key identifier: 9C:23:E5:45:91:4E:E7:DF:A6:1E:54:12:D0:9A:21:68:4B:70:E7:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 70C33512E6354E2DA06041399EC72648BF0CEE3C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bb68cd3-16f2-4cec-af8e-5760d71f49fd.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c3:35:12:e6:35:4e:2d:a0:60:41:39:9e:c7:26:48:bf:0c:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=63e40b0dc227f3d51d3930dd272c420d2c44cf50a43f73b7d257e7a856f89064, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:cb:2f:af:88:f9:c8:ae:a0:87:75:23:22:
ca:a1:f1:07:da:cd:8a:31:f9:fd:ad:f8:69:32:4f:
00:2d:26:61:a5:13:ee:dc:3c:5e:6f:55:84:53:f0:
90:7c:9d:36:3a:0f:4b:e8:0f:c0:fc:66:42:1b:d5:
c4:cf:fd:58:8d:40:6a:35:ee:6f:18:6a:4a:35:98:
b9:51:fc:8f:d6:9c:38:34:6e:fc:e8:7c:a3:fd:6a:
80:ca:12:90:65:a5:da:77:4e:ff:32:4f:a3:48:fb:
1f:2c:45:f8:ad:92:bf:e8:41:e2:02:30:9f:d0:67:
e0:3b:57:e6:f5:24:78:dc:05:cc:4c:e7:b0:77:c5:
02:07:57:5c:03:2e:49:39:6f:2e:53:1a:17:97:61:
8a:94:3d:08:83:56:7f:ab:0e:fb:67:4f:ca:ab:a9:
0b:33:6b:db:93:4b:7c:25:b2:fa:91:9c:a2:70:2f:
cc:14:d8:7b:fc:15:92:b4:95:b8:cd:1a:da:a2:c4:
c5:52:e6:92:83:1f:ae:bc:1b:8c:d7:16:39:c2:52:
48:cb:d6:0a:0e:c7:43:27:72:7b:b9:b0:20:91:67:
9b:41:5a:ca:4f:e6:20:79:40:d6:14:a7:13:f4:77:
05:40:4d:e3:67:9e:65:e2:ea:a5:d4:58:32:c9:12:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:E5:45:91:4E:E7:DF:A6:1E:54:12:D0:9A:21:68:4B:70:E7:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1bb68cd3-16f2-4cec-af8e-5760d71f49fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7a:c7:c1:a6:79:fb:dc:43:0c:4d:d3:28:1d:da:58:53:86:
a5:4b:d5:2b:77:6d:d8:57:40:f3:0e:ce:ae:51:8f:78:ec:8c:
17:f7:4c:8b:1b:1a:6b:f9:7a:b6:3a:a6:13:65:ef:8d:be:6d:
1f:2f:95:c4:d8:14:92:26:92:0e:f4:82:72:bb:c8:89:05:91:
26:dd:cf:e8:77:55:ee:f8:f4:2c:53:d4:45:5f:6f:7c:a1:99:
bc:5d:29:ce:b8:3d:88:62:47:a5:bb:8b:82:c4:ec:8d:4b:0c:
91:91:85:1a:d1:ce:1a:a4:d4:61:cb:d1:1b:be:3b:02:c7:91:
60:14:ff:ef:83:65:83:1e:1b:77:69:46:70:07:7c:9c:29:85:
39:48:e2:e9:cf:3a:31:43:84:8e:a4:98:08:37:89:ce:8d:15:
d8:7e:3f:b5:e6:26:7f:44:e0:10:78:7b:c9:da:47:e5:1a:7c:
22:e9:3c:41:73:73:7a:9e:58:fa:43:d0:1c:6f:19:90:8c:87:
73:1a:5c:08:75:ee:87:c1:e1:cd:99:0b:ad:0e:cb:de:2d:82:
c8:ea:4a:8e:37:da:8f:9e:80:82:57:0e:91:76:a4:2b:f0:78:
e9:46:0e:1a:a8:c8:9e:97:4e:5d:8c:77:98:b6:8a:7d:c9:b7:
5e:a1:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:32:06 2025 by rpki-client