Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c6f1aa1-a8d6-4ebf-93a1-bd9e0e94982e.roa
File: 1c6f1aa1-a8d6-4ebf-93a1-bd9e0e94982e.roa (raw, json)
Hash identifier: xhxlbczk6Gq994EbPL1oI1qT/Xz4NBDwoVRoLzh7SGM=
Subject key identifier: A7:0C:39:9D:CA:C6:8B:70:62:C4:97:B4:4F:81:23:9F:00:5C:70:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A13BE04710FE5253C949FA0F992755135DD628D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c6f1aa1-a8d6-4ebf-93a1-bd9e0e94982e.roa
Signing time: Sun 27 Oct 2024 00:00:00 +0000
ROA not before: Sun 27 Oct 2024 00:00:00 +0000
ROA not after: Sun 01 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:13:be:04:71:0f:e5:25:3c:94:9f:a0:f9:92:75:51:35:dd:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 27 00:00:00 2024 GMT
Not After : Dec 1 23:59:59 2024 GMT
Subject: serialNumber=e4ce62aba64dd2e50e199a6d4b3383c56998e2eb5fe7aab1295bbf82b61130a3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:87:08:5d:d9:92:26:ee:8b:97:2d:8b:33:
73:c0:2b:43:06:12:44:74:25:7b:8b:4d:8b:66:86:
4f:c7:8f:4c:c6:26:a5:04:bb:a6:52:e6:ba:be:fb:
ad:e4:02:89:f4:6c:1b:cf:67:16:d1:b7:96:a8:6c:
63:0a:e2:e4:9f:d7:b1:fe:13:0b:82:2b:20:e3:94:
30:a9:59:69:af:a8:03:6d:f4:92:da:f1:a8:ce:c9:
37:0b:7b:02:d0:fe:d5:f9:ad:39:df:a0:a9:05:d0:
4f:08:e5:c6:53:ec:a3:0e:ff:83:f4:cc:88:a3:57:
d6:34:a1:72:47:b7:ee:dc:20:fb:1e:7f:e7:13:78:
b2:33:d6:45:04:ea:50:73:ce:38:29:63:1e:db:9c:
0b:8e:58:42:4a:ec:b0:f4:c2:d6:12:de:3d:6e:67:
f6:f2:c7:b0:57:15:d0:6b:bd:76:43:d9:1b:cd:b5:
db:8b:da:dd:70:c6:38:88:4b:1e:11:a0:db:7e:c7:
26:25:6c:19:e0:76:2d:c5:33:3b:85:61:7c:b2:cb:
80:7a:b0:4c:3d:6a:10:85:ce:ce:4f:31:8b:74:5f:
02:85:33:bc:cb:28:11:eb:1d:de:42:2c:0f:54:39:
6e:06:4b:1a:96:21:97:d5:4d:e0:06:f6:68:89:04:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0C:39:9D:CA:C6:8B:70:62:C4:97:B4:4F:81:23:9F:00:5C:70:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c6f1aa1-a8d6-4ebf-93a1-bd9e0e94982e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5f:12:78:90:fa:ca:b2:50:f4:11:bd:87:00:73:e2:38:2d:
f9:37:87:a3:15:90:33:f2:6d:63:0e:1f:1c:df:c8:5e:19:7f:
5f:fb:f8:e2:9b:88:8c:1f:5f:4a:06:f9:12:b5:aa:19:c1:a9:
94:c5:2f:0a:c2:58:82:67:7b:20:4c:3d:61:db:60:47:5c:96:
00:8a:e6:00:fe:07:87:21:3f:dc:51:6a:59:fd:05:41:7e:08:
29:21:8c:59:46:31:ad:e0:30:89:3c:5d:99:53:34:d6:a9:2a:
9f:c8:6a:09:22:ba:9a:33:1d:c2:06:f3:f1:0d:6b:05:6b:f4:
89:0e:a3:7f:e2:0c:41:18:0f:32:4f:89:9f:29:7d:91:ac:3b:
9a:cf:1f:5f:a4:66:e7:c0:72:a5:8d:4f:7c:be:0b:b2:48:91:
6a:58:b8:c0:18:70:d1:f1:a2:85:99:ed:1e:cd:30:b5:4b:67:
79:cc:5d:9a:12:95:ca:be:b4:d7:6d:7c:da:78:cd:30:42:7f:
4d:6a:de:55:0d:72:24:3f:9c:30:b9:85:59:93:d2:cf:37:9e:
03:67:c8:1b:cf:57:4f:32:dd:2b:b2:9a:fe:6f:f5:37:bc:43:
f2:1c:d4:a1:f7:b2:df:88:a2:85:43:6e:9e:25:f7:8a:8a:b3:
46:0c:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:06 2025 by rpki-client