Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1d00eff7-4072-47e7-b175-070ea37773fa.roa
File: 1d00eff7-4072-47e7-b175-070ea37773fa.roa (raw, json)
Hash identifier: wIuTdrjs9suLy1Lgsd2JEfuoJOw/yEAPtaJuIHRo+P8=
Subject key identifier: 57:80:7A:07:AD:71:A0:D8:AE:64:72:E9:37:FA:29:53:C8:1A:79:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 57F2B6D588BA697D33C9FA18A6089E05FB090396
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1d00eff7-4072-47e7-b175-070ea37773fa.roa
Signing time: Sat 30 Nov 2024 00:00:00 +0000
ROA not before: Sat 30 Nov 2024 00:00:00 +0000
ROA not after: Sat 04 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f2:b6:d5:88:ba:69:7d:33:c9:fa:18:a6:08:9e:05:fb:09:03:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2024 GMT
Not After : Jan 4 23:59:59 2025 GMT
Subject: serialNumber=4acc8d3a01f1295f68c2692e774c4722712c03efd10ddd925d8de9a648f98b4a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:61:96:ea:53:f4:0f:fb:39:1b:64:0c:3a:
ec:98:ea:01:37:42:f0:b9:6a:a9:66:b0:39:f0:08:
dc:e2:1f:25:8b:ca:7a:18:d0:e0:06:af:d4:c8:3b:
ae:f4:cf:31:2e:e9:c6:4e:36:79:3a:aa:79:ee:46:
05:f5:e4:e0:c2:a8:a5:15:48:4d:60:1a:11:e3:9b:
9c:b2:ae:db:f1:6f:3c:7a:4e:ea:30:8d:b5:5d:19:
ad:78:9c:de:8d:f0:52:c1:23:64:6e:a0:ac:23:18:
11:de:01:70:de:10:2c:08:5a:c3:0e:f5:16:fe:98:
a0:31:6e:8f:38:f8:52:95:82:df:d6:f7:c1:d2:8f:
c1:b5:99:66:8e:22:22:fe:0b:db:f0:82:9d:4a:cc:
8f:03:7f:cd:ca:03:54:08:86:78:79:3a:b8:f2:84:
2f:74:60:c0:9e:45:a6:ae:41:01:08:f7:ba:55:bc:
39:71:12:9a:cd:37:0c:f1:9c:9c:8e:2d:f2:99:95:
a5:69:b4:96:0c:b4:63:17:eb:a6:c2:06:f1:75:6d:
04:35:2a:85:6a:3c:53:2d:f8:bd:24:0b:87:52:4f:
d6:12:c4:62:14:c9:0e:82:9c:a3:58:fb:10:f7:35:
98:df:88:af:0e:1e:50:48:1f:79:d0:46:7d:b4:53:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:7A:07:AD:71:A0:D8:AE:64:72:E9:37:FA:29:53:C8:1A:79:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1d00eff7-4072-47e7-b175-070ea37773fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:80:0b:bc:93:2d:6e:7e:63:a7:f2:44:b3:ca:45:60:27:f1:
59:1d:11:d4:9d:4a:a5:3e:7d:b3:b4:c3:0f:1e:d3:22:18:ae:
f8:7a:c4:11:0a:49:40:0c:be:90:b7:d0:27:ee:b8:6b:2f:66:
21:e7:fc:3c:a8:0d:41:ea:5c:b6:c6:dd:ea:50:59:d7:6e:21:
5b:97:08:ee:7f:03:c9:1a:1d:84:e1:3c:96:86:a0:99:c8:95:
60:c0:aa:f0:43:0c:b8:3d:34:a9:01:5b:22:c4:4a:ec:b6:14:
d1:a0:83:a4:87:6d:00:a2:65:f2:2f:34:1e:78:27:43:ef:70:
3c:59:0a:87:37:4c:df:2d:50:79:58:7e:fc:bc:7b:74:3e:fb:
9c:c4:1c:6a:79:d2:5a:5f:06:71:26:1b:ba:1e:22:08:8d:95:
68:a1:51:c9:0f:c9:0f:61:7b:65:52:3d:e8:4d:18:3e:7c:86:
5d:e7:b4:e9:76:88:15:c5:27:7a:aa:6f:55:d1:1b:29:0a:9a:
67:f1:a3:5d:3c:59:0e:6c:18:25:c8:04:4c:ed:44:5b:c0:2a:
91:ed:88:fb:c1:94:31:b2:ee:9f:45:80:59:69:b7:8f:02:9a:
ec:95:67:57:50:41:fb:47:7e:fd:d7:38:d8:1f:65:53:7c:e9:
5d:e8:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:39 2025 by rpki-client