Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dd80447-d6b7-48dc-b480-7d1119cc59a9.roa
File: 1dd80447-d6b7-48dc-b480-7d1119cc59a9.roa (raw, json)
Hash identifier: vYLB1dD5sMH5Ox3dtzUoJHx+MfxsTeshevkYOvpJZIE=
Subject key identifier: DB:D7:93:D9:DA:C2:3B:0A:74:FB:6F:3F:4A:5F:3A:63:EA:0C:59:E9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 643E8BEE71CD928705C94796D0AF9ED362025795
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dd80447-d6b7-48dc-b480-7d1119cc59a9.roa
Signing time: Fri 23 Feb 2024 00:00:00 +0000
ROA not before: Fri 23 Feb 2024 00:00:00 +0000
ROA not after: Fri 29 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3e:8b:ee:71:cd:92:87:05:c9:47:96:d0:af:9e:d3:62:02:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 23 00:00:00 2024 GMT
Not After : Mar 29 23:59:59 2024 GMT
Subject: serialNumber=d5a8f76df27492ac51ba72409a3852374576618c44a21234168015f9f0bc8eed, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:b3:1a:d5:b9:3f:73:dc:f5:9d:99:b2:bd:
47:4e:3b:c2:75:6a:64:7a:bf:a4:43:1b:ca:ce:5e:
ac:6e:41:da:80:82:a2:d5:92:b3:8a:ab:72:b4:e7:
f8:b8:d5:33:97:d3:af:ff:ab:b7:1c:9a:61:32:52:
71:33:d5:3a:e8:ea:0f:3f:9f:7c:26:47:1b:34:ec:
43:d1:94:58:3b:5c:97:64:d6:1c:42:4c:71:c2:b7:
69:c6:ab:b4:48:17:b5:ec:9a:e3:fe:20:ae:4b:b5:
44:f5:9f:c9:17:e3:b1:3c:47:1b:fa:8c:a7:e9:11:
ea:7a:16:20:c9:31:fe:08:8c:e8:a2:00:e4:96:f8:
35:9e:6f:71:89:06:32:5b:92:69:ad:e9:fd:d2:e5:
3f:9a:c5:e1:6a:8c:92:00:21:09:63:29:7e:a9:92:
9b:ef:9c:95:3b:df:ae:88:d0:55:2f:fa:fb:84:c0:
06:d1:b6:0d:ee:60:a7:30:d5:46:6d:97:52:7e:ca:
0c:66:2f:8b:7f:44:b8:fb:fa:9c:18:8d:6e:27:e4:
19:40:38:2a:66:45:17:c3:81:a6:73:ae:2a:2f:7e:
ad:7f:f0:1a:97:2e:b0:f0:1c:17:c5:f9:6c:93:32:
16:f9:77:8c:d2:10:7c:76:e7:52:af:0c:a0:ba:d6:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:93:D9:DA:C2:3B:0A:74:FB:6F:3F:4A:5F:3A:63:EA:0C:59:E9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1dd80447-d6b7-48dc-b480-7d1119cc59a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e6:7f:16:cb:2f:50:e5:cc:1f:29:af:d2:93:69:1c:64:34:
d0:5e:5c:6e:5e:4a:86:be:8b:cb:b0:1f:81:56:99:e1:e2:81:
21:58:1e:4b:44:b2:80:61:84:b4:00:08:e9:70:57:96:c0:bc:
2d:94:2e:91:ce:df:78:10:04:8c:fa:e5:eb:fb:ca:4e:25:5e:
40:d9:22:99:b8:2b:4b:d6:4d:63:9a:be:6b:d1:88:35:bd:ce:
ae:61:fa:02:72:0f:dd:d7:39:93:65:50:bb:65:14:55:43:ad:
96:f7:05:ba:66:24:bb:aa:bb:2c:1d:99:a4:0f:18:fd:ae:c1:
d0:b1:43:82:2b:3d:d3:4f:df:45:c2:91:6d:10:43:99:d9:e3:
6e:4b:cb:a0:b2:f6:c8:61:e8:28:0f:45:c8:13:6b:c7:5f:8c:
51:d0:af:62:e4:6b:4d:00:6c:83:ac:71:a1:82:28:71:a0:6e:
2f:ac:58:e6:8f:02:f9:a5:ba:1f:62:4b:42:03:cf:51:65:3a:
34:3b:d9:e8:c1:1f:0f:55:6d:5d:0d:14:5d:78:e6:16:c5:b9:
00:97:10:79:ab:c7:24:90:e1:dd:12:4b:e7:ff:2f:a5:8d:34:
99:5b:49:5e:69:b8:a1:26:5e:01:90:a2:d1:98:b4:c3:2b:8e:
71:03:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:40 2025 by rpki-client