Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20a83a29-2ef1-4089-8cb0-fa00ad46b4cc.roa
File: 20a83a29-2ef1-4089-8cb0-fa00ad46b4cc.roa (raw, json)
Hash identifier: XiSGjJ0lpxr9VyS+M73FqC9HiEGcWPZa8b8btv/oNeU=
Subject key identifier: 18:40:CB:9B:57:C7:5C:49:C5:E5:DD:D6:2C:4B:C0:37:C5:EF:49:5F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1794AA83BC45C63FF1D083DF7A3CBF1E71901A3E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20a83a29-2ef1-4089-8cb0-fa00ad46b4cc.roa
Signing time: Thu 24 Oct 2024 00:00:00 +0000
ROA not before: Thu 24 Oct 2024 00:00:00 +0000
ROA not after: Thu 28 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:94:aa:83:bc:45:c6:3f:f1:d0:83:df:7a:3c:bf:1e:71:90:1a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 24 00:00:00 2024 GMT
Not After : Nov 28 23:59:59 2024 GMT
Subject: serialNumber=bfb5b5eda0e306280d52e1a8121ee55c32a95825a25e6ddd2f6c1a05a26806d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:10:30:f3:58:80:1c:8a:7f:88:38:2f:6c:
b3:c1:a5:04:d1:5f:9a:f8:60:d9:9d:3f:2e:b6:2f:
32:55:ab:9a:4e:89:e4:a4:bd:f6:15:c7:61:57:da:
1b:b0:10:57:7e:58:5e:31:58:81:2c:8e:58:1b:6f:
fd:0e:76:2f:fd:c6:78:6c:8f:0a:3d:d7:96:b6:54:
8f:cc:a5:d4:62:4d:bd:48:db:e2:b9:b6:85:d8:d0:
5f:2f:54:cf:d6:11:44:e8:07:0d:d4:35:8a:49:ca:
85:9e:f7:64:c3:4c:84:00:78:d5:5e:42:d0:71:a6:
98:c2:e7:eb:b8:52:9f:3a:b5:e0:51:69:fc:ba:39:
2b:f2:fa:26:71:e1:30:72:95:a9:18:c5:0d:e2:56:
fe:74:84:98:4a:61:cb:8c:29:09:fa:5a:00:75:b3:
4b:ac:fb:94:b2:34:b9:5d:49:a7:27:48:a1:65:48:
4f:e5:c9:d7:9a:18:04:c1:9e:ed:c6:cd:17:74:f1:
d5:eb:45:4f:58:1f:15:42:8a:a8:90:f6:28:a5:68:
60:7e:cc:dc:a0:68:c0:b1:86:57:03:4e:6d:69:6c:
01:27:55:c3:9c:75:1f:25:93:01:0c:1c:a0:7c:a7:
70:6c:17:26:a2:be:85:57:7e:47:8a:de:21:1f:af:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:CB:9B:57:C7:5C:49:C5:E5:DD:D6:2C:4B:C0:37:C5:EF:49:5F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20a83a29-2ef1-4089-8cb0-fa00ad46b4cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4e:6a:74:12:81:f0:f6:ab:af:8c:65:23:89:96:e6:fd:43:
a3:28:21:fe:c1:9f:0d:db:8b:0c:7d:f9:06:eb:80:23:6f:0e:
00:4c:c4:75:bb:c1:7c:0c:e9:89:d4:fd:88:b1:a4:c3:e4:6e:
f4:fb:29:eb:7d:f1:ee:f8:ae:37:35:28:85:1f:2d:20:c7:6f:
a1:21:be:45:15:6c:c3:b3:b6:ed:c7:fa:d8:5c:14:8f:24:28:
1c:c2:32:b6:d8:33:22:66:6f:04:04:34:ae:05:fa:b0:41:8d:
21:b9:bc:03:44:67:f9:42:76:b9:e8:66:76:4f:eb:aa:ab:b8:
7a:1d:9a:68:25:d7:1d:9e:8e:a3:78:54:5b:8b:19:19:ea:0d:
83:f4:06:4a:a8:c9:a8:b5:ef:37:58:dd:d7:54:4a:cc:b1:7c:
a5:70:d3:e2:38:dd:7e:4e:04:59:e2:82:4f:12:c2:37:57:0d:
82:38:10:9f:34:4c:7b:d4:a6:98:71:95:8b:56:66:05:d5:3e:
bc:c5:98:a8:d3:94:95:c7:d0:98:2b:c7:59:5f:a3:ce:22:23:
08:d7:69:42:68:80:e8:fa:5c:03:3f:08:07:79:4e:23:6b:22:
4a:6d:6e:7c:7d:a5:e9:07:53:43:47:17:6c:9f:18:20:37:69:
d3:d0:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:42 2025 by rpki-client