Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29fd871a-20f5-47be-86e7-dc8fb0fecf33.roa
File: 29fd871a-20f5-47be-86e7-dc8fb0fecf33.roa (raw, json)
Hash identifier: 7e0aaFH27pw0+DDMnO03o8ZmKIwtdHdWp7JPabaMsPc=
Subject key identifier: BF:F5:C5:02:D7:96:B4:78:7D:98:82:BF:D6:8C:BC:8D:F2:54:EB:68
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 49074477345138F625A41707D02C0E406919A473
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29fd871a-20f5-47be-86e7-dc8fb0fecf33.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:07:44:77:34:51:38:f6:25:a4:17:07:d0:2c:0e:40:69:19:a4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: serialNumber=931c72f415ce4245568d07f3f98b99f63e3c2a70735d336ee765caf3161a30f0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:af:a8:07:0e:40:21:f6:5b:4a:45:6e:81:
a8:94:1c:68:b7:f4:09:e0:fc:2d:14:5c:08:20:73:
d4:fb:dc:c5:59:a1:b3:4b:ec:8a:b3:59:ed:9e:f7:
38:37:34:c7:64:ab:ce:87:4a:62:fa:d4:9b:ee:a3:
3b:72:3c:18:f2:80:7e:ef:e0:70:ff:fe:71:62:27:
10:25:00:a7:f6:09:d6:64:90:a7:d4:f4:5f:97:49:
7f:34:48:51:b3:6d:92:03:25:50:0e:57:79:21:fc:
dd:72:60:2b:32:64:e0:57:bb:ad:f9:1e:99:55:d9:
f9:cc:f7:f3:2c:66:d7:b6:3e:68:d4:f3:a6:a1:7d:
37:9f:d1:0e:10:d4:98:1f:7a:cc:18:4b:f1:c1:3c:
ac:8e:69:46:06:33:3d:84:47:6d:29:58:fe:7b:3e:
ed:5e:ed:68:e0:a1:c0:d8:8d:f3:55:23:a5:38:50:
a5:71:bc:f5:0f:d8:b7:62:a0:bf:47:d2:6e:92:bc:
90:24:e2:4f:39:97:72:3a:89:da:d8:6d:ee:2b:6c:
02:4b:ad:51:1a:77:ae:6b:da:d0:3c:1a:4b:a7:60:
42:ad:f1:ad:8d:6e:55:a1:a6:b5:9c:17:00:92:6d:
33:d7:a6:91:df:6f:26:2f:8f:90:3d:ba:68:b4:d8:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:C5:02:D7:96:B4:78:7D:98:82:BF:D6:8C:BC:8D:F2:54:EB:68
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/29fd871a-20f5-47be-86e7-dc8fb0fecf33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:86:1d:e6:91:06:a7:ce:c1:c3:92:fd:fc:ce:13:ce:ca:0e:
1b:97:96:eb:33:17:51:16:27:5f:2b:06:80:c0:67:38:b6:cb:
f7:bb:06:9b:53:49:eb:10:fa:7d:f1:09:ca:ff:70:37:9b:88:
6c:e7:0f:44:ae:e3:5d:aa:d8:b4:c4:8e:45:9a:f6:70:f9:03:
82:49:48:08:e3:60:20:fa:0c:38:96:38:3a:f4:19:8a:4a:77:
62:88:2e:7a:35:8a:04:37:7f:76:be:f3:8d:d6:b8:b0:5c:04:
44:7c:2e:a5:f5:d0:f3:1d:83:45:05:5a:3e:c7:99:e6:af:b2:
a3:fe:f4:ee:75:8b:6a:9a:1e:f1:94:62:20:a3:d8:d2:a3:4b:
3f:62:c6:7f:06:c8:df:6e:1b:da:dd:a4:e5:ff:f0:16:a2:67:
a7:ca:21:fb:20:f4:1f:d2:d7:67:03:bf:84:f7:22:50:62:e7:
25:86:be:40:bf:72:40:00:84:0a:54:4f:b7:c5:38:b5:80:2d:
0d:7d:90:38:ff:b9:db:73:32:60:0d:cf:08:94:05:a3:13:bb:
15:a9:6f:01:16:79:f6:04:a5:76:c9:66:2d:b9:bf:c2:f4:91:
b8:56:6f:9e:95:86:31:4a:35:be:f8:90:91:2f:45:a0:f2:05:
41:45:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:01 2025 by rpki-client