Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e133cf2-b775-4fce-9497-f841629d2ba4.roa
File: 2e133cf2-b775-4fce-9497-f841629d2ba4.roa (raw, json)
Hash identifier: cU1b3Pa0NnQ2I9XmhuDMXF4W0B6pTH8s1YYLaaaf6vk=
Subject key identifier: 40:CA:98:AE:2A:6F:85:26:6A:17:9F:07:B5:BB:2D:1C:83:19:84:68
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 120F974F254A2B317064E8673AE4F1410B51A1D7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e133cf2-b775-4fce-9497-f841629d2ba4.roa
Signing time: Sun 18 Jun 2023 00:00:00 +0000
ROA not before: Sun 18 Jun 2023 00:00:00 +0000
ROA not after: Sun 23 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0f:97:4f:25:4a:2b:31:70:64:e8:67:3a:e4:f1:41:0b:51:a1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 18 00:00:00 2023 GMT
Not After : Jul 23 23:59:59 2023 GMT
Subject: serialNumber=86a679dc2489230b913d33aa24a28cf54cc66d9a021231c42fb6f1adaa59b95e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:d6:a5:3e:45:b0:9a:c3:d0:84:3d:3b:e2:
ef:c0:a6:f7:1e:fa:51:bd:49:68:74:bc:9d:60:9f:
66:01:fe:8b:4e:62:09:0f:d0:89:24:b3:2e:83:5a:
4a:85:a1:dc:2d:f0:3f:4b:71:b2:87:bd:c4:77:4b:
51:6f:15:07:4f:d2:e5:d1:9d:65:68:60:b2:c3:f0:
74:47:1c:25:ca:a9:f8:ee:bd:40:16:37:64:b0:3a:
5f:40:d4:32:a0:6c:ef:37:ed:2d:74:9e:ce:97:5d:
a1:ea:54:c1:c0:aa:e0:d4:ed:02:63:59:fe:80:97:
8b:45:7b:23:bb:68:0f:72:1a:23:e8:4b:39:a9:3c:
26:15:8c:eb:9f:3d:53:be:b0:b1:1b:1c:b3:c6:7f:
23:c1:d4:f9:02:9f:0c:2c:e4:15:87:f0:da:49:8b:
a2:be:36:65:ab:82:a9:f1:9f:ba:ac:f2:e8:99:ad:
b8:24:43:e4:f4:2c:48:ba:4b:0d:58:f1:92:da:f8:
75:14:35:1e:e3:0f:42:25:af:31:72:82:41:9b:8b:
b8:54:65:ca:1a:db:8b:b6:d5:29:9f:89:28:61:c7:
da:19:d4:25:57:a8:e9:e4:89:82:7b:27:8e:2d:af:
f9:fb:86:e9:df:da:a9:4c:9c:9e:7a:c3:20:b5:a1:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:98:AE:2A:6F:85:26:6A:17:9F:07:B5:BB:2D:1C:83:19:84:68
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e133cf2-b775-4fce-9497-f841629d2ba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:9b:89:dc:8b:4d:64:63:50:c4:f7:2b:6d:01:e1:ae:54:43:
13:f7:53:10:1b:a5:34:c5:ea:dd:25:bf:2b:5a:ec:17:16:b8:
d1:88:8c:08:29:33:c8:77:27:1a:34:f5:9e:97:5a:fe:35:39:
a7:62:9c:91:b1:6b:81:cf:f3:31:a3:bd:3d:8d:04:59:f6:72:
5a:e6:a9:cf:db:8b:b8:ff:50:1a:72:1e:44:d4:12:1a:55:34:
6f:f8:3d:af:85:b6:23:48:87:9b:71:e8:d0:55:e4:98:77:26:
81:4d:25:70:53:f9:02:7f:e3:fb:2f:f2:20:e4:d6:5e:24:97:
21:a9:44:b3:ab:d3:90:23:d9:32:12:de:77:f5:3f:ee:21:b5:
80:94:30:1c:a5:e9:fe:8d:d2:d7:4d:ad:e4:e6:41:77:74:e8:
de:a2:79:a0:d4:ae:e1:b3:0e:d9:fb:02:fd:4c:31:83:11:76:
49:13:01:b8:17:8d:17:e8:f3:79:90:98:4c:d7:8a:04:73:bd:
06:11:5e:4a:ee:59:1f:7f:72:e1:e9:8b:2a:b9:e4:e3:31:13:
73:66:ec:15:c0:b9:8f:07:98:9a:48:06:03:85:5c:84:44:1f:
10:3b:1c:65:92:24:40:c3:8c:44:67:3c:2c:0d:13:bb:13:43:
0e:61:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:52 2025 by rpki-client