Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/304bc338-14a4-4029-9b86-e9bb2cb04537.roa
File: 304bc338-14a4-4029-9b86-e9bb2cb04537.roa (raw, json)
Hash identifier: KYWTOcNgy1Y78JmB0/IF/ReaiV2QwAiafMiuMz6VaV0=
Subject key identifier: 71:77:A1:24:18:FE:D9:5C:CA:6C:5B:DB:15:12:2D:84:C3:99:A5:CF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 170398B1C07A6E2E2AA3368B691D27A7CCA60D34
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/304bc338-14a4-4029-9b86-e9bb2cb04537.roa
Signing time: Thu 14 Dec 2023 00:00:00 +0000
ROA not before: Thu 14 Dec 2023 00:00:00 +0000
ROA not after: Thu 18 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:03:98:b1:c0:7a:6e:2e:2a:a3:36:8b:69:1d:27:a7:cc:a6:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 14 00:00:00 2023 GMT
Not After : Jan 18 23:59:59 2024 GMT
Subject: serialNumber=b6824451a8ec0c7db4458bb30dc6cb02a6cc8626d7970b9f403052407966f500, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:ac:14:ab:af:a7:4b:59:0c:8f:16:3f:0a:
7f:a9:b0:d2:51:2b:2d:16:b6:5a:ab:86:8a:24:07:
de:ce:49:ed:22:c8:e8:ea:d8:8b:66:e8:2f:64:0e:
07:3b:d0:2b:dc:6f:30:70:e4:1c:8c:c5:03:42:8c:
bc:07:8e:f4:a4:62:bc:f9:9f:40:b3:61:95:26:cb:
16:b0:70:4f:6e:1e:4c:c3:1a:75:20:81:3d:fb:1c:
ae:23:07:4a:11:3d:a3:db:48:b9:0f:9f:bf:da:56:
9d:67:e7:27:4e:c7:eb:00:52:2f:bb:c5:62:fa:4d:
ac:66:c8:de:27:00:6f:0a:17:c0:1c:7f:67:31:0d:
eb:c6:44:bc:52:86:fd:91:f6:e4:fb:3b:b6:9e:0f:
b7:50:c2:8d:17:3f:c6:41:b9:0f:6e:e3:2e:e1:ea:
e0:d7:6d:cb:92:d7:7c:f3:03:ab:21:20:65:91:cc:
ba:b8:57:f8:07:35:9e:7a:cf:6a:a3:b2:f2:6b:88:
24:ed:a4:4d:c5:fc:06:ab:30:0c:bd:15:0e:28:2f:
2e:ca:83:da:c2:6f:c8:75:1f:55:b1:de:2e:db:3d:
a1:46:32:cd:12:45:3f:24:4b:59:00:9a:92:e6:ed:
45:35:d2:b6:ef:f0:a5:dc:df:10:59:d3:c1:f0:ba:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:A1:24:18:FE:D9:5C:CA:6C:5B:DB:15:12:2D:84:C3:99:A5:CF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/304bc338-14a4-4029-9b86-e9bb2cb04537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:98:4a:65:2b:6a:17:90:5c:d2:85:47:4b:31:33:d5:26:d6:
fd:b2:81:1f:89:c0:01:6d:23:2b:79:ca:79:71:a4:fa:ef:4d:
25:ae:38:34:e6:de:79:a3:d5:27:27:3b:0d:3b:ff:3c:4e:0c:
fc:33:24:e3:d4:52:48:78:ff:1d:f1:db:3e:8a:a7:0a:90:6b:
a4:f5:34:39:32:63:d1:84:2b:19:e4:f9:47:27:dc:19:64:c6:
ae:af:cf:35:f4:fb:28:5c:91:db:d2:09:2d:a3:bc:21:70:9d:
56:80:b8:24:77:f1:5f:d1:84:ea:fd:87:d9:67:ef:26:2c:f9:
b1:19:f6:f5:83:f3:ab:36:a2:60:a5:bd:80:b6:35:e8:95:fb:
81:18:0e:11:97:a1:8b:a9:f2:03:a3:b6:5c:1a:a0:52:3e:19:
ba:bb:b5:46:6e:11:94:d8:d1:f5:02:03:8b:fb:d0:37:1f:f8:
58:5f:4e:2a:8c:5d:de:13:71:e0:b4:27:d5:c7:ff:68:87:ab:
95:cb:ce:8b:d5:e9:cc:9a:45:07:d6:cb:d9:7a:03:ea:78:10:
6e:65:f2:fc:b6:94:43:46:27:3d:f2:70:82:72:89:ab:30:37:
1b:fa:ac:26:b7:f0:50:4a:fd:33:d5:f6:7e:29:dd:81:56:07:
ce:4c:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:46 2025 by rpki-client