Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32e30301-df24-4e31-a9c3-0362ca3022cf.roa
File: 32e30301-df24-4e31-a9c3-0362ca3022cf.roa (raw, json)
Hash identifier: LNfljBV0Rf5uIjvp2/ujl6P8/Mbo6UMIU4mA2Dajlko=
Subject key identifier: 63:4B:A2:C7:F4:C7:6F:C2:0D:50:1E:AA:B2:10:48:0F:23:D5:D2:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1BFB179BDB1D5EE9295208FB1B0E426A3DE0A4A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32e30301-df24-4e31-a9c3-0362ca3022cf.roa
Signing time: Sun 24 Sep 2023 00:00:00 +0000
ROA not before: Sun 24 Sep 2023 00:00:00 +0000
ROA not after: Sun 29 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fb:17:9b:db:1d:5e:e9:29:52:08:fb:1b:0e:42:6a:3d:e0:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 24 00:00:00 2023 GMT
Not After : Oct 29 23:59:59 2023 GMT
Subject: serialNumber=6d91507549523d23f21af45389a4ae3724bff08931e700124eb1ba4666a56f75, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:57:24:5d:47:21:0a:50:1f:d3:64:e2:2f:
47:06:89:84:30:e7:b5:1e:f2:b6:30:c7:73:ba:d3:
95:db:93:94:71:c5:59:c8:77:be:93:8d:e6:92:1e:
19:68:28:46:a3:00:98:09:49:44:e5:03:37:a6:54:
e3:90:6d:a0:58:5a:d0:2f:af:10:a1:2a:a4:0a:2d:
c7:8a:de:62:18:62:af:5e:7c:f1:5e:cb:0a:00:fd:
8b:48:fe:0f:a7:b2:53:36:7c:5b:ec:57:02:ee:9b:
03:f8:2d:59:08:ac:97:06:6d:13:83:35:cf:c6:61:
ca:e2:72:c8:54:6d:17:79:8c:25:17:c4:ad:e9:67:
46:85:f3:c5:b0:89:e4:e9:36:47:ca:d2:bf:a4:36:
4a:d9:e1:99:cf:67:43:4c:ea:3c:2d:85:21:8e:87:
c3:c3:dd:cb:de:e0:82:8f:c8:93:5e:4d:79:b9:1c:
05:c8:f0:dd:ee:93:45:c8:23:b1:d7:7a:cb:69:88:
28:97:5a:23:f4:77:94:a7:02:3d:db:c9:9e:a7:82:
fe:46:55:96:d7:30:5a:42:9e:3c:02:66:2c:d4:8d:
e4:50:7e:d8:eb:c0:3f:2f:2c:ee:7a:1c:c3:a6:83:
83:d3:2e:ac:ff:99:8f:3f:39:6e:62:80:24:a1:3b:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:A2:C7:F4:C7:6F:C2:0D:50:1E:AA:B2:10:48:0F:23:D5:D2:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/32e30301-df24-4e31-a9c3-0362ca3022cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:00:cc:1f:ef:7a:12:d0:06:f3:35:d9:28:81:e9:7a:0e:19:
cf:f9:df:b0:b1:3d:1b:e5:bc:62:68:4d:ed:c3:b6:6d:e2:c9:
3e:39:13:53:32:74:92:21:58:03:b8:64:c5:b0:f3:9e:fa:e9:
25:e7:64:7b:5c:20:d0:8b:6f:cc:11:90:22:91:3d:6e:fa:da:
38:35:56:4a:02:57:1c:3a:60:79:09:38:b2:ac:54:56:0f:bb:
4f:a0:07:de:26:c9:5c:1b:77:98:bb:22:54:1f:4d:af:91:0e:
43:c1:c0:cd:d3:a6:62:f4:29:20:5c:98:87:52:21:fd:8f:e6:
0f:5c:74:5f:d4:c9:ba:11:7e:ae:36:31:c6:da:3d:1b:07:69:
de:97:5c:df:5b:f2:11:49:d1:4a:ea:2d:33:71:06:79:e5:4b:
7d:f9:54:c3:01:6e:cc:42:aa:d5:56:8b:90:83:0f:e0:70:20:
7f:01:a2:00:d8:69:be:63:0b:a2:9b:c8:52:a4:4d:77:c4:8b:
14:cb:8d:07:4b:5e:8a:c6:46:b1:1a:36:c5:d0:fd:be:a5:fb:
c2:ce:47:e3:45:69:fb:45:ab:6f:5d:e7:34:2f:23:8f:c0:a9:
bd:c1:c3:2c:a5:3d:c6:fe:b3:06:5f:fa:22:ff:17:ff:39:2e:
ac:86:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:40 2025 by rpki-client