Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c4643d9-e642-4bbf-99d3-c2222256d814.roa
File: 3c4643d9-e642-4bbf-99d3-c2222256d814.roa (raw, json)
Hash identifier: o2mJkTc24xsx9fcSHdFWZQzCFBJtLMbIvVz3oE7fDyg=
Subject key identifier: C3:7E:C3:B4:19:B5:6D:5D:0F:CE:94:A4:6D:6E:E8:52:A5:70:75:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CD4EF559E3D61FE06BCF3897C1E40994BD653DF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c4643d9-e642-4bbf-99d3-c2222256d814.roa
Signing time: Sat 08 Mar 2025 03:38:18 +0000
ROA not before: Sat 08 Mar 2025 03:38:18 +0000
ROA not after: Sat 12 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d4:ef:55:9e:3d:61:fe:06:bc:f3:89:7c:1e:40:99:4b:d6:53:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 8 03:38:18 2025 GMT
Not After : Apr 12 23:59:59 2025 GMT
Subject: serialNumber=c5f63f412826d02f9b16dae9306647374254cb5b334056113a5fccc5e16ed472, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:01:f1:26:0f:e2:c7:27:dc:e3:f5:24:b5:
16:91:b0:ef:9a:ab:f7:ec:28:c8:73:74:80:3e:e3:
04:36:65:7f:4a:65:f9:e3:06:38:f6:7d:c7:60:c1:
e3:f3:9b:40:52:06:26:65:54:25:d7:c1:55:1a:73:
c4:76:55:ca:b1:cd:53:ff:7c:ff:29:f9:5d:15:19:
ba:88:03:39:4a:9e:a3:a8:5d:3c:ed:ff:e4:3a:5f:
9c:5a:5a:a7:0c:dc:c2:08:4d:16:63:ee:f4:5d:ac:
7f:19:5b:ca:f8:41:14:fb:57:f0:2c:f6:2b:c8:6e:
f9:85:f2:62:ff:ad:aa:00:7a:62:cc:b8:fe:01:f7:
99:b1:27:15:8c:27:c8:d1:31:c9:7f:27:e6:fe:81:
a9:d9:0f:f5:89:26:a6:74:c4:27:d8:d2:60:31:25:
07:6d:aa:35:dc:04:c8:ff:be:79:bf:0c:13:0d:be:
30:cc:67:82:4e:e1:c4:6a:2b:e5:1b:54:fa:f9:43:
c0:98:94:fe:ca:b6:75:15:cc:ac:a7:e2:99:70:28:
f2:34:bc:fa:68:b8:43:32:3a:06:75:fb:db:9c:ca:
55:28:4c:1f:49:7b:89:2e:ab:c2:31:76:09:ab:c5:
d4:27:8e:a9:cb:dd:85:0d:95:c4:c6:7c:c3:bf:4e:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:C3:B4:19:B5:6D:5D:0F:CE:94:A4:6D:6E:E8:52:A5:70:75:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c4643d9-e642-4bbf-99d3-c2222256d814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
80:86:bd:3f:18:da:8d:3a:8f:4e:74:5e:ea:02:0f:bd:53:e8:
57:83:a4:c6:84:71:68:c7:bb:64:dc:6b:f4:74:d7:a2:fc:d3:
8e:10:c5:a2:2d:e8:9d:10:15:7a:9b:1b:89:dc:99:73:0c:68:
3f:04:32:54:fe:56:db:82:01:2c:2c:8c:cc:cf:40:a2:81:f3:
b9:de:b0:13:db:cd:83:e1:cb:c9:ab:aa:d7:c0:46:11:ba:ae:
50:d2:82:a5:bf:03:e4:66:e6:6f:43:ef:0d:38:bb:96:85:aa:
b8:8d:cd:55:5f:50:bd:91:71:0e:63:45:f4:65:81:73:5c:5d:
5d:09:15:26:98:01:a9:8f:c2:56:d2:ce:27:d0:cd:a7:16:03:
06:1a:98:43:e9:48:2f:01:b8:4b:b5:1b:06:0f:7b:4f:4c:e4:
ce:81:09:99:1f:93:24:ea:14:94:67:6a:dc:0c:4c:fe:61:08:
e8:ed:90:4d:34:fd:b7:f9:82:c8:c0:11:1e:4f:76:ee:62:96:
b7:bd:79:90:95:af:25:3b:7b:c6:da:46:7c:f2:f3:e6:d7:8f:
be:65:38:02:90:db:41:63:2d:c1:f0:b2:3d:0f:51:96:b7:5a:
3a:ca:52:3f:cf:19:e2:41:98:b0:bc:84:28:d9:b9:c1:37:5d:
f9:8a:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:20 2025 by rpki-client