Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8bf12c-b011-4740-b704-82953ebe19ba.roa
File: 3c8bf12c-b011-4740-b704-82953ebe19ba.roa (raw, json)
Hash identifier: TBeAFyCdX1afVgYyRN6e3ELXBCnEDX97nPQdXHWmbTw=
Subject key identifier: 0B:68:D8:FA:76:AF:EB:4B:E8:F2:A6:0E:07:81:70:54:D7:C8:A1:56
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3308127E6597B77460660AE915D122B1D5BA6215
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8bf12c-b011-4740-b704-82953ebe19ba.roa
Signing time: Thu 13 Jul 2023 00:00:00 +0000
ROA not before: Thu 13 Jul 2023 00:00:00 +0000
ROA not after: Thu 17 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:08:12:7e:65:97:b7:74:60:66:0a:e9:15:d1:22:b1:d5:ba:62:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 13 00:00:00 2023 GMT
Not After : Aug 17 23:59:59 2023 GMT
Subject: serialNumber=57c32f4784b5c61e2e3a824f5a519400ee44ccd37e293ece5b6f65ff8bc78a7e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:e6:67:29:64:96:73:58:93:94:f8:59:1e:
43:4f:3d:93:18:b9:51:0e:a4:8b:a7:10:b4:8a:41:
e2:3c:49:5a:ab:01:13:12:49:dc:24:1c:07:b0:ef:
c4:a2:f3:be:ab:a0:f5:92:f7:f2:de:b8:55:78:a7:
b8:75:17:bb:21:ad:e4:da:b7:5b:82:86:a7:16:1f:
33:5c:a2:d2:92:f1:81:81:86:72:81:a5:3e:68:79:
9e:ba:72:b7:14:c8:72:4c:08:44:ed:a4:8d:19:88:
7d:e3:62:08:cd:30:66:f9:9a:ed:d4:28:37:dd:80:
4a:32:3c:6e:41:5d:51:6f:a0:06:0d:0c:0f:ef:27:
63:1f:6e:ce:fd:9c:d9:33:5b:52:c0:98:ea:aa:e3:
5c:5f:22:19:b2:f8:55:fe:25:6f:be:cd:47:3e:10:
6b:c1:d4:b5:db:69:02:15:c7:9c:3c:d0:0b:9f:03:
49:8e:a9:cc:3b:5c:da:4e:e5:3d:d7:99:52:7c:b9:
1d:7e:53:85:00:b6:5a:54:d4:ad:17:d6:e3:2f:4b:
3b:ea:dd:c5:1f:8f:b6:1b:a4:d3:c4:d4:43:f2:93:
b9:e7:67:0c:40:cd:c1:65:e8:98:fd:23:eb:51:ad:
da:0d:48:e9:ae:fa:31:a2:97:e3:85:b7:17:91:dd:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:D8:FA:76:AF:EB:4B:E8:F2:A6:0E:07:81:70:54:D7:C8:A1:56
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8bf12c-b011-4740-b704-82953ebe19ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:85:dc:ef:8d:76:49:f7:a7:a1:5e:bb:67:ff:8a:48:ed:7c:
4c:6f:e0:29:f1:3b:c7:46:85:c6:09:6d:1b:1e:70:fc:ed:de:
de:84:e4:76:2c:f5:c3:61:00:42:a5:6a:44:ba:65:f9:23:8b:
9a:48:e8:88:e8:4e:98:d3:b5:20:e4:5e:80:a7:af:dc:bf:4e:
81:f6:55:53:32:e9:89:a6:42:90:ff:eb:b7:c4:0c:77:06:6e:
51:7d:e5:c3:cf:cf:0a:8b:54:80:ce:40:18:c4:87:9a:92:b5:
2b:10:59:41:fa:d4:44:ba:8c:9b:4b:8f:7a:1e:3f:d4:9f:1d:
e2:cf:b3:d1:71:36:5b:fb:0e:83:74:c6:6c:6b:ec:96:b6:b4:
ca:1c:99:c1:5e:d2:a2:7c:ce:f1:6b:f7:54:88:9e:29:3f:c7:
7d:5f:95:4c:41:3b:a5:a2:24:8e:dd:37:bf:6b:ae:0e:53:f6:
74:86:e5:56:b6:7d:df:ed:78:37:6a:2b:b0:1f:bb:61:21:52:
d2:19:43:e2:ca:11:ed:90:b0:9f:f1:d3:42:57:6e:62:46:9b:
23:df:c0:76:59:91:a0:1d:7a:df:6b:35:47:7f:ab:c7:e0:a8:
7e:a3:3b:8d:6a:20:74:03:7b:a5:5c:39:9c:cb:27:0a:23:f5:
dc:8a:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:11:56 2025 by rpki-client