Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ef76aa4-74c0-4035-b927-e9d846bd30dc.roa
File: 3ef76aa4-74c0-4035-b927-e9d846bd30dc.roa (raw, json)
Hash identifier: t20womxitfWM2SYt240+yx8rfQZ0gZwSjnTqGnNXVDI=
Subject key identifier: 27:EF:30:39:C5:48:15:9F:B5:28:49:28:A8:F9:E0:93:DA:79:25:0B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6940C9229E604C5E0C4D08442D7B3BB9F47FE96E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ef76aa4-74c0-4035-b927-e9d846bd30dc.roa
Signing time: Tue 02 Jul 2024 00:00:00 +0000
ROA not before: Tue 02 Jul 2024 00:00:00 +0000
ROA not after: Tue 06 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:40:c9:22:9e:60:4c:5e:0c:4d:08:44:2d:7b:3b:b9:f4:7f:e9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 2 00:00:00 2024 GMT
Not After : Aug 6 23:59:59 2024 GMT
Subject: serialNumber=0341fce40850995bfb15bf7451ad3cf3dce18e03c70f7885ba1ae9835545f118, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:41:84:a3:98:d1:f3:a2:ef:97:86:03:80:
4c:7e:23:6f:56:a8:0a:8d:c3:a6:e4:c2:2d:0e:7b:
2c:eb:e2:ae:fa:58:20:c6:5a:01:2c:b7:65:fc:99:
a9:b7:38:fd:76:45:c6:22:af:f9:a8:6e:de:9a:b4:
4a:03:08:c4:d7:76:1f:9f:e7:5e:cc:17:cd:db:f5:
08:8c:6e:4c:fb:c2:40:4c:78:64:fa:5c:5d:4e:fd:
15:2c:d2:d0:61:70:b0:4f:81:d3:27:10:9a:28:10:
ac:19:a5:0c:b4:c3:b9:87:02:25:d2:80:cd:67:93:
2a:bf:7d:6d:6f:45:94:87:6b:72:fa:2f:18:51:41:
c9:e4:25:3e:db:b2:09:52:99:92:58:45:af:aa:df:
41:f4:fa:bd:de:d7:c1:4d:f5:29:69:e2:19:16:2e:
98:6a:f6:f7:aa:4c:96:1c:32:8b:3c:e6:52:5c:86:
73:ea:fd:b9:8c:f2:67:16:e8:e4:62:3c:fc:df:2f:
1b:a9:d0:ce:cc:75:ec:c5:dd:aa:12:cd:f3:61:53:
27:76:c2:32:5b:c4:f8:96:52:32:41:e1:1d:13:2e:
fb:7d:93:bc:af:bc:1c:b2:60:fe:82:64:08:e7:af:
3b:be:36:11:74:35:74:d2:8f:f6:5c:11:c8:99:6d:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EF:30:39:C5:48:15:9F:B5:28:49:28:A8:F9:E0:93:DA:79:25:0B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ef76aa4-74c0-4035-b927-e9d846bd30dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ad:38:68:cb:cb:db:96:10:b7:87:0c:bb:aa:9b:7f:3e:1f:
76:25:58:0e:af:18:cd:4f:29:32:92:e0:b0:d2:b5:02:d5:dd:
64:25:0e:e2:5a:2a:84:c6:32:24:a3:02:a1:f8:65:58:a3:7a:
43:76:4b:86:9e:2b:ad:90:20:d0:bb:99:0b:ad:b0:70:d1:d4:
b7:96:a5:77:b7:c1:f8:58:0e:de:ce:cc:f8:a0:26:de:3a:ed:
58:ed:78:59:30:d6:dd:59:5b:c8:a8:8d:2f:e0:e4:87:84:3d:
6c:52:e3:77:91:26:34:24:be:de:41:a9:96:82:2b:aa:b7:28:
1e:79:a5:11:8d:8b:c8:79:4d:ff:7a:75:ca:21:9d:ca:2b:98:
48:fe:1c:94:9e:a4:7d:de:2e:ff:d6:62:68:d6:c8:ea:0d:d5:
61:9a:96:86:83:ba:b8:82:46:da:39:c5:84:11:63:d8:9b:89:
49:b5:70:3e:6d:58:d7:de:56:4d:5c:34:15:93:9d:c1:0c:43:
6e:e3:20:1f:f5:3a:61:01:97:71:a1:b7:de:a2:f6:7b:fc:48:
ba:cd:5f:66:47:da:eb:60:87:0c:8b:bf:9c:39:8d:51:f9:dd:
01:47:e9:1e:90:b0:94:c1:c2:af:41:30:4a:07:e2:d7:40:3e:
fd:a7:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:36 2025 by rpki-client