Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3efdf7a6-86fe-4b12-8d62-6501db0f2955.roa
File: 3efdf7a6-86fe-4b12-8d62-6501db0f2955.roa (raw, json)
Hash identifier: qZk2HfUlSz9SuEkFCadG7r3tM3MeBDG7jwIze61F7Kg=
Subject key identifier: 4D:5B:9D:88:0A:16:4C:32:A1:E2:DA:BA:A1:BD:0C:08:33:4F:27:C9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 23C25F99CE3143584EF5C365C197EEB514223695
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3efdf7a6-86fe-4b12-8d62-6501db0f2955.roa
Signing time: Tue 17 Sep 2024 00:00:00 +0000
ROA not before: Tue 17 Sep 2024 00:00:00 +0000
ROA not after: Tue 22 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c2:5f:99:ce:31:43:58:4e:f5:c3:65:c1:97:ee:b5:14:22:36:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 17 00:00:00 2024 GMT
Not After : Oct 22 23:59:59 2024 GMT
Subject: serialNumber=0916a5b7370904e3bc7f4ae7cc6b164fa6f72a05f5d56038d6a1c167e848b804, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:cc:94:57:1f:e5:f3:8f:ea:02:ac:21:ec:
d3:89:b0:56:8c:31:3d:fd:3b:2b:fd:cf:1d:a5:54:
c1:42:f6:a3:62:ca:e7:b0:4c:77:94:06:1c:06:5c:
16:d8:65:b5:92:b2:55:99:29:ee:63:f4:bc:62:41:
1c:48:dd:59:6b:ca:c9:4e:a0:e4:fb:70:dd:bd:bf:
7a:58:c8:3b:6f:8f:1d:08:4d:18:6c:c4:43:ef:02:
0b:ac:70:5c:2b:d6:3d:8a:67:88:7f:d2:9a:99:69:
e1:22:b2:ed:85:08:50:0b:f3:bc:09:ae:cd:05:e6:
fb:17:32:a7:a3:51:d4:60:7c:a5:3c:ea:d9:44:9f:
a7:4b:e3:fc:8c:df:15:57:74:7a:1f:3d:4b:28:aa:
f3:e6:60:8a:f1:3c:85:0b:84:14:15:45:b6:9d:60:
00:dd:a7:42:9b:da:78:45:18:55:c1:1c:ac:f2:21:
71:c2:d0:80:58:4e:2b:d8:82:a9:69:98:52:30:b0:
9d:b7:00:23:49:0d:ff:76:76:e6:af:ca:99:49:4c:
37:71:c5:34:04:fc:9c:ea:c6:d9:76:b6:fb:1e:f7:
1a:72:58:83:95:be:e7:c7:b6:e4:74:2d:c9:1f:c7:
b8:61:91:6f:9c:bb:93:58:d5:8b:22:29:b5:9e:af:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5B:9D:88:0A:16:4C:32:A1:E2:DA:BA:A1:BD:0C:08:33:4F:27:C9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3efdf7a6-86fe-4b12-8d62-6501db0f2955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7f:5a:c0:1a:c5:62:1e:7e:75:a0:45:29:18:a6:bd:8a:9c:
e4:4c:70:ad:56:76:01:55:c7:9e:d8:74:e4:34:09:72:d8:81:
26:46:ed:22:09:fb:03:4f:17:17:f3:d7:f5:86:c7:5c:c3:6e:
fd:7e:05:03:0c:89:b4:87:e1:5e:81:4a:30:a0:c9:0a:b3:97:
be:f5:7c:24:40:a1:b7:a7:d2:ef:9a:87:26:86:71:cd:d2:dc:
c4:08:8c:e3:4d:27:16:1d:48:36:c0:53:00:c0:96:5f:c2:8c:
22:13:80:20:3a:ee:71:f3:ff:65:2b:14:d7:47:27:1f:ea:06:
7e:e9:61:db:b4:b9:99:07:e9:c6:23:0c:7d:57:ad:c8:cc:a7:
a5:e2:50:f1:4f:e4:72:b3:91:94:21:10:3a:85:01:12:5d:fc:
4a:ed:e1:d8:5d:c1:6b:8f:97:d8:dc:3d:9a:64:c4:32:5d:24:
d7:84:1e:13:90:39:fa:de:99:f5:52:c5:63:dd:0c:61:48:2d:
4e:71:b2:7e:0d:cc:c1:0a:d4:f8:4e:28:eb:b0:e2:0d:55:c5:
71:a5:08:83:29:10:d8:48:54:b5:a6:67:5a:79:76:11:e4:b4:
34:2d:8e:71:cc:a0:37:a7:f5:04:20:0e:0b:e1:a8:93:74:b1:
36:44:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:04 2025 by rpki-client