Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f2c675e-bfbe-4541-ae2f-cea5f735885d.roa
File: 3f2c675e-bfbe-4541-ae2f-cea5f735885d.roa (raw, json)
Hash identifier: ZGOeCaGC4hgdKregew1nlU8Oex/lhawDbOpHndQWakU=
Subject key identifier: C8:B1:B5:4D:29:9E:B8:11:9A:D2:C0:9F:01:BA:84:A4:E4:0B:B1:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6CB2380F1E7E92C48AEEB3399BFAFFFC54A922E2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f2c675e-bfbe-4541-ae2f-cea5f735885d.roa
Signing time: Sat 22 Jul 2023 00:00:00 +0000
ROA not before: Sat 22 Jul 2023 00:00:00 +0000
ROA not after: Sat 26 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b2:38:0f:1e:7e:92:c4:8a:ee:b3:39:9b:fa:ff:fc:54:a9:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 22 00:00:00 2023 GMT
Not After : Aug 26 23:59:59 2023 GMT
Subject: serialNumber=50bfc8d81d29ad09ba44095835f13ca9064383c61567b35473e5fca43d94526b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0d:d7:43:ba:6d:56:26:88:c7:ec:e0:80:f1:
04:3d:d0:73:73:7f:93:b1:70:83:79:b8:e5:51:36:
40:30:2d:e5:87:4d:6d:a2:aa:8c:c3:0c:a9:cf:c4:
9c:98:81:dd:2c:f0:b7:61:31:bf:3c:7d:b5:80:56:
72:2d:ea:f3:41:f8:2d:68:20:d9:ee:55:59:8a:ac:
59:e0:b6:cd:47:1e:54:ff:e5:73:5b:24:0c:06:66:
23:0c:b3:7c:18:4c:89:f6:80:64:95:b1:c0:a9:67:
a4:f2:a8:f1:bd:72:e1:b4:67:a3:2c:59:d2:b2:d9:
63:a8:09:e6:8d:71:fb:70:87:7b:61:ff:ec:7c:8c:
b4:02:28:28:29:3c:ed:db:10:70:6b:8d:17:1e:81:
38:c3:6f:04:de:ca:e5:de:00:32:2a:f7:dd:2d:bc:
09:ab:7e:c5:21:9a:e3:6e:25:0b:80:7e:11:d0:4b:
4d:fd:6f:eb:2d:a3:27:0b:c1:6e:f4:68:26:b2:29:
9c:92:99:f9:a7:61:4a:12:03:83:b6:83:c7:ae:ee:
f3:35:55:c0:91:65:dd:68:e7:8d:36:aa:54:4a:72:
8e:b9:db:de:f0:f3:cc:ca:03:6d:ab:28:0b:50:e5:
cf:b3:61:68:c4:d9:b5:81:8d:54:dc:86:dc:ef:55:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:B5:4D:29:9E:B8:11:9A:D2:C0:9F:01:BA:84:A4:E4:0B:B1:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f2c675e-bfbe-4541-ae2f-cea5f735885d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ae:b0:c1:64:5a:54:73:28:ae:a1:5b:85:dd:49:b2:eb:a9:
55:ec:20:d5:08:50:78:c5:ab:fb:11:50:82:86:77:d4:ec:b9:
cc:6e:86:7a:00:f7:52:40:e8:91:69:6b:09:6b:18:8a:a8:0a:
e3:e1:80:8c:dc:49:05:24:fd:c4:bb:db:3b:20:d2:3e:fb:33:
d5:fc:2d:c2:10:c8:6b:8d:30:67:c3:3c:da:1e:f8:26:89:e1:
dc:c7:93:89:3b:e7:69:86:1f:e8:43:2a:12:bb:b7:a8:28:a9:
db:23:f1:eb:8c:61:93:b8:53:92:55:68:24:49:30:ab:33:e0:
e8:a6:b6:a2:46:3a:83:44:be:fb:f3:fe:6f:68:28:f1:cb:90:
cb:db:4d:2a:0b:aa:f1:78:a8:d3:8d:69:5e:8d:a3:97:1a:83:
30:d1:16:0f:ba:16:45:bc:e6:3b:6f:73:34:a8:13:18:fb:ed:
49:4c:88:66:88:9d:74:30:35:c7:ee:59:89:22:6b:b5:06:7d:
77:5c:f9:69:77:42:e2:d8:06:65:65:d3:a2:2e:8a:a9:91:c6:
a6:28:4f:8a:ed:e1:17:18:f6:0b:1d:67:f6:87:13:e4:18:6a:
4f:67:a7:b0:e9:27:71:0d:fa:2a:38:50:8a:f3:d9:80:86:93:
f7:14:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:13:48 2025 by rpki-client