Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43146cf5-a105-4e03-af85-90cb76ebb85f.roa
File: 43146cf5-a105-4e03-af85-90cb76ebb85f.roa (raw, json)
Hash identifier: JJAvTSfqTMM6BBsVfOLU36T7u+RDJTn5f8X5d4JdxAw=
Subject key identifier: 9A:B1:ED:1E:B8:39:AB:04:69:E9:89:C5:6A:B5:B5:36:B3:68:6D:DE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 02F8318F452C6DB37BAAF882345B5BA429104D99
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43146cf5-a105-4e03-af85-90cb76ebb85f.roa
Signing time: Fri 15 Nov 2024 00:00:00 +0000
ROA not before: Fri 15 Nov 2024 00:00:00 +0000
ROA not after: Fri 20 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:31:8f:45:2c:6d:b3:7b:aa:f8:82:34:5b:5b:a4:29:10:4d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 15 00:00:00 2024 GMT
Not After : Dec 20 23:59:59 2024 GMT
Subject: serialNumber=16ac5180f1f6cba668ad9f9c75eddbccf7e34df2dbb0681483a86948e03a736b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:b2:ca:dd:ad:2d:c3:fa:e6:1a:bc:54:52:
40:a0:63:84:15:12:e7:f7:58:1d:d6:fc:ef:22:44:
58:02:f7:12:dc:2e:0f:68:ff:29:79:71:88:e5:6b:
fb:ef:7c:80:e4:9c:12:a3:23:2e:fb:bb:25:28:7a:
98:d5:d3:ad:34:4a:c4:e6:cb:ba:31:cf:f8:bc:ae:
1a:8c:bc:61:76:2f:9f:1d:79:35:33:90:d2:b3:c1:
5b:59:52:6e:cf:f1:51:7a:6d:45:f7:75:50:31:18:
eb:aa:f6:d4:64:40:af:42:73:1e:db:4b:c5:65:28:
30:3c:29:e9:f3:99:d4:80:c6:4d:93:10:49:29:b6:
d3:dd:62:d7:1b:df:e8:bb:59:c0:96:33:f7:0d:54:
5a:44:13:f4:cf:06:32:d6:84:09:7c:26:3f:27:e6:
b1:52:cb:c0:40:57:49:a5:3f:46:1e:d8:a0:e1:3b:
17:c2:be:34:da:02:bb:c2:07:63:6e:a0:ea:6b:67:
fb:f9:cd:06:3d:30:39:32:d4:97:c1:1f:f2:18:37:
af:d4:a9:95:b8:58:4a:58:0b:a8:c6:04:18:d1:92:
a7:1a:3f:6c:b9:de:09:e7:e9:f6:32:67:21:6e:d5:
c9:8b:7e:1e:ca:c9:44:96:c4:5f:09:a3:0d:ad:30:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:ED:1E:B8:39:AB:04:69:E9:89:C5:6A:B5:B5:36:B3:68:6D:DE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/43146cf5-a105-4e03-af85-90cb76ebb85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ee:05:45:dc:5b:7e:44:bf:0b:d8:9b:0b:d4:97:d3:d1:d1:
f4:d8:77:0a:bd:cd:cc:9c:d4:b5:53:84:5d:cc:9f:9c:0f:fb:
9b:36:3e:16:9d:bc:df:e3:ad:c8:d2:d8:0d:bb:b0:c4:3a:5f:
63:5b:c3:8b:6d:da:86:30:09:7c:4b:3a:62:c4:8b:55:87:f8:
81:2d:8d:6b:84:9a:ba:71:c0:b4:70:db:6d:1e:47:5c:0a:37:
11:2a:83:38:a1:2f:b8:6e:fc:28:c3:1f:8d:95:c7:a5:ed:81:
7e:91:ba:ab:c3:94:f1:f2:fe:e2:56:1a:2b:ea:d0:b4:e6:16:
e5:f0:f9:9e:ca:42:7f:fb:f4:ce:e1:7b:f0:ce:79:bf:19:2d:
6e:c0:ed:43:dd:79:28:b5:5f:23:c2:30:bc:c7:81:c4:ee:c7:
b1:fa:c8:63:73:fc:32:fd:fa:36:85:fa:f4:95:ee:83:22:d0:
26:34:13:f0:b1:93:e7:d7:c7:c5:3e:94:5b:bb:61:db:f8:bb:
73:6a:34:4f:a6:5d:db:fa:ad:cf:66:e1:ef:f5:56:a7:80:02:
79:ce:b8:62:67:66:75:12:11:56:16:cb:4d:3b:fe:61:a6:48:
89:1f:26:9c:11:e9:1e:be:64:95:4d:6f:eb:7d:99:d9:18:5b:
e5:f8:17:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:53 2025 by rpki-client