Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4df3e8b0-47d7-4340-a00f-ee3e0d5743f7.roa
File: 4df3e8b0-47d7-4340-a00f-ee3e0d5743f7.roa (raw, json)
Hash identifier: olTULDQmgDpGuJo6xkgEcSeO1HNNwKXy2kS3QJ70JsM=
Subject key identifier: 3B:C4:8D:85:B4:3F:93:A9:D7:8E:0D:E7:0F:9C:71:20:40:79:9F:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3DCBA533BE440C0361AE1DC96E1F8BDF7BED6A8E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4df3e8b0-47d7-4340-a00f-ee3e0d5743f7.roa
Signing time: Thu 18 Jul 2024 00:00:00 +0000
ROA not before: Thu 18 Jul 2024 00:00:00 +0000
ROA not after: Thu 22 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cb:a5:33:be:44:0c:03:61:ae:1d:c9:6e:1f:8b:df:7b:ed:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 18 00:00:00 2024 GMT
Not After : Aug 22 23:59:59 2024 GMT
Subject: serialNumber=be2823ec21ae2f474185b0c33913e6250fbc2ca71d1f1e019ca19f51aecea1b6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:52:a4:4c:83:2d:9b:f1:8d:1a:be:fc:4f:
79:b6:ec:92:06:d1:91:7b:2f:be:43:bb:b4:3d:73:
df:43:e5:c6:9d:74:f6:6f:0c:e6:f2:a5:20:ed:4f:
a2:05:1f:8d:a6:6b:13:59:09:de:e9:f8:57:50:a9:
2a:3e:0e:a3:87:db:c8:27:ec:f6:ae:ab:c5:ed:d1:
00:14:85:71:de:3b:f4:61:96:39:d7:59:18:a8:ed:
f4:96:4f:f2:9f:40:49:18:82:d4:ce:e6:df:cc:60:
69:80:7d:24:d3:90:83:e5:5e:45:b1:b5:8a:0c:10:
f7:db:bf:e7:9b:86:44:83:65:55:d7:f0:4b:45:69:
ce:33:4f:93:63:a4:16:00:47:39:fe:a2:9c:15:d5:
32:91:12:e6:e3:ff:1a:74:8b:73:32:62:c6:f1:f1:
5a:c0:82:82:c8:a1:2b:f9:1a:8c:27:f1:46:7d:9e:
ab:fd:63:86:2b:59:34:cf:c1:62:74:44:0c:94:9c:
f5:51:59:10:d6:0f:42:15:5e:61:e8:d5:67:16:8c:
52:d1:e5:60:97:0e:58:d9:c1:31:3a:6c:d8:6f:c5:
e9:73:07:8a:07:3a:4f:80:be:92:3d:dd:6f:4b:94:
f8:ce:ba:ed:61:08:7a:67:02:ea:82:27:de:ca:a4:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C4:8D:85:B4:3F:93:A9:D7:8E:0D:E7:0F:9C:71:20:40:79:9F:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4df3e8b0-47d7-4340-a00f-ee3e0d5743f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8e:ed:90:b8:5f:d4:7d:30:e7:4f:9e:58:a3:de:37:ea:53:
1f:24:3c:9f:53:8b:56:0f:87:9c:fd:cc:30:78:6d:4e:6f:09:
cb:f2:e8:50:23:6e:37:0d:a4:b3:8f:22:6d:81:cc:18:d3:47:
05:20:58:ed:00:12:44:73:e8:81:b0:bd:6a:fa:3d:a7:80:22:
7f:ab:fc:39:b4:bb:d4:14:0c:f4:0c:b9:62:df:f1:a9:40:8b:
e3:15:b5:cb:fe:e9:68:3c:b7:f4:38:f1:4e:6b:14:61:03:f1:
fe:3a:80:59:98:81:a1:87:ae:cd:e6:03:10:c0:6f:80:06:c2:
1d:be:20:28:6a:1a:c7:5f:bb:42:f7:34:83:05:d2:2e:11:5e:
3e:3d:44:75:2b:0c:ca:71:4e:95:24:76:2e:8e:a0:cf:bc:41:
62:dc:03:4d:8c:32:74:6a:64:be:32:5b:80:5c:35:00:cb:d2:
50:06:64:3c:4f:3a:a5:94:d4:33:59:45:31:32:e7:c0:5a:6c:
46:37:bf:0b:89:d8:7d:6a:5d:3c:58:5d:d8:62:fb:e0:0a:98:
a5:6e:3b:42:36:3c:ff:67:c7:a2:99:7e:4b:af:9b:02:20:2e:
54:ad:31:84:ee:a2:c3:22:3f:8a:ef:13:13:3c:d0:5a:0a:d8:
30:cd:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:40:03 2025 by rpki-client