Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5088729d-e7b1-457b-88b6-b2c322d25618.roa
File: 5088729d-e7b1-457b-88b6-b2c322d25618.roa (raw, json)
Hash identifier: JpnjZoFfEJQCYkA0HQawrJyZCxqxFryf61g3rAZwY38=
Subject key identifier: 02:EF:23:D2:45:01:B3:DB:3C:A4:40:C6:72:3A:47:D2:25:2B:13:21
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6884C8A023782A89E05792B053FF9BFE3B3BEB08
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5088729d-e7b1-457b-88b6-b2c322d25618.roa
Signing time: Sun 03 Nov 2024 00:00:00 +0000
ROA not before: Sun 03 Nov 2024 00:00:00 +0000
ROA not after: Sun 08 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:84:c8:a0:23:78:2a:89:e0:57:92:b0:53:ff:9b:fe:3b:3b:eb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 3 00:00:00 2024 GMT
Not After : Dec 8 23:59:59 2024 GMT
Subject: serialNumber=23c4a0d0551204332b15620c607c1c2bf09c6d61f11ff6f582cf631a0ea44fcb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:9c:33:50:c4:ea:6a:1b:a8:ac:f2:f4:46:
04:a5:7c:8f:07:95:1e:0d:e8:a5:e3:7c:e4:b4:99:
a7:90:0a:be:97:69:58:2b:32:f4:c3:1d:16:ab:1a:
65:cb:75:66:04:cf:42:06:02:53:0d:70:71:be:69:
a8:b9:ac:83:93:6c:f3:92:a0:19:f0:d9:55:00:70:
74:a0:35:ef:c2:88:6a:fa:05:0c:21:3e:4c:96:bb:
db:60:0e:f8:bf:14:e6:94:a0:34:14:39:5f:7b:47:
2d:aa:a5:10:e8:eb:62:f8:09:14:1b:ea:4c:72:b7:
9f:f2:52:b0:78:6a:8e:f8:69:72:45:88:8d:04:81:
90:99:31:5a:73:4b:0a:a4:a6:c2:9d:00:08:23:9b:
d4:01:ea:52:b8:c4:5c:fb:bd:60:61:98:4a:61:07:
4b:1c:57:65:f3:8d:24:2e:9d:7f:ab:a0:7f:3f:35:
a2:d4:ce:6e:8b:32:07:63:0c:bb:65:b3:47:26:15:
1d:d7:31:23:d1:e8:bc:79:51:22:c3:37:1a:01:e8:
46:17:ca:5d:1a:77:ec:b8:b8:bb:00:5f:3f:9f:6d:
6c:7a:cd:fd:e8:db:bc:da:62:6f:52:cc:81:50:46:
c2:c0:8e:ec:f6:92:24:df:f2:64:04:a1:89:b7:bd:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:23:D2:45:01:B3:DB:3C:A4:40:C6:72:3A:47:D2:25:2B:13:21
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5088729d-e7b1-457b-88b6-b2c322d25618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1e:c9:1e:d6:ef:50:86:8c:59:cb:0e:38:78:21:b3:e7:94:
eb:2a:b7:3a:05:6b:fc:21:aa:43:da:dc:7e:33:65:56:e3:f6:
86:a1:d1:a9:58:e4:88:c2:07:d6:19:f3:ba:61:74:b1:f2:70:
28:4e:6d:e8:5e:14:20:07:04:d4:44:fb:dd:eb:66:be:97:1a:
ac:d4:f5:e8:7e:3c:93:49:4c:ae:cd:23:61:82:56:a4:0f:f5:
2a:a7:1c:df:90:24:64:8c:2b:dc:2a:aa:6e:67:bf:49:21:67:
ad:44:40:21:51:38:1a:dd:39:77:3f:19:c3:79:bf:6f:39:16:
d8:30:bc:01:c5:68:96:d0:b6:fc:29:54:4b:da:0a:ca:c8:08:
f4:8f:57:12:92:68:af:21:45:eb:f5:7d:cd:40:e7:8b:c7:33:
33:ce:6e:ca:ec:4c:ed:ac:5d:c2:a5:ae:28:ae:9e:5b:fd:fc:
8c:56:71:6b:1a:f8:9f:92:fa:bc:ae:ea:31:f2:bf:af:26:d0:
46:f2:96:24:21:21:e3:3b:4e:50:19:1c:6a:55:1c:1d:70:61:
e2:84:43:d2:a0:41:49:43:fa:5c:27:aa:1b:80:a3:1f:67:87:
d5:65:44:0d:56:23:e7:e6:d2:e0:d2:d8:36:cd:b9:ab:77:b5:
d2:f6:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:19:51 2025 by rpki-client