Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57f978b6-9594-4984-97d4-d8a72cd0641b.roa
File: 57f978b6-9594-4984-97d4-d8a72cd0641b.roa (raw, json)
Hash identifier: UP2rglzt0jRkHAgzRkRFfBFpBfAl/qiDMzkime4TFhg=
Subject key identifier: 55:43:C3:FF:79:45:CE:64:3F:CA:EA:C0:22:17:BF:B4:63:9D:75:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1DC3CEF9D558832443E2420D67A6328ACFC44143
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57f978b6-9594-4984-97d4-d8a72cd0641b.roa
Signing time: Wed 01 May 2024 00:00:00 +0000
ROA not before: Wed 01 May 2024 00:00:00 +0000
ROA not after: Wed 05 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c3:ce:f9:d5:58:83:24:43:e2:42:0d:67:a6:32:8a:cf:c4:41:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 1 00:00:00 2024 GMT
Not After : Jun 5 23:59:59 2024 GMT
Subject: serialNumber=35ef8d55d9f16bbc683eedf9fda531108e771d9f3e78f12154f349e98920a52e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:17:b8:81:90:da:da:07:ea:7c:57:1e:57:
1a:55:55:39:4e:d3:67:8f:ab:6e:b6:b1:00:9e:21:
b0:1c:58:13:b2:99:a2:fb:0a:ea:26:a7:b9:d5:b7:
ea:6e:6c:70:40:17:57:35:db:44:f4:1e:e6:0e:8e:
1d:29:eb:6e:01:70:fb:3b:a9:95:d4:e7:b7:79:d4:
1c:69:f3:93:2f:6c:ff:4a:cf:52:bc:19:db:d0:24:
6d:6a:c4:84:7b:6c:6b:2c:12:2a:7e:26:19:41:33:
61:1c:8c:d4:b1:a7:23:1e:61:c4:d3:a6:a4:ed:a6:
fc:1e:5a:ec:e9:1d:7c:f4:a0:b1:04:e5:77:35:27:
2d:aa:74:7e:a7:f2:12:7b:20:1f:8d:6b:89:8a:b2:
53:d6:2c:d9:e7:70:52:f3:35:9b:7d:b0:dc:b9:31:
36:64:a5:0e:76:4e:53:0d:7d:f5:f9:44:9f:8b:ae:
12:d2:55:ba:8b:3d:a0:7d:0b:2b:cb:26:ae:3c:f6:
42:32:79:a9:e9:d3:d4:6e:c5:db:d8:59:0f:21:b4:
83:05:57:0c:e7:d6:c5:a4:30:8b:07:66:38:38:d1:
99:1e:95:9f:80:6f:c0:01:6b:10:32:55:24:4b:da:
69:26:84:5f:1e:8c:3e:01:f1:b5:06:23:54:77:70:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:C3:FF:79:45:CE:64:3F:CA:EA:C0:22:17:BF:B4:63:9D:75:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/57f978b6-9594-4984-97d4-d8a72cd0641b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:04:a8:8f:7d:1b:8d:7f:55:a1:7e:34:54:de:ad:d3:10:e5:
97:4c:9d:92:03:8a:6a:a1:13:62:b8:a6:54:2c:b3:b6:99:cd:
80:ed:26:f0:96:47:d8:34:ae:a1:24:64:55:d5:7f:15:50:f3:
c1:55:07:c6:cc:12:d9:c5:9a:00:d3:03:51:72:56:89:55:08:
88:9a:f2:95:c8:81:b1:23:de:dd:d7:74:b3:44:51:7c:a7:7d:
98:a0:2d:74:c1:98:da:80:f7:e3:9c:67:91:7f:d4:12:d5:dc:
78:05:46:a9:29:ee:48:fc:aa:0a:73:c2:8e:24:b8:d1:5f:ff:
c1:a7:c9:7e:e4:0c:a0:8a:03:86:76:04:de:30:48:59:ed:fe:
c1:a2:b3:17:76:5c:14:f9:b1:87:b1:bb:4b:f9:20:8e:e3:46:
87:78:82:c4:9c:b6:42:01:fb:23:56:60:a3:a0:0b:57:90:b9:
3b:a7:9f:a7:c7:29:c7:87:9e:6f:43:cd:6b:05:57:28:75:cd:
a2:75:fa:5f:17:e5:21:e6:de:9a:f6:1f:d1:ef:2d:e8:0e:2d:
d8:25:f3:b7:ff:f7:6a:f8:99:5d:a8:b3:0c:0c:38:67:d4:94:
ce:19:a4:ab:9e:ad:cb:de:be:b5:60:02:49:63:68:a2:78:c2:
5e:41:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:10 2025 by rpki-client