Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e7c6e06-2a76-4b3d-8c3c-f568a8a1f457.roa
File: 5e7c6e06-2a76-4b3d-8c3c-f568a8a1f457.roa (raw, json)
Hash identifier: RdtsQoFLQohl1YdVhvm0ub2LEQWtTOgchNEAMO4NMfc=
Subject key identifier: D8:40:8D:29:B7:CE:7F:75:18:11:1E:A3:C8:F7:41:C5:63:2D:44:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6EC6CCE1F4DEF8F9E6AC242BDE1D4928725E24F9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e7c6e06-2a76-4b3d-8c3c-f568a8a1f457.roa
Signing time: Sun 15 Dec 2024 00:00:00 +0000
ROA not before: Sun 15 Dec 2024 00:00:00 +0000
ROA not after: Sun 19 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:cc:e1:f4:de:f8:f9:e6:ac:24:2b:de:1d:49:28:72:5e:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 15 00:00:00 2024 GMT
Not After : Jan 19 23:59:59 2025 GMT
Subject: serialNumber=10213f445c11137ff85b032f611cf192ccd0185a3b4cdf03d0b188777370bc42, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:b3:29:ad:f1:7b:ee:5c:58:f0:16:97:0f:
6e:3f:d0:67:44:a5:2c:7f:f9:5e:fd:2b:a6:77:00:
cd:28:56:fc:82:55:da:85:28:d4:04:76:82:50:a0:
b7:78:67:56:60:03:76:3e:d2:7b:8a:de:dd:b6:c7:
9e:b1:f6:e4:02:41:76:53:d1:80:a9:53:8d:ee:74:
2c:2e:cf:16:b7:b2:2e:9c:ef:bd:f2:c1:5c:80:f4:
6e:67:c3:ab:14:d7:f5:a6:0e:13:85:c3:59:34:1f:
a7:05:08:58:c0:58:95:3f:8a:9e:00:16:71:fc:e5:
87:96:42:32:d9:ef:05:50:eb:76:74:26:af:1c:cf:
e0:0f:5e:21:55:49:94:c8:29:8c:01:f7:ed:63:54:
41:72:a1:6d:3e:f1:20:22:23:fe:95:41:aa:31:c3:
d2:12:db:ef:d3:59:63:83:1f:59:7c:e4:59:62:e4:
bc:bf:51:1b:0c:d9:73:aa:5d:2d:49:e1:01:ab:b8:
95:37:f4:48:8a:3e:5c:3c:b4:f9:d5:46:1e:5d:37:
35:54:3a:2a:30:ce:d5:91:25:8d:33:09:d7:1f:0f:
49:3c:be:19:13:81:0f:d5:e4:1a:00:97:73:a8:6e:
03:95:e3:01:78:4d:7a:c3:71:bc:9a:22:15:a5:1d:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:8D:29:B7:CE:7F:75:18:11:1E:A3:C8:F7:41:C5:63:2D:44:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e7c6e06-2a76-4b3d-8c3c-f568a8a1f457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:93:b3:0f:2f:c7:fe:6d:1a:13:c2:df:48:5a:b8:c4:c0:fe:
6e:ea:72:4f:cd:98:95:c3:67:6e:5a:91:4a:0c:67:69:0a:ac:
56:be:fe:72:81:5f:f4:0e:59:d9:52:95:43:f1:2c:5b:06:d4:
d1:0a:00:6c:e2:20:b5:35:a9:79:d2:bc:77:8f:2d:60:d7:b2:
61:23:ca:96:10:59:ce:a8:14:e9:cb:3b:ea:d8:dc:b2:c3:08:
c7:12:17:c6:f5:f9:cd:3f:3f:0c:13:60:62:3f:a5:2b:86:10:
7d:22:4c:97:72:69:64:fe:3c:14:4c:e9:20:c1:f0:da:d4:c2:
85:ff:92:77:69:c2:1a:dd:a4:69:9c:2a:28:c6:20:46:3b:47:
fc:c0:8b:67:2d:3a:b6:88:8c:9b:b7:13:ba:d6:dd:c5:4c:49:
ef:22:11:1f:89:ae:bc:2c:e3:a9:2a:28:58:77:5c:6e:aa:88:
d4:dc:82:39:4c:3d:b9:c9:05:29:ba:11:6d:ba:27:aa:39:71:
7b:8d:b9:7c:8d:e9:16:16:8f:85:d5:5c:76:e4:48:2a:68:2f:
af:11:67:bc:f5:a1:08:7a:03:af:60:c1:5e:4b:9c:1c:78:78:
e7:df:63:d1:49:ee:05:c0:27:67:8c:a7:3b:d1:8b:48:fd:c5:
6e:8b:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:34:25 2025 by rpki-client