Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e855bce-f60f-4279-8fc8-bd5e27ff118e.roa
File: 5e855bce-f60f-4279-8fc8-bd5e27ff118e.roa (raw, json)
Hash identifier: TfeHni/bWuF5K/fSGTOMwqEH41B0y0nv+aVUrVvZs6U=
Subject key identifier: 95:85:2D:F8:F6:77:62:BD:FE:30:D8:B7:59:FD:D8:DB:AA:07:41:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0776C365D67BEFEB0EA49898DD79644C7849BE40
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e855bce-f60f-4279-8fc8-bd5e27ff118e.roa
Signing time: Mon 25 Dec 2023 00:00:00 +0000
ROA not before: Mon 25 Dec 2023 00:00:00 +0000
ROA not after: Mon 29 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:c3:65:d6:7b:ef:eb:0e:a4:98:98:dd:79:64:4c:78:49:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 25 00:00:00 2023 GMT
Not After : Jan 29 23:59:59 2024 GMT
Subject: serialNumber=c7ccb7ebf680daf0b067ce5ded774a024e175e6303ba38fe22a04a0246f4ef6c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:bc:ec:9e:80:e5:70:10:4c:43:19:1d:19:
e8:89:80:2a:a3:3b:22:93:8c:8b:77:15:c5:21:2f:
44:8a:6f:4c:49:f0:99:d7:38:9f:a8:6f:55:06:dc:
3a:c8:8e:7f:8b:4a:f2:f7:f7:92:90:f8:1c:f9:83:
93:e0:58:d9:3b:3b:3c:9d:ff:4a:c0:78:85:b8:4d:
6a:5d:27:22:d1:32:47:d2:50:72:c6:02:6b:24:1f:
ce:9c:08:7c:55:b7:4a:db:94:a6:3e:1f:32:24:4e:
1a:13:c5:5e:5f:47:9c:36:9b:2d:8e:58:62:92:48:
1d:d1:0f:54:6f:42:21:89:0d:6f:1d:c0:b1:46:42:
f6:9b:90:b6:83:32:ab:44:de:f1:f5:d9:b4:55:12:
93:5c:e1:15:2a:c7:5b:50:ed:f4:7b:5c:7a:67:52:
0f:2a:aa:ab:d9:47:a8:17:59:ec:e6:1e:8e:c5:ef:
8a:b6:fa:ff:29:93:b5:bc:ed:03:fc:c3:cd:20:c2:
25:84:e2:d5:47:e8:9f:58:15:a0:6b:94:18:b6:5b:
d5:18:05:59:87:2c:02:23:1d:23:f4:7a:c3:b4:e6:
0f:49:58:ad:3f:cb:86:20:6f:69:eb:61:af:dc:95:
2d:4b:b5:aa:e3:2d:88:9d:e3:a3:ba:d2:64:88:e3:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:2D:F8:F6:77:62:BD:FE:30:D8:B7:59:FD:D8:DB:AA:07:41:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e855bce-f60f-4279-8fc8-bd5e27ff118e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f8:bc:f5:83:a9:59:ae:6f:18:ba:a1:50:35:98:d2:99:f2:
f8:4c:2d:22:c3:d7:ce:61:50:95:4b:45:85:f0:ac:42:f6:87:
6f:94:4c:1f:77:60:a7:02:33:3a:80:ca:81:79:9e:34:33:52:
0b:3b:69:08:ad:7f:66:5a:f9:ca:01:e1:3b:8e:02:3f:05:80:
82:06:85:b2:2a:be:03:71:c9:e7:56:e7:81:76:42:78:7d:bf:
64:7c:0d:dd:ec:35:ec:d3:6e:15:d5:5f:2b:81:15:22:5e:17:
87:34:dc:ae:82:0f:30:f0:54:ae:3d:dc:9e:87:65:ce:9f:b9:
68:0a:1b:ec:0b:9c:f1:61:28:d5:10:8b:19:da:fd:07:66:ca:
32:7f:44:8f:29:33:11:f4:ae:fe:03:f3:7b:64:99:6d:0f:fe:
a0:f2:6c:f6:22:b9:18:97:c6:5e:7e:e3:e7:54:a9:df:16:ca:
46:cb:41:a6:0a:bd:86:16:54:80:24:24:21:db:ba:db:14:2d:
77:88:77:27:60:a9:cf:5b:f1:7a:5e:2b:5d:72:63:9f:d9:35:
3a:e1:cc:c6:6d:55:2f:5a:4e:3b:94:1a:1c:6f:eb:9a:84:d2:
b2:a4:6b:80:f1:03:bc:e4:6a:93:5e:81:d7:93:20:b3:18:1e:
af:69:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:53 2025 by rpki-client