Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60432f61-fc33-464a-9272-0ac5db54603e.roa
File: 60432f61-fc33-464a-9272-0ac5db54603e.roa (raw, json)
Hash identifier: pjEVejrkMl5GQGt9+MlKUPhSJQzXm5eKHcrcMeKgbJI=
Subject key identifier: 6E:5A:45:12:E6:EE:D0:E6:F9:A6:78:45:D3:FA:35:73:97:57:8F:71
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 251ADF0208EDC928D77410D081218A8C8A1D90A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60432f61-fc33-464a-9272-0ac5db54603e.roa
Signing time: Sun 29 Oct 2023 00:00:00 +0000
ROA not before: Sun 29 Oct 2023 00:00:00 +0000
ROA not after: Sun 03 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1a:df:02:08:ed:c9:28:d7:74:10:d0:81:21:8a:8c:8a:1d:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 29 00:00:00 2023 GMT
Not After : Dec 3 23:59:59 2023 GMT
Subject: serialNumber=75fc59cb6f5ff09d6aaf869d186e07b2594ecf9ba19833642d512c97b4676a08, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:16:e4:d0:10:0c:35:ea:cd:c2:e1:a5:5b:
72:2e:d8:a6:50:05:e4:bd:3a:c0:98:6c:1f:3e:03:
a8:11:5f:96:5e:46:d7:ad:d9:ac:68:30:08:12:a3:
8b:16:c3:f5:5d:ee:f1:bf:9c:b0:1c:f4:b2:95:0e:
c5:38:ee:62:70:a0:27:25:a8:e2:9f:ec:5c:de:db:
43:14:a7:83:bd:f0:98:0f:b5:54:9c:21:71:b9:f9:
f8:0f:db:b3:f0:05:f8:0e:ed:ee:9f:84:8e:ba:ea:
ee:bf:f4:06:ed:5e:cb:57:fe:1b:3a:13:11:fd:7c:
c3:b1:7a:83:f9:7e:97:6d:26:99:33:89:b2:97:7f:
09:a1:74:a4:e5:f6:7f:5a:eb:3e:63:da:84:e6:0c:
91:ae:4f:84:08:89:af:7a:d8:da:a4:a0:6a:95:fe:
a9:59:b9:f2:6b:41:7a:58:35:43:e1:56:49:7c:e9:
67:41:e1:d4:4f:60:db:93:98:3e:01:b5:4a:31:d4:
19:0b:9b:aa:1c:42:e8:39:bc:4b:49:b6:98:2d:a7:
d0:20:c8:e1:38:b1:d7:6a:33:d7:75:2a:4a:42:56:
da:9b:32:f3:cd:85:7d:b8:0c:30:de:44:b4:38:a9:
fd:4b:6e:62:42:38:15:33:b1:ba:04:e2:a6:8a:ec:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:45:12:E6:EE:D0:E6:F9:A6:78:45:D3:FA:35:73:97:57:8F:71
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/60432f61-fc33-464a-9272-0ac5db54603e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5f:18:ce:dc:6a:ec:82:bb:d3:2c:c6:51:a3:de:5b:d1:80:
e5:fe:e5:fb:72:07:2d:86:8f:a1:21:d6:1c:cc:e7:ca:4c:b5:
09:dc:98:d7:93:11:af:39:7a:39:6b:f4:af:ca:8f:76:a8:43:
a5:1d:c4:44:32:c7:82:77:87:3a:ad:74:f1:81:5f:4f:c3:ff:
ec:ef:f4:9c:94:83:8e:47:67:bf:36:f1:86:50:90:e6:7a:6a:
17:a4:77:8e:b2:10:21:f4:7d:a0:8a:4a:06:58:a5:8f:23:fe:
ac:bf:76:dd:3d:8c:47:07:c8:24:9b:bf:88:ec:45:7b:5b:7a:
bb:d4:55:32:80:ac:f2:6a:9f:b0:b8:80:49:0f:ba:ef:9e:c9:
87:49:52:a3:b0:52:4d:83:3d:c0:62:91:73:8a:3c:53:61:27:
67:3c:20:e1:17:1e:95:5b:d4:66:94:d1:4d:15:63:13:19:32:
0b:12:5b:e4:72:a3:83:87:d6:9c:b4:7d:25:44:8f:88:c7:f4:
4d:c8:31:cf:60:d7:91:24:83:ac:7b:25:32:5e:31:5e:d7:61:
eb:d9:4f:ae:fb:60:09:c7:c1:4f:65:5d:c6:4f:3c:dd:18:6c:
6f:4b:60:69:1b:37:4f:9f:5b:0b:fa:3d:b0:92:cc:bb:5c:d2:
4f:52:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:36 2025 by rpki-client