Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/634dda94-20b2-486a-b7d9-f0c505c5f4e0.roa
File: 634dda94-20b2-486a-b7d9-f0c505c5f4e0.roa (raw, json)
Hash identifier: G5d68WFd2e+GSnVfEBYhTpcDKlUdqbGnaoIgswkxaUA=
Subject key identifier: CA:07:0F:76:EA:5D:23:69:50:A9:37:23:50:F8:7C:1A:F9:2D:98:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71F46C947F691BB813856D66F40468BCC282D358
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/634dda94-20b2-486a-b7d9-f0c505c5f4e0.roa
Signing time: Thu 08 Aug 2024 00:00:00 +0000
ROA not before: Thu 08 Aug 2024 00:00:00 +0000
ROA not after: Thu 12 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f4:6c:94:7f:69:1b:b8:13:85:6d:66:f4:04:68:bc:c2:82:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2024 GMT
Not After : Sep 12 23:59:59 2024 GMT
Subject: serialNumber=c2b858d097fed44c7ecbdfa322828597de14a4f2fbd03d8fa0265481bf7264ee, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:1d:fe:c0:ae:2f:4e:c6:0e:94:54:08:dc:
10:94:a9:46:14:cb:75:0a:65:a9:26:26:ac:bb:24:
79:a8:77:bd:d2:e3:e8:bd:a7:cb:bc:60:03:49:76:
26:59:a9:71:e1:f6:e2:a3:dc:be:5f:80:ee:33:8f:
d6:07:2f:24:f0:d7:b3:39:7f:c8:64:2c:6b:bf:f4:
e4:aa:3b:4f:e6:ef:cb:e7:5c:00:49:f4:63:e4:04:
6e:70:32:f1:2c:ee:a1:c7:02:8b:f7:92:c2:e2:ae:
4c:d0:07:42:3d:e8:31:74:51:db:a9:7e:f0:a8:71:
25:3d:e5:b3:1a:be:1d:0e:96:ee:c1:da:5c:f6:f5:
97:2a:82:a9:a6:8e:40:8e:bb:85:5f:b9:df:70:67:
15:6d:96:3e:07:2b:b2:7c:67:70:84:b7:fb:db:1f:
a5:38:43:c0:ce:3f:1c:aa:17:cf:a1:22:49:d1:8e:
92:2e:27:16:de:fe:84:39:27:f4:50:c5:9b:58:d7:
cd:bc:4f:f4:2e:f6:dd:bb:de:39:ba:24:ce:50:53:
40:09:92:5b:df:5f:37:e7:b7:0a:d9:ec:a3:ce:69:
03:25:bd:85:3c:6d:36:f3:87:4d:a4:38:fe:6c:17:
bd:de:22:04:c7:74:73:1a:63:3a:bd:76:dd:a6:6e:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:0F:76:EA:5D:23:69:50:A9:37:23:50:F8:7C:1A:F9:2D:98:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/634dda94-20b2-486a-b7d9-f0c505c5f4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fb:f7:e8:e5:5e:a1:cf:2e:68:41:d0:57:e6:d8:46:cd:28:
64:55:b8:5e:8b:24:a1:8b:c2:0d:14:36:c2:01:93:4b:14:4b:
c7:96:38:3b:f8:4c:19:b8:9a:9a:95:34:f7:96:88:e4:7d:d5:
73:26:55:7f:82:d2:be:3d:cf:a9:39:a5:cf:a2:1b:50:e6:0e:
b0:ed:40:fd:20:34:0b:3e:86:ee:66:cb:3d:e0:33:94:a3:cf:
f9:a4:79:99:70:0a:db:2f:ba:a5:1b:a2:3b:43:89:b5:61:99:
cd:1f:1b:55:21:81:70:b0:30:8c:56:08:88:b0:c3:d4:a1:cc:
5c:b9:8c:22:98:fc:15:aa:56:78:77:cb:e0:2d:84:05:13:6c:
ac:e4:59:95:27:8c:b8:5a:8b:62:56:e1:21:61:99:ce:d1:c3:
e6:d2:9d:8b:1c:8b:c4:8f:b9:03:2e:a2:ec:9b:f8:88:bc:33:
ce:3b:ff:fc:e5:b1:fe:12:80:83:68:3c:7d:2b:35:f8:af:e6:
f5:66:e0:c0:54:79:1a:15:c1:dd:3b:ab:38:4a:f9:28:40:47:
97:61:e8:bd:93:62:1e:0d:94:c7:a1:bf:ee:c9:4c:68:f7:0f:
60:97:20:9c:2d:db:c9:f9:bb:d7:27:f4:65:b9:4d:54:d7:da:
12:ec:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:04:00 2025 by rpki-client