Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6512da8b-d9a9-4c9d-bb39-6c74967aff9a.roa
File: 6512da8b-d9a9-4c9d-bb39-6c74967aff9a.roa (raw, json)
Hash identifier: +gUEU9AogO2lmLCzAAC9xHe2Hhv33BbuLMmKdxvcris=
Subject key identifier: 95:0F:A9:8A:0E:A1:7C:06:B2:AB:27:06:56:8B:42:36:82:34:29:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D63C1E69D8263ADFE761D9FB9A38263578374F0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6512da8b-d9a9-4c9d-bb39-6c74967aff9a.roa
Signing time: Sat 03 Feb 2024 00:00:00 +0000
ROA not before: Sat 03 Feb 2024 00:00:00 +0000
ROA not after: Sat 09 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:63:c1:e6:9d:82:63:ad:fe:76:1d:9f:b9:a3:82:63:57:83:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2024 GMT
Not After : Mar 9 23:59:59 2024 GMT
Subject: serialNumber=3e517ea0a64f03e5eca56bea5eaaed7305d23c71527d8d61d9d238871e73b361, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:f6:c1:f8:f3:9e:bd:2a:e1:9c:e6:16:83:
64:8d:a0:e6:ba:41:a9:f9:72:68:99:5c:c9:b7:d3:
9c:84:1c:4a:1a:40:a9:af:62:86:9f:99:68:7c:70:
fc:48:fe:5f:78:1b:ea:93:b8:71:86:5b:44:d5:56:
c3:a4:88:29:a1:a6:74:75:02:1d:95:b3:e3:8f:5d:
e9:7c:85:49:d4:3c:0c:ea:e1:18:8d:49:0e:a5:e8:
68:a1:fb:e0:96:7d:a0:df:f9:e8:2f:26:2b:d1:9e:
73:f0:72:05:db:e2:5f:43:ea:4b:2d:60:03:60:96:
6d:a3:16:57:e0:8f:71:e5:6a:f1:bc:73:73:91:91:
7d:7f:fb:c6:e9:65:6d:93:a4:2c:00:c8:df:65:fb:
6c:3e:b0:d3:41:ba:70:3d:3a:e6:9d:79:03:a3:48:
b7:98:39:3c:7c:4b:22:fb:16:10:96:ac:a6:a5:4c:
4e:4c:5d:9c:11:e5:1c:eb:eb:f9:a8:92:03:0d:bd:
f5:09:15:3d:1b:cb:87:fd:8e:e0:c7:c9:69:55:26:
b0:8d:08:cf:9a:88:a6:f7:1b:19:3d:d9:c9:e7:b6:
b9:36:7a:dc:97:5f:79:b7:fe:70:54:09:1e:7b:ec:
c4:62:10:2d:a0:1a:b5:29:c1:4e:6e:86:43:50:35:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:A9:8A:0E:A1:7C:06:B2:AB:27:06:56:8B:42:36:82:34:29:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6512da8b-d9a9-4c9d-bb39-6c74967aff9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ce:4b:e8:b1:eb:da:67:d0:b6:a0:49:fa:36:7f:71:d8:8a:
46:fd:cf:f6:06:4c:9d:2a:c3:f3:e7:e4:2c:46:a2:89:6b:c1:
12:78:60:f3:a5:6c:db:81:39:3c:36:2a:0d:a9:24:56:a6:c1:
ab:bc:f7:d0:f8:fd:8f:f4:b0:ed:36:d9:c0:4c:55:4d:a8:28:
88:07:1e:d8:b4:b8:62:93:c0:ef:7d:6b:98:98:b4:91:79:a5:
5a:b5:e1:70:1a:33:69:6e:58:08:67:28:7b:3d:85:e6:14:1d:
86:bd:b0:3a:ea:5f:44:df:90:bf:0b:75:ce:d3:08:09:68:9f:
33:fb:41:3d:c7:7a:47:4d:89:06:ef:ad:f2:cb:b9:da:44:f5:
16:e6:c2:43:0b:6e:7e:f9:55:20:5c:71:46:c6:6c:87:41:87:
98:02:e2:49:aa:b9:af:63:a0:f6:17:95:2a:df:64:98:40:8f:
53:57:a4:3f:e2:b9:56:3e:a1:1c:28:d0:e7:62:9e:15:f4:92:
3b:d9:32:8b:78:fd:c5:0f:f4:7e:2e:2f:48:69:09:8c:49:76:
f8:c3:ed:61:3d:13:e8:6c:87:18:91:49:0b:25:ed:f8:5f:7c:
21:14:25:3c:b4:ec:4a:38:85:ca:ff:7d:bf:05:84:f1:e1:b0:
6f:7a:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:23 2025 by rpki-client