Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6745923c-529b-4b4c-84c5-5cc149fb4694.roa
File: 6745923c-529b-4b4c-84c5-5cc149fb4694.roa (raw, json)
Hash identifier: Vx4oronIf+4YIVPhgBLruvqCHbkZ9ukpTldq7vFBduI=
Subject key identifier: 7B:11:9B:32:83:70:C2:48:82:79:E4:B4:16:FC:2F:7C:0E:FE:FE:A5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2CF5725E0580389B0E2C8ABABA014A6F0CC8103C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6745923c-529b-4b4c-84c5-5cc149fb4694.roa
Signing time: Fri 28 Jul 2023 00:00:00 +0000
ROA not before: Fri 28 Jul 2023 00:00:00 +0000
ROA not after: Fri 01 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f5:72:5e:05:80:38:9b:0e:2c:8a:ba:ba:01:4a:6f:0c:c8:10:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2023 GMT
Not After : Sep 1 23:59:59 2023 GMT
Subject: serialNumber=080332f6cb4956e831f1be930bba27f6a435a9402e989aee8d5a0ddd5d18c226, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:33:7c:3c:f2:69:97:60:d6:96:f3:24:73:
9a:75:1d:98:2c:4c:16:21:87:24:78:9e:e3:e7:8d:
45:e9:c9:5c:f7:a3:c2:ba:be:a7:71:8b:bd:fa:06:
dd:07:6d:15:8f:c7:df:d3:56:42:c4:d7:5f:5d:a5:
d9:9b:bb:32:2e:8c:88:bd:01:32:1b:b9:08:b7:e2:
ca:55:76:f1:89:bd:c3:af:4c:58:2f:b5:7a:a9:c6:
ed:9b:f0:9e:c9:82:8b:b6:0c:8d:b9:9f:e1:ff:e8:
08:0a:94:fe:93:37:47:92:23:2f:81:bf:09:ee:0a:
32:31:15:c7:00:b6:88:75:e8:be:5f:0e:b3:04:c3:
fb:0e:6b:f5:1a:ea:d3:1b:96:dd:d4:90:20:70:0b:
11:06:8c:ba:16:f6:54:ff:bc:7a:59:95:ff:88:1e:
88:04:da:90:73:0c:3e:10:76:e2:c8:87:b2:d9:87:
5c:21:28:bd:73:04:10:af:62:db:51:c4:d6:bd:34:
07:cc:59:a8:f6:e5:36:47:18:1a:55:97:05:a5:c2:
dc:2c:f9:29:f5:ef:c5:c4:3c:ce:d7:f7:ef:f9:5a:
56:91:41:db:20:66:c2:dc:60:bb:95:14:12:e0:a2:
96:db:48:11:54:ac:ef:c0:77:15:51:b3:e8:59:1d:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:9B:32:83:70:C2:48:82:79:E4:B4:16:FC:2F:7C:0E:FE:FE:A5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6745923c-529b-4b4c-84c5-5cc149fb4694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
77:47:97:cf:5f:29:b8:85:45:99:40:78:fe:f9:cd:c4:c8:16:
8c:85:0b:0a:43:a3:f8:09:af:f9:ee:3e:a7:c5:5c:3e:64:0f:
79:f8:8a:23:97:bc:2a:4c:45:fe:b0:a2:ca:4a:ff:8a:82:23:
9f:15:d9:68:ba:c5:69:d2:26:9b:66:62:5c:ce:f7:de:d4:a6:
f2:2b:c8:e3:fb:c5:86:60:22:63:3e:8b:af:37:13:25:3a:31:
37:ad:20:bb:b7:b4:5b:c8:b6:06:aa:92:ff:d5:b1:d2:d6:0b:
96:1d:79:25:c4:36:a5:8a:7d:90:e1:c1:5a:16:b3:80:b6:1f:
2d:d8:32:07:a7:06:6b:97:9d:7c:e1:17:bc:71:c6:5d:22:25:
a6:fd:e5:e6:88:cb:dc:fb:9a:0d:a7:a1:ba:b1:91:9f:f2:1c:
a9:c1:0a:21:20:41:83:93:d9:b6:64:d0:ee:ef:20:13:65:22:
a2:8c:85:1f:29:39:bf:7e:5c:81:6a:a7:a4:96:78:7a:75:da:
25:5c:8e:77:ad:ca:c7:4e:63:f5:89:78:99:c5:1d:40:34:58:
a9:80:85:21:2a:85:ce:6d:47:41:b2:f6:8c:35:7f:38:d6:bb:
7d:b5:b4:7e:c5:44:9a:fb:ba:26:e7:be:77:27:38:9a:1f:df:
dd:bc:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:57 2025 by rpki-client