Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67e74161-4d72-44f5-879e-37f0fec0d92c.roa
File: 67e74161-4d72-44f5-879e-37f0fec0d92c.roa (raw, json)
Hash identifier: k9bXfkGtysknpRCW2V4C9k748IXUW/XUfrcymwi6gB4=
Subject key identifier: 6A:E3:55:6E:FE:54:DF:9D:CA:7A:29:84:24:18:A3:D0:73:C1:F8:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 29693CFE82E02F2DBCD43C4C6C250F2D0AA98E10
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67e74161-4d72-44f5-879e-37f0fec0d92c.roa
Signing time: Fri 14 Feb 2025 05:08:22 +0000
ROA not before: Fri 14 Feb 2025 05:08:22 +0000
ROA not after: Fri 21 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:69:3c:fe:82:e0:2f:2d:bc:d4:3c:4c:6c:25:0f:2d:0a:a9:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 14 05:08:22 2025 GMT
Not After : Mar 21 23:59:59 2025 GMT
Subject: serialNumber=67d0660ac895032de75eb34ec1769b2c8743a7264c40234e105ffcb609d8da5d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:ae:7c:ac:e4:b5:f4:31:0f:3b:6e:a1:f3:
be:48:4d:f5:4e:10:6a:f8:09:53:89:7e:29:2d:cb:
24:0d:79:36:93:e4:b9:30:d7:c3:8f:d9:9b:3d:cc:
62:40:42:e2:c8:4c:dc:f7:db:c4:c2:b1:a6:d3:cf:
2f:b4:5d:63:43:f5:5a:08:23:2f:10:1c:35:06:86:
65:1b:d6:01:13:50:a6:dd:62:6f:6a:87:11:c7:13:
53:12:57:a9:14:3a:01:7e:97:e2:53:e2:9e:5d:07:
b2:c5:6b:df:7a:55:76:b8:d3:1b:8a:b8:d2:19:8b:
91:c5:29:41:94:1e:73:4a:56:6f:e9:e7:83:cf:dd:
67:b0:a0:cf:3e:58:ca:81:12:ab:d3:48:6b:4d:8c:
47:c0:8f:5b:04:88:63:20:fd:cd:8f:d1:c6:c4:5c:
a4:18:08:dc:00:79:d3:de:b5:6a:16:32:9e:03:72:
38:87:c3:09:e2:e5:a4:76:b3:81:05:06:f3:94:bb:
27:d3:89:d2:cb:1e:f0:17:15:d0:31:f2:e4:b6:15:
d1:6d:af:07:a3:ef:e8:b5:00:43:a5:ed:de:98:78:
94:c4:67:74:4e:36:60:4c:a6:8a:e6:bc:4f:10:fc:
6c:da:93:a2:37:41:a5:b4:06:a1:ed:99:4e:c5:20:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E3:55:6E:FE:54:DF:9D:CA:7A:29:84:24:18:A3:D0:73:C1:F8:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/67e74161-4d72-44f5-879e-37f0fec0d92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6d:bb:e7:04:87:ae:49:40:77:56:51:6d:67:b0:8c:c4:d0:
0c:16:b3:8d:38:0a:32:22:4b:16:72:44:1c:e0:45:98:48:82:
96:3b:6d:1e:b6:bc:21:1f:49:b5:68:f6:4c:d8:f3:94:a6:0f:
82:39:19:69:48:82:b2:b5:8e:a2:29:7f:5b:d2:24:96:f0:af:
44:a7:31:73:34:ae:df:c3:0e:a1:ba:13:c7:2f:a0:e0:8f:0e:
d5:d4:f7:59:e4:30:a2:4a:73:bd:d8:25:75:ab:65:13:89:d9:
4b:fa:87:a5:dc:86:bf:2a:95:ef:56:42:0f:d4:cd:44:f4:e1:
38:79:55:e6:ec:6d:20:24:bc:d6:6b:b3:8c:7c:2b:cc:ea:8a:
8e:05:b5:bb:0b:ea:dd:25:8d:79:bc:a5:cb:fc:25:79:0d:b2:
70:50:c4:4f:ba:c2:3c:73:d1:c5:28:ac:e0:8b:4b:46:61:68:
dd:ea:4f:aa:8d:71:8b:a9:25:c0:4b:fe:4e:19:1c:cf:59:7f:
7d:26:24:d3:cc:51:4e:2b:a2:b4:cb:45:af:e8:6a:06:ea:86:
c6:df:c9:76:f0:5b:2d:cd:3e:4a:2d:58:29:73:05:3c:b5:61:
65:0c:80:54:09:7c:1f:f4:0f:0a:ae:8e:7e:1c:47:b9:ce:7a:
a1:67:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:17 2025 by rpki-client