Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68c9429a-7caa-4d7d-9372-e4750d1e5a2c.roa
File: 68c9429a-7caa-4d7d-9372-e4750d1e5a2c.roa (raw, json)
Hash identifier: basw3Ve2PnmAGtJuJuwWhnfSUWvGiz9vDdIkeyy0EFk=
Subject key identifier: 4A:DD:8D:AF:8B:26:E4:22:C1:D1:31:F0:C2:5B:02:31:01:8A:45:B7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B821C991F9DF9D4825FB3FF71A8F54BF5CFB197
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68c9429a-7caa-4d7d-9372-e4750d1e5a2c.roa
Signing time: Fri 27 Sep 2024 00:00:00 +0000
ROA not before: Fri 27 Sep 2024 00:00:00 +0000
ROA not after: Fri 01 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:82:1c:99:1f:9d:f9:d4:82:5f:b3:ff:71:a8:f5:4b:f5:cf:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 27 00:00:00 2024 GMT
Not After : Nov 1 23:59:59 2024 GMT
Subject: serialNumber=a3e2a46f11892a68e5b615933af452772cca9b96e2e4def19bb9e6652fd7d6d8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:31:b5:15:d5:a8:ed:e5:40:58:5f:0c:0d:
5e:59:34:bd:7e:ef:b7:aa:c0:a8:a7:39:76:0d:24:
78:cf:42:fa:a2:51:f9:18:e7:ca:e1:fd:93:8f:a0:
18:1f:5b:35:9f:4e:38:1b:0f:2d:33:28:9d:39:1f:
71:aa:3f:e4:ca:62:14:58:da:b3:81:8b:cb:d2:99:
fd:f7:74:ca:ab:59:da:87:e7:f2:2c:f6:7d:fd:f5:
4a:6d:25:27:1c:57:84:92:78:be:5f:39:71:50:17:
6a:41:8d:85:86:fc:7b:5d:7f:44:76:be:05:1a:94:
fe:9c:14:6a:41:d1:cc:b3:40:b3:70:19:46:a9:d1:
ff:f4:d5:bd:68:d2:56:2a:72:64:af:69:53:d1:36:
40:73:a3:f2:9b:86:44:d2:4b:f9:ac:08:3e:7e:0f:
5b:86:21:6e:de:ba:63:06:29:a5:53:ce:04:bb:d2:
8c:e9:a6:31:98:80:45:c7:e0:8c:17:37:c2:0e:79:
75:4e:56:2b:39:36:7b:c0:13:ff:fd:cd:31:8f:32:
62:bf:5e:82:24:40:af:81:62:3e:5a:39:d1:7b:a8:
84:2e:16:a0:ea:f9:d2:f2:af:09:04:53:2f:f4:5d:
29:f3:2e:a0:39:ed:bb:39:70:f8:62:42:20:b5:9b:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:8D:AF:8B:26:E4:22:C1:D1:31:F0:C2:5B:02:31:01:8A:45:B7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/68c9429a-7caa-4d7d-9372-e4750d1e5a2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5f:f3:06:81:44:fe:dc:aa:55:55:2e:78:e8:dd:61:b2:3b:
0e:42:01:0d:d1:fe:6d:e9:e3:d0:e5:9d:4d:05:71:72:de:13:
83:53:b6:3a:98:ed:c9:aa:19:c1:5b:ac:b3:4b:f6:23:7d:5d:
f8:e3:ec:2f:8a:81:0d:10:68:2f:57:3e:16:d2:89:75:60:a9:
3f:55:33:8a:1e:61:1d:a3:f6:be:68:93:0b:3e:1f:14:46:98:
0c:20:c8:f9:73:fc:59:22:81:5a:49:86:33:77:e5:05:a9:16:
1e:ad:0c:eb:01:e9:93:be:23:6b:f0:ad:84:07:f4:28:9f:32:
04:e3:ef:b5:12:ef:9f:e4:59:75:b0:8c:0a:8e:1e:8c:a0:e5:
78:b4:33:07:09:31:2e:50:35:d0:1d:85:98:fc:ab:1e:cf:10:
2e:38:8d:b8:e6:08:5d:85:94:82:d2:45:83:89:c0:f9:51:52:
fc:39:09:40:b9:5e:77:d2:fb:d9:32:b6:b8:c5:83:9e:0f:2b:
b2:3e:79:11:69:ed:5d:b9:58:83:7b:8b:31:aa:01:3a:9c:66:
87:34:00:f1:e4:6c:cd:43:19:8a:fe:5a:2d:d8:1a:7e:9a:1b:
fb:8a:60:fc:4c:99:24:85:70:af:8f:9c:93:9f:48:c7:83:62:
d7:c1:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:22 2025 by rpki-client