Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bbcfe5d-6316-4f91-9bb2-93b9bde0db94.roa
File: 6bbcfe5d-6316-4f91-9bb2-93b9bde0db94.roa (raw, json)
Hash identifier: L+CPnOchptLQlOZ+Sm0J6veduLe+QNDGVntLBr13Kcc=
Subject key identifier: A2:EF:7B:01:54:EF:F7:93:4E:F9:7D:78:D7:76:84:24:73:BB:E2:CA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 309A8AD7F6A9F879D560DDD6B684AC887B6BDC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bbcfe5d-6316-4f91-9bb2-93b9bde0db94.roa
Signing time: Wed 16 Aug 2023 00:00:00 +0000
ROA not before: Wed 16 Aug 2023 00:00:00 +0000
ROA not after: Wed 20 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9a:8a:d7:f6:a9:f8:79:d5:60:dd:d6:b6:84:ac:88:7b:6b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 16 00:00:00 2023 GMT
Not After : Sep 20 23:59:59 2023 GMT
Subject: serialNumber=d31180941efb33665f70b985c227d913b2d33910b38b1adf90a80d1fbf2cf38a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:da:84:d5:9c:64:aa:f0:cc:96:8d:c9:1e:
98:77:b6:56:0f:a5:4c:82:38:ed:e4:90:02:25:a1:
e3:ff:2c:f6:4b:2b:a7:4b:40:c2:91:b1:9c:3f:f0:
78:36:95:b6:da:bf:fc:9c:9e:4f:93:d7:aa:1c:0b:
70:9e:da:dd:28:08:7d:d6:d2:99:78:ff:d9:25:6b:
f8:84:ef:29:6b:b8:d0:ac:6d:dc:f9:2b:6b:98:30:
79:37:d1:ae:11:51:5e:f9:75:78:f5:a4:dd:20:fa:
28:1f:bb:d4:ae:b0:08:6b:ee:d7:2b:c8:d1:8a:4f:
2d:ab:cd:5d:8b:66:9b:43:1b:3a:d9:56:3b:ef:54:
7a:f9:5e:54:2a:32:e2:f3:27:86:3a:48:57:e1:0d:
73:da:1a:7f:c8:70:0a:e7:59:28:92:3d:ed:a3:3f:
fb:b4:20:f8:44:29:d5:3a:28:5d:40:ef:c0:9f:de:
e4:f8:86:cd:d2:b9:9e:40:28:9a:ea:70:2f:ce:33:
d4:bd:a9:60:15:af:39:08:69:1b:24:f5:88:9f:df:
22:6f:82:bd:9d:9c:1f:c3:df:65:a4:3e:86:78:36:
a4:13:00:e9:5b:63:34:00:07:17:8e:dc:8b:69:f3:
a2:59:a2:1d:ef:b4:91:55:9a:00:86:b4:8a:1a:d2:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EF:7B:01:54:EF:F7:93:4E:F9:7D:78:D7:76:84:24:73:BB:E2:CA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6bbcfe5d-6316-4f91-9bb2-93b9bde0db94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b7:3b:c4:f6:14:4c:03:29:7c:f1:06:05:ef:48:dd:11:60:
c2:80:7b:31:05:6e:f2:36:8e:62:55:b5:6c:3b:c2:0a:ff:f2:
29:b1:2d:8d:62:cf:2c:c3:b0:84:e9:35:8c:57:74:ad:56:d6:
80:ef:93:35:63:61:da:71:41:41:77:ac:8b:ee:52:53:72:36:
08:61:63:4c:a3:b3:cc:4f:4b:16:fa:d9:c5:7e:2e:47:cb:10:
c4:c5:f7:57:5a:ad:a2:de:47:d1:91:7c:46:f3:6e:27:c4:eb:
5c:cb:bc:50:a0:06:a3:1b:e0:c4:62:68:de:1e:d1:e4:7b:41:
6d:42:07:41:5e:05:10:c7:6c:7d:de:1a:27:3b:1f:59:4b:c8:
45:ed:9f:d7:0e:a3:15:94:d0:80:6e:30:d6:46:70:7f:62:b2:
62:b8:e0:b9:4c:36:ae:eb:ee:82:8a:03:7f:04:8c:0b:eb:00:
11:e3:df:14:6d:22:42:80:ef:e0:9b:59:56:f9:8a:cb:a6:b3:
dc:ea:44:92:6e:19:30:ba:7f:02:a3:2f:03:01:bd:80:31:1f:
1d:0a:40:0d:2c:08:db:06:67:87:63:44:71:9e:05:f7:fb:a4:
b0:8c:b2:66:bc:ef:13:4e:c2:3f:da:a0:e0:4a:cc:f1:d6:da:
b7:b7:72:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:39 2025 by rpki-client