Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c6ac9ed-061e-48fa-a078-014907745416.roa
File: 6c6ac9ed-061e-48fa-a078-014907745416.roa (raw, json)
Hash identifier: kQLFpPYxx2coEwm6d1vQerCDcA5iMi5SjCRhWsO/bF4=
Subject key identifier: F9:13:55:D1:4A:BA:BB:53:78:1F:FC:94:1C:EF:0B:2B:1E:65:A7:51
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0A898FC27D21D3DF7CE4D5DDDEEB5A055FDF2482
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c6ac9ed-061e-48fa-a078-014907745416.roa
Signing time: Thu 28 Dec 2023 00:00:00 +0000
ROA not before: Thu 28 Dec 2023 00:00:00 +0000
ROA not after: Thu 01 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:89:8f:c2:7d:21:d3:df:7c:e4:d5:dd:de:eb:5a:05:5f:df:24:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 28 00:00:00 2023 GMT
Not After : Feb 1 23:59:59 2024 GMT
Subject: serialNumber=279c5a7a946f296c5ca853fb385d3085b496fc5548a5b9d16a8b2bb37e7ba0ac, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:f3:9a:61:14:49:77:12:04:47:4c:c4:de:
a9:9a:cb:b3:f0:fa:d0:49:77:b0:50:8d:27:5c:d7:
5a:1d:3c:8e:9a:c4:85:b5:22:de:0c:ad:d9:b5:ad:
fc:7f:87:a6:8c:2a:2a:5e:8b:5b:1b:65:f2:69:22:
a7:c9:0a:af:70:dd:54:f1:9c:2e:85:41:10:24:08:
b2:80:91:56:66:5e:54:89:f3:24:f7:34:04:75:eb:
42:84:c7:38:f3:a0:b7:aa:3b:e1:ae:c6:f3:a4:7e:
f9:6a:0a:e3:49:7e:c8:fc:a8:6a:8d:97:49:fc:16:
fc:09:73:1b:fd:1d:98:74:c5:b6:9b:c3:0e:b4:98:
a2:b6:c6:d1:32:90:01:1e:46:17:15:72:18:9e:5a:
b3:d2:5b:82:b6:9a:79:9c:02:ca:9f:05:11:3a:41:
37:e0:5d:7e:94:84:f7:f5:c6:15:c3:20:d4:76:0b:
4e:17:25:4c:dc:d2:0a:04:f6:f3:69:71:85:09:b1:
bf:5a:42:b7:c1:bf:01:55:98:ef:11:03:1d:76:5e:
0a:2f:8e:44:d1:0b:bb:79:ab:c3:f1:e9:5b:25:cf:
d6:4b:62:a8:ea:0e:5d:52:b7:8c:01:3f:c3:9d:59:
79:75:30:dd:24:62:10:fd:34:2a:e9:2e:ec:47:3d:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:13:55:D1:4A:BA:BB:53:78:1F:FC:94:1C:EF:0B:2B:1E:65:A7:51
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c6ac9ed-061e-48fa-a078-014907745416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:7b:09:1d:c9:a2:ef:11:78:de:4d:df:2c:db:e5:b8:f9:7c:
39:93:c6:7a:db:92:19:c6:0c:1a:fc:7d:f1:c0:4e:74:0b:98:
cf:ba:ae:59:52:4c:46:94:72:43:20:3e:69:6b:9c:2a:53:48:
a2:82:ad:a0:91:c9:52:7a:3d:43:fa:a9:37:fc:86:43:18:ef:
fa:9b:20:53:b8:5a:ad:84:48:ae:8d:f3:04:6d:2d:8d:31:b2:
51:af:9b:1f:78:1b:a6:94:6a:a2:30:d7:fd:fe:aa:e6:08:56:
93:f9:b5:34:c3:17:a6:5c:f5:6f:e3:4c:cd:62:30:3f:82:cd:
20:ed:7c:57:83:fb:72:16:6f:97:27:63:ee:08:f7:3c:10:77:
92:a7:70:14:4d:d8:2a:72:3a:4d:aa:77:a3:23:9b:cd:f8:82:
84:93:bc:a4:26:59:af:e0:17:76:fd:e3:2a:23:9a:6b:a0:39:
0e:b4:26:66:ea:26:fe:7b:d3:d8:a0:a7:f7:63:04:da:a4:b3:
3d:44:9b:b9:68:8f:a6:28:95:a0:71:43:8e:e8:32:dd:47:13:
17:4f:b3:36:17:da:8c:13:34:1b:29:5a:56:c7:bc:88:9f:df:
d1:05:51:ec:dd:6f:4b:38:e5:24:80:54:44:2a:aa:45:ec:3d:
37:2b:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:11 2025 by rpki-client