Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cdb8787-6e95-4972-ab33-8ecba731ee38.roa
File: 6cdb8787-6e95-4972-ab33-8ecba731ee38.roa (raw, json)
Hash identifier: 4C1ktkVCI5eZQKS9vrlgmpX+B6iscCnmdBpzLp2onPM=
Subject key identifier: 9B:39:28:24:B3:FB:31:68:B5:1B:8C:B8:1A:28:8F:3A:7B:50:06:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 250FBC532891EF4435294B755CCBD66D01795770
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cdb8787-6e95-4972-ab33-8ecba731ee38.roa
Signing time: Thu 17 Aug 2023 00:00:00 +0000
ROA not before: Thu 17 Aug 2023 00:00:00 +0000
ROA not after: Thu 21 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0f:bc:53:28:91:ef:44:35:29:4b:75:5c:cb:d6:6d:01:79:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 17 00:00:00 2023 GMT
Not After : Sep 21 23:59:59 2023 GMT
Subject: serialNumber=ec0f36ed57683679f0a0d9350016c14ccdc8bcbeea13e85be51ae5dd9ec9e0df, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:c5:31:88:00:f2:a5:a2:4f:7c:6f:65:14:
f0:17:ac:b3:22:5c:7c:5c:52:07:b2:64:30:52:48:
8e:18:47:d7:cb:c6:f2:96:ec:a8:ea:20:35:ab:1b:
3c:21:16:85:94:b8:d3:2e:b5:64:7d:ff:0b:1f:bb:
dd:86:20:a0:92:0f:f7:95:08:d9:d2:88:f7:3f:bb:
c6:82:23:eb:2c:45:22:e2:c2:e7:db:9d:00:5b:45:
fd:79:26:35:4f:59:94:33:4c:b8:a5:ad:c0:c9:bf:
b1:d3:4c:75:98:63:d3:a0:c0:ad:6c:06:c1:dc:00:
5c:52:e9:73:a2:14:6c:5e:f8:20:11:d9:0a:71:96:
57:10:f9:ee:42:a8:58:cc:d9:ba:70:18:d8:f2:1f:
8f:e5:96:30:5b:06:84:c6:d2:f2:5d:1b:44:a6:c5:
69:f8:5c:50:d9:3b:91:26:7c:9e:16:47:72:36:20:
ec:49:b4:b2:c0:cb:d3:83:30:40:97:c4:c4:f1:46:
e9:34:3a:e2:9b:01:c7:1e:a3:9d:dc:c3:04:57:cd:
12:81:8a:01:11:00:fd:ae:9f:35:13:76:bf:5d:a8:
8c:f0:39:29:d5:38:12:ec:ca:ff:80:42:7a:84:a3:
06:24:d5:4d:e1:fd:d5:87:d8:76:7d:ad:57:9d:b6:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:28:24:B3:FB:31:68:B5:1B:8C:B8:1A:28:8F:3A:7B:50:06:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6cdb8787-6e95-4972-ab33-8ecba731ee38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f1:9b:5a:72:a6:ba:8c:72:cd:ba:c5:50:ca:9f:ca:0e:75:
80:aa:47:ff:19:6d:4f:2f:07:38:e9:80:96:6e:df:e4:15:85:
e1:e5:34:68:61:93:30:1c:42:a2:5e:83:e0:d3:da:f8:b5:6e:
98:8a:81:14:58:c6:83:6d:90:fb:0b:db:80:67:27:f5:46:18:
89:70:f4:32:3c:00:08:6d:71:65:8e:9f:8a:53:88:56:8b:df:
4a:ee:90:81:2c:3e:b5:e8:e3:da:c1:df:67:c5:f4:d3:66:36:
0b:b4:98:8e:a4:26:00:a4:07:ce:24:37:49:c9:02:df:be:b4:
1c:cd:0b:16:52:56:93:e9:64:7c:91:85:28:50:b2:e1:53:9f:
23:d9:9d:24:a8:43:a0:81:a9:83:00:17:4b:a9:bf:8f:cf:76:
05:05:a4:0a:69:b3:b5:db:10:37:c5:8f:56:09:7b:ec:2c:19:
15:81:81:c0:e5:bd:49:35:c7:be:7a:7f:86:21:6d:50:56:1f:
4a:f5:44:4b:3d:92:f9:c1:a1:a0:f8:e5:90:17:31:2e:15:db:
4f:d1:22:1e:01:4a:c3:29:01:93:58:9e:f9:90:32:e4:6f:0b:
7f:ca:98:bb:c6:08:2c:e4:6d:38:b9:2a:87:3b:71:37:7a:5b:
af:ba:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:59 2025 by rpki-client