Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74ea556d-5364-4db8-8a74-ce3a3b4aa946.roa
File: 74ea556d-5364-4db8-8a74-ce3a3b4aa946.roa (raw, json)
Hash identifier: ziyYXzWHOMJ2989lBENTiwanF9zPQWNTq8X+D1ssgO0=
Subject key identifier: A3:A3:50:B7:B8:B7:E5:A8:EA:7A:A4:97:72:C0:4B:05:35:48:49:A0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 173C03976A6A73B60E0D8C79C995C9F13F1C46C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74ea556d-5364-4db8-8a74-ce3a3b4aa946.roa
Signing time: Wed 05 Jun 2024 00:00:00 +0000
ROA not before: Wed 05 Jun 2024 00:00:00 +0000
ROA not after: Wed 10 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3c:03:97:6a:6a:73:b6:0e:0d:8c:79:c9:95:c9:f1:3f:1c:46:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 5 00:00:00 2024 GMT
Not After : Jul 10 23:59:59 2024 GMT
Subject: serialNumber=c60404081f69c8209d6efad2650916a952d687b4392a75ab8b64faa1e4164f34, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:30:8e:3a:c4:ab:cb:ff:dc:15:b4:dd:43:
a2:c2:27:3c:ad:d5:a8:fc:83:5a:56:e9:53:8d:69:
37:61:23:2d:80:97:39:50:f1:91:f2:f9:62:dd:ae:
bb:5b:cf:fa:ad:2b:27:5f:f8:13:df:a2:94:bf:b3:
59:f6:c2:60:4c:c0:ec:e8:66:88:d0:16:08:aa:0a:
09:85:02:6f:ff:cb:ff:63:10:6e:8a:bd:8b:91:0b:
e5:7f:9e:de:8a:eb:98:e7:2a:f1:56:1e:a1:a5:eb:
d1:61:21:6c:d9:0f:02:19:7d:bc:50:ee:e3:1b:c1:
e1:52:9c:65:2e:12:75:b9:35:1d:92:f5:fa:99:85:
26:18:7f:56:6a:d4:7f:1c:64:fe:4f:d8:3f:af:45:
56:4c:ae:4d:35:52:56:9a:7d:fe:86:9e:ab:b2:bd:
ba:ab:0f:5c:79:24:8f:6e:7c:27:28:31:5a:63:ee:
ae:d1:71:ae:e6:e8:49:f6:cd:af:58:7e:da:f8:09:
61:f5:11:f1:89:1f:1d:c9:9d:a9:7c:4c:ae:9a:84:
ac:45:10:00:b1:10:24:a9:72:05:de:18:f1:fc:6e:
96:6c:91:6f:42:cd:d6:63:79:e0:0a:f2:aa:17:3a:
85:a2:5d:60:dc:fc:0b:91:83:4d:1e:04:71:38:b8:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:50:B7:B8:B7:E5:A8:EA:7A:A4:97:72:C0:4B:05:35:48:49:A0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/74ea556d-5364-4db8-8a74-ce3a3b4aa946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e0:ef:b2:72:38:83:01:38:66:3d:ae:1c:90:cb:55:56:7e:
9a:9c:86:7d:d2:ec:32:83:36:60:b8:42:55:3e:35:6d:31:26:
8c:6f:28:fe:cf:77:6c:bc:4a:8e:7a:f8:25:e3:a4:5e:80:d3:
17:69:e7:b6:6e:a3:17:69:c7:1b:4d:80:f8:5c:7d:44:b5:30:
e4:8a:49:70:44:55:a2:3c:5d:64:f9:e2:97:34:fa:a7:f0:c0:
4e:b9:06:dd:f0:b4:e5:99:db:76:be:9a:d0:f0:e8:15:34:ab:
68:32:8b:c4:06:83:61:ae:a2:9e:7b:7a:77:18:b0:ee:6f:52:
b2:8e:87:8e:27:27:ff:60:e9:05:0b:76:56:ad:f4:1a:c6:3d:
ca:b3:4c:04:69:00:26:11:fe:03:54:61:42:a5:20:cb:51:43:
16:07:5f:9e:dd:f3:ed:71:87:33:95:63:04:fd:22:2b:fd:10:
94:18:ad:07:b7:5c:0b:35:63:5d:32:98:ab:1d:ad:1c:48:8c:
11:1c:2a:3f:16:a0:93:e0:e7:6d:49:96:73:12:1d:68:46:c3:
5c:90:67:fa:81:8a:5c:b3:45:5c:d1:e4:74:97:25:a5:79:c6:
bc:b4:61:30:64:d7:b3:ba:c1:80:36:73:ed:36:4b:f8:73:50:
f8:b8:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:44:56 2025 by rpki-client