Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77b9c8ce-3c66-487f-8869-da0cc3067524.roa
File: 77b9c8ce-3c66-487f-8869-da0cc3067524.roa (raw, json)
Hash identifier: hFJdIX3dRBhha8Re1VKzeUWhcMEpBdejeVpojFKQ4i8=
Subject key identifier: 8D:86:57:4F:8B:C7:05:96:B2:05:3D:2F:01:5F:43:EE:5C:78:5A:26
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3BFC12D8399035AC1D2D5FD1346FA02C3504298E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77b9c8ce-3c66-487f-8869-da0cc3067524.roa
Signing time: Mon 29 Jan 2024 00:00:00 +0000
ROA not before: Mon 29 Jan 2024 00:00:00 +0000
ROA not after: Mon 04 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fc:12:d8:39:90:35:ac:1d:2d:5f:d1:34:6f:a0:2c:35:04:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 29 00:00:00 2024 GMT
Not After : Mar 4 23:59:59 2024 GMT
Subject: serialNumber=9ee39585020ae84206743efeb6aed3ed2def5c4aef086d63b3e9b6296e079cf0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:20:ec:08:2a:a0:8d:39:82:1b:a7:71:21:
38:9a:71:97:dc:e1:19:bb:50:15:5a:26:ef:c9:64:
3a:16:be:65:9c:b8:ab:2d:a6:1d:f8:65:9b:18:2f:
04:ee:5f:1c:57:7e:51:84:c9:ae:61:56:11:ae:df:
ce:27:d3:1c:0b:f4:32:f4:5f:7c:64:42:bd:a6:2f:
49:69:96:dd:47:d5:71:29:ef:91:1e:0c:aa:b8:9a:
3f:4c:72:4a:5e:a5:bb:3e:95:1b:6a:33:25:c2:ea:
d6:e2:9c:89:2c:8d:97:84:e5:69:e6:bb:e9:35:3b:
02:09:01:e4:ef:df:a9:f1:db:87:e6:03:5b:a2:ac:
bb:f6:df:2f:e3:db:fa:97:70:65:17:17:da:8c:39:
86:c0:77:0c:ae:06:d9:dc:c3:aa:87:65:3f:96:8a:
52:94:7f:fc:b5:f1:8a:6f:c6:6b:65:c1:ba:73:22:
d4:99:47:b6:d0:40:a9:be:b8:5d:5d:41:e6:86:53:
68:3e:9a:c0:b5:26:89:0d:bc:54:72:9f:eb:77:47:
6f:ae:a9:48:d5:e5:ab:21:70:e8:2e:1e:b6:44:6a:
9e:96:88:b2:b9:48:96:35:cb:85:b9:93:f6:0d:08:
5d:8f:fb:eb:c4:3f:d1:dc:e8:2c:f1:37:c1:cb:70:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:57:4F:8B:C7:05:96:B2:05:3D:2F:01:5F:43:EE:5C:78:5A:26
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77b9c8ce-3c66-487f-8869-da0cc3067524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4b:ba:6c:ac:ee:a9:72:78:ef:d4:e7:8d:29:dd:56:6b:ed:
06:1f:3e:c9:f3:8a:85:9c:19:c8:75:3f:48:fc:d4:3e:3f:83:
9f:50:bc:1a:91:7d:d1:f5:e1:af:cc:27:0d:20:c5:44:85:0d:
93:a6:0d:6e:52:f5:16:b5:bf:42:0d:55:e8:c9:fe:ef:f6:e9:
d5:61:0e:6f:76:38:d7:a1:fd:58:92:4e:2e:42:4f:21:a8:06:
64:84:bd:d7:2f:dd:18:14:17:0f:87:69:7d:04:4a:20:cd:34:
1a:45:e6:be:f9:cb:2c:e1:df:a9:05:ec:63:4a:56:5b:c3:bb:
7f:9c:02:7b:20:6a:cf:28:73:d1:2e:ff:14:8c:10:f4:44:f1:
40:b5:26:13:32:a0:3f:98:ae:02:03:5a:c9:75:16:e6:94:3e:
45:9d:a5:fb:7b:7f:c4:6d:a1:6b:56:db:e3:bd:43:f8:5f:ed:
a7:3e:aa:f9:1f:a2:46:fd:97:e7:9c:08:b8:e3:b1:d3:e8:a9:
23:d0:9d:bf:68:2a:11:5a:29:01:8b:5a:8f:42:c9:fe:39:28:
bd:25:d0:ad:be:ef:b4:bf:cb:31:33:07:25:33:9d:5e:ce:3b:
a6:47:f7:76:22:9e:26:df:b2:cb:ea:02:c7:e1:1a:5d:26:6b:
43:9d:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:43 2025 by rpki-client