Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77e01627-e1b0-4926-8307-bce485b14cbb.roa
File: 77e01627-e1b0-4926-8307-bce485b14cbb.roa (raw, json)
Hash identifier: HHkTOlcVa8hh5FMzCuX2TecEu8RsSRNtQW0iPvJWdjE=
Subject key identifier: 4F:99:14:90:2B:FB:20:5B:EC:05:D1:EC:8E:2D:49:4B:64:7A:31:2F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B92F8B976DF9024020B35EC19FE2AFFDEAA1CCF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77e01627-e1b0-4926-8307-bce485b14cbb.roa
Signing time: Sun 13 Oct 2024 00:00:00 +0000
ROA not before: Sun 13 Oct 2024 00:00:00 +0000
ROA not after: Sun 17 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:92:f8:b9:76:df:90:24:02:0b:35:ec:19:fe:2a:ff:de:aa:1c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 13 00:00:00 2024 GMT
Not After : Nov 17 23:59:59 2024 GMT
Subject: serialNumber=8e53fc10d956d50e85da02e3bbbb87fc0a20fb585fa0228e57711b5c3d49354d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:59:75:a5:8a:40:74:55:fe:00:5e:c5:f9:
0d:36:ea:ba:3a:46:b3:92:1b:82:b8:d1:87:1e:c0:
49:37:31:ec:49:fa:8e:a6:68:7b:5e:fa:34:62:dd:
3a:f4:0f:e3:68:34:51:83:52:8c:58:bf:2f:1a:dd:
02:03:79:62:a1:5c:48:80:e5:94:6d:08:27:5b:66:
3f:bd:cc:34:d7:db:b0:8f:15:ee:01:da:a8:75:ec:
03:7f:09:6f:e9:1f:7a:8d:f5:ce:80:3c:2b:c1:b8:
f8:b4:0c:2d:aa:cd:7c:33:0a:1e:f0:15:98:32:2a:
4b:18:be:e0:6d:9c:72:8c:7f:b6:78:0c:56:a4:e1:
04:cd:26:8b:d8:ce:c4:3e:86:dd:b5:b6:19:22:94:
a7:cb:cc:87:5c:f7:af:0d:37:99:fc:a3:de:ae:ee:
7b:0e:9a:3a:5b:4b:59:d6:02:29:82:d6:58:f0:86:
7f:88:f4:58:4d:43:bd:0f:12:18:d2:d4:76:54:35:
b0:cd:38:d2:7c:ac:20:b9:99:a4:45:75:b5:d2:fa:
b7:e8:0a:73:71:a9:1b:e3:37:2d:9c:f6:ea:02:ff:
e6:3c:b2:c8:dd:21:74:2d:e4:14:9d:12:c3:a5:3c:
a4:71:a9:0d:80:19:d1:ef:78:12:26:4e:6f:83:e4:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:14:90:2B:FB:20:5B:EC:05:D1:EC:8E:2D:49:4B:64:7A:31:2F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77e01627-e1b0-4926-8307-bce485b14cbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1d:21:c7:91:f9:cc:2a:8e:a7:08:85:8e:32:14:18:db:f6:
42:20:29:1c:e4:8f:af:f4:fe:48:cd:3c:04:8d:c8:66:85:0e:
c3:7e:ac:f7:ff:8e:1a:52:bc:93:e5:c6:7c:e6:b3:87:e9:4e:
07:d5:46:ef:85:94:dc:97:55:94:b0:f6:c6:41:b9:34:3d:3e:
6f:06:15:32:2e:f8:a5:a4:41:80:70:af:86:16:04:86:f1:de:
59:4c:90:1a:d8:c8:4a:19:cf:97:bd:89:2b:30:93:4b:5b:2f:
cf:2b:cc:c4:e8:e3:ac:94:9c:e2:90:26:a9:18:a1:d1:d9:e1:
ce:f4:65:22:46:eb:3b:d5:ef:4e:34:5f:8a:0d:36:cd:43:8e:
59:a8:32:69:d8:2f:e6:15:34:1b:8c:5e:29:69:08:be:52:8d:
fe:72:05:90:67:e3:23:f2:42:5c:3e:b5:8d:b3:64:32:67:b4:
70:1e:90:d9:1c:a1:d0:ff:bd:50:ca:52:ae:1f:bd:66:61:4b:
7d:96:ab:99:d7:e3:c4:30:f4:7e:dd:f3:dd:9a:99:78:d3:54:
1a:ac:0a:b4:1e:51:e7:75:0c:c5:44:94:dd:a9:2f:bd:36:02:
36:60:2f:2e:70:6a:77:a5:ce:3a:a3:65:9f:19:2e:e0:c3:22:
75:84:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:19:13 2025 by rpki-client