Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7d21b0d9-126f-4e16-8284-16022a2dc70f.roa
File: 7d21b0d9-126f-4e16-8284-16022a2dc70f.roa (raw, json)
Hash identifier: H8IZn1zHYmXsVusqiD8N4h2Mm7CoDxXHqvnnX5GpHFI=
Subject key identifier: 7A:AA:8A:69:A1:F8:B5:B7:B8:D3:C2:3A:BD:2C:9C:F1:6D:EA:E6:45
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0DDFD81BC9EC52FEEDFBA29B469EA2CB58C31202
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7d21b0d9-126f-4e16-8284-16022a2dc70f.roa
Signing time: Sat 12 Aug 2023 00:00:00 +0000
ROA not before: Sat 12 Aug 2023 00:00:00 +0000
ROA not after: Sat 16 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:df:d8:1b:c9:ec:52:fe:ed:fb:a2:9b:46:9e:a2:cb:58:c3:12:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 12 00:00:00 2023 GMT
Not After : Sep 16 23:59:59 2023 GMT
Subject: serialNumber=afbe145d1819db50d6498b5d69a2aab54763f517782268e71d3d8fa0a4a5490a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:8d:7e:6f:e6:42:5f:c9:53:9e:13:c7:bc:
67:91:89:9c:78:f6:fe:9c:c6:c9:13:5f:e8:09:4e:
9a:72:83:b2:b6:9e:b8:fa:5f:16:d4:61:66:26:d7:
f7:8c:19:93:fc:b5:13:9d:da:a4:81:b5:68:e7:a7:
64:d4:e9:75:a9:f8:40:fd:f4:02:61:e0:fc:7a:7f:
a9:42:96:30:7b:a2:a1:9b:a1:80:c6:7f:61:1e:73:
07:b3:ee:33:32:bc:f6:9c:c4:10:36:0b:d0:8a:7d:
90:7d:07:e9:28:2b:9e:07:14:cb:8e:e0:3d:5c:90:
00:17:49:99:b0:71:ef:f4:0e:85:69:83:5a:85:75:
c6:b4:3c:a1:f3:bf:c5:ab:3f:3c:bf:0c:18:24:f4:
0b:c7:03:c5:7b:ff:31:95:cb:ab:29:ae:9b:49:7e:
ba:5e:ec:cf:bd:b5:a8:2a:1c:5e:92:9d:09:5c:41:
d2:d3:13:98:aa:66:cd:1e:d4:8b:03:fe:37:42:f0:
45:1f:cd:d9:dc:8e:6d:b8:6b:4a:cf:46:04:fb:39:
c8:93:8f:da:f9:b5:9d:b4:97:d2:bf:51:97:24:1b:
44:5e:26:27:01:54:5c:90:f3:90:b4:f7:93:95:c0:
30:ca:d4:a4:ca:47:51:06:1a:ef:bf:6f:b4:69:2c:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:8A:69:A1:F8:B5:B7:B8:D3:C2:3A:BD:2C:9C:F1:6D:EA:E6:45
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7d21b0d9-126f-4e16-8284-16022a2dc70f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cf:34:6b:1a:32:5e:09:c4:56:3f:ed:3d:54:a0:60:d9:64:
36:56:f5:30:1c:3b:ae:65:f0:4c:05:99:c1:49:fc:7b:8e:ae:
73:8a:88:f7:b5:94:12:41:5f:0f:b2:1e:2a:40:7f:0f:13:f0:
36:38:e5:74:13:29:7e:9a:32:83:26:a0:c9:0e:9e:85:e5:c9:
83:54:7d:ec:ff:8f:f3:18:7a:f7:50:48:b7:0e:df:41:05:5d:
64:20:95:9f:af:17:3c:19:28:c1:90:47:da:04:f1:34:f1:4a:
0b:63:14:d2:e6:2b:d3:af:b3:78:d4:bc:58:eb:45:f3:81:99:
92:67:79:53:87:68:8a:1e:e7:d0:d4:a4:48:62:ce:a0:00:f8:
91:85:4a:52:f7:03:44:d2:cc:00:0a:54:e9:57:90:d6:d4:bb:
67:37:77:40:28:0c:51:bd:03:ad:bd:41:d8:01:d1:85:36:88:
22:7a:01:6d:b9:36:fa:5d:a0:94:2d:37:b2:50:ea:51:3b:4d:
62:7b:a3:8f:12:f4:3d:18:b8:96:6f:16:83:68:a0:60:ba:7e:
70:e4:ce:e8:38:cf:f1:0f:4a:49:36:44:49:10:88:84:52:fa:
ec:be:df:c9:64:4a:81:31:0b:4f:5e:7b:a5:18:4d:81:e8:14:
1f:0d:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:44 2025 by rpki-client