Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7de85fe8-493b-470b-b1ea-fb7fc5ca3ab7.roa
File: 7de85fe8-493b-470b-b1ea-fb7fc5ca3ab7.roa (raw, json)
Hash identifier: 5Rf3NWSxtJpq04nu7qRuvQ6XoWE2aulxWVUoSoMH8v8=
Subject key identifier: FB:73:12:27:B2:B6:EA:24:65:41:FE:B8:D0:3E:0D:19:6B:FF:9D:E8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 262244E29A0577E59B2F5BFF8F310034686833
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7de85fe8-493b-470b-b1ea-fb7fc5ca3ab7.roa
Signing time: Sun 10 Dec 2023 00:00:00 +0000
ROA not before: Sun 10 Dec 2023 00:00:00 +0000
ROA not after: Sun 14 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:22:44:e2:9a:05:77:e5:9b:2f:5b:ff:8f:31:00:34:68:68:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 10 00:00:00 2023 GMT
Not After : Jan 14 23:59:59 2024 GMT
Subject: serialNumber=c3ca17825986d11b5e74c8eb29e67ca8e42f192cfdac0affc855184142d9f03c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:70:b3:4e:a8:0c:e6:5f:c6:50:ed:e4:9a:
87:22:8d:99:63:fb:09:ab:a3:ca:8b:0b:d6:68:2f:
9c:a6:f2:cc:6e:24:04:cd:43:07:b5:45:f7:aa:e4:
e2:a7:f9:da:d2:9d:b1:83:92:b9:fb:a9:17:76:a6:
63:43:75:f7:54:8a:4e:7d:fe:35:35:b7:88:5b:4e:
ee:a3:e1:a0:08:64:d5:28:5c:bb:fd:02:82:d8:fb:
a8:48:c9:84:39:38:c7:38:cc:87:7e:6c:2c:3f:db:
a3:b7:b1:47:f8:ac:62:b0:2f:3e:aa:f3:c7:70:57:
cd:37:d4:a8:15:96:66:85:25:77:80:20:8e:18:d8:
e7:86:54:41:27:c2:0f:6b:fd:30:eb:18:cd:30:88:
e6:99:be:6a:af:59:ed:94:29:a2:1d:0c:79:55:1f:
9f:b7:78:5b:82:e2:12:a5:d9:fe:42:5e:cf:69:2e:
96:e7:f6:03:91:df:8f:87:93:d8:04:90:78:07:b7:
90:14:02:89:05:91:f6:aa:5a:65:dc:da:f3:a3:78:
c3:16:b5:1f:db:e1:2b:4a:90:62:9c:ff:82:0a:a2:
18:38:0d:64:c0:e6:81:97:d0:92:ff:67:62:8e:1b:
ff:e8:a2:be:89:25:a4:2a:cc:df:72:1f:ec:c0:3a:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:73:12:27:B2:B6:EA:24:65:41:FE:B8:D0:3E:0D:19:6B:FF:9D:E8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7de85fe8-493b-470b-b1ea-fb7fc5ca3ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:de:e4:bc:6b:b6:2b:a8:5d:72:ef:06:5f:61:29:30:38:de:
18:11:15:0e:a7:a8:cd:a7:f2:eb:4b:99:d9:59:39:6d:cb:40:
12:8c:18:ef:ff:82:eb:85:15:08:73:56:23:7f:ac:8d:ce:b4:
99:86:5f:a6:95:4a:0e:23:0b:46:06:67:7d:07:4e:a1:c9:34:
5b:5b:4e:83:73:a5:17:50:a3:26:7a:43:5f:f5:b5:c3:94:eb:
48:21:e8:10:2c:17:a4:90:1d:5c:3c:06:25:9f:90:24:83:6e:
dc:6c:76:ac:2a:5f:28:b2:90:40:c1:06:be:1b:4b:c0:88:7e:
f1:39:ba:39:10:f2:f2:4c:eb:d2:08:fd:26:f3:28:9a:38:eb:
12:0d:8d:9c:11:28:85:1f:24:a0:cd:de:03:de:4e:f1:d3:2a:
f0:3c:f5:d1:eb:47:4c:a0:86:e1:4f:b2:91:e4:de:7c:35:6a:
a0:0d:35:2c:3d:5a:37:4a:98:2a:3c:1d:53:6a:3e:a4:eb:33:
7d:2b:cd:24:97:f0:8e:33:19:c6:52:65:db:fb:a6:ab:35:35:
ca:e4:c4:70:67:83:0b:0e:38:06:92:cd:34:a3:43:dd:c6:3c:
0b:ac:cb:4e:29:8d:4c:69:a6:ec:22:4b:7e:25:6a:1d:df:b3:
0a:6c:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:50 2025 by rpki-client