Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7eafd89d-8b60-4b7f-96cb-efe1f9710252.roa
File: 7eafd89d-8b60-4b7f-96cb-efe1f9710252.roa (raw, json)
Hash identifier: JdqbosZSfSYp+CUUFy/DBsFF7RFiIwPJcL5rZwSOgig=
Subject key identifier: D5:5C:25:07:AA:54:DA:17:99:F7:E1:14:53:91:C2:DE:3B:F8:B2:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1F97F8927D09EBF44FD910404F4263D8F2C79629
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7eafd89d-8b60-4b7f-96cb-efe1f9710252.roa
Signing time: Fri 27 Sep 2024 00:00:00 +0000
ROA not before: Fri 27 Sep 2024 00:00:00 +0000
ROA not after: Fri 01 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:97:f8:92:7d:09:eb:f4:4f:d9:10:40:4f:42:63:d8:f2:c7:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 27 00:00:00 2024 GMT
Not After : Nov 1 23:59:59 2024 GMT
Subject: serialNumber=4364644eeb5999ecd959b9885934f86f980597cbf3f723b4feda4979b6b9d683, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:ca:13:5c:c7:61:c5:42:c4:5d:8e:09:f6:
51:9a:5b:98:58:f9:2e:2a:3c:06:3d:1e:52:60:54:
25:6a:d3:6d:bf:1a:a8:6a:b0:a7:f9:a1:1d:e8:09:
56:b6:ea:7c:d4:5f:72:4a:df:85:c1:13:c1:6d:52:
65:e7:78:8e:88:1c:01:b3:dd:14:7e:b2:e4:e6:23:
ce:a2:9f:16:bd:ba:f0:51:cf:88:c9:3a:cb:05:1c:
1a:c2:f1:7a:60:79:44:bb:06:66:be:53:42:00:87:
a4:43:80:70:ae:dc:3f:7d:14:31:14:30:5e:87:ad:
db:fc:ac:47:ea:f2:6f:c4:06:03:5d:8f:1b:df:ee:
bd:5b:2e:0f:2f:88:65:c8:90:f9:26:91:a9:1e:9a:
25:78:7d:06:16:6c:45:2a:30:b2:ef:64:4f:10:c4:
cd:bd:3c:97:a8:f6:9f:f0:b1:6e:d0:e3:6a:4c:48:
78:15:e0:4c:2a:c4:83:43:e9:50:6a:3a:9b:73:0c:
bb:2f:76:f2:0c:f3:4c:25:0f:a5:f2:c3:9b:d9:ab:
3c:c8:06:c0:96:a8:41:c6:28:ad:dd:b2:b3:a3:e9:
ad:8d:52:9f:ad:0d:a3:ec:6f:5d:b3:71:1a:07:19:
fd:89:cd:2e:f6:48:d5:92:30:65:31:e2:7f:86:83:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:25:07:AA:54:DA:17:99:F7:E1:14:53:91:C2:DE:3B:F8:B2:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7eafd89d-8b60-4b7f-96cb-efe1f9710252.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:74:bb:b7:6f:9e:13:c7:42:c1:c4:e5:73:89:35:4d:60:
47:37:6a:f4:ef:69:fc:24:1e:5e:28:24:df:75:a9:90:a1:d0:
88:77:54:20:80:c9:b7:a1:c8:a1:bf:13:39:0c:a2:42:06:14:
da:3b:35:c7:29:b9:b1:d3:02:3d:be:c5:53:47:d1:4e:1f:eb:
43:3a:52:14:3d:24:ca:e1:00:85:91:28:5f:e5:58:f3:3a:6d:
cc:99:05:8c:d2:15:94:69:0c:80:26:0b:87:26:23:cf:4e:a7:
7a:e3:c5:77:74:28:2b:3d:66:89:c8:3d:1b:da:56:5d:f2:dd:
ae:a0:44:ac:28:a3:e0:49:29:41:c1:11:ab:88:7e:7c:f4:59:
1d:1b:62:e1:b3:42:ef:da:b4:eb:3d:8b:c7:15:d5:80:89:f7:
de:ea:9b:c3:8e:8e:89:b7:6c:7e:da:c2:30:d8:18:7d:2c:8b:
7f:a0:d1:53:1d:ee:6b:48:3d:22:c4:6e:a9:33:dd:6c:15:e4:
4a:72:ba:4a:ef:ea:7f:c2:6f:89:04:93:4d:1d:ab:bf:f2:44:
0f:db:f4:36:da:b3:19:51:ec:bb:94:fe:9f:fb:02:6d:55:71:
4a:93:f3:f2:74:bb:5a:3c:16:41:c8:6c:d6:4a:fb:b7:ef:5f:
18:96:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:17:10 2025 by rpki-client