Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84409150-436c-4c4a-9f46-48842d929fbb.roa
File: 84409150-436c-4c4a-9f46-48842d929fbb.roa (raw, json)
Hash identifier: 3t0PQSww2TUn2IPuNEXqVhqSpDYGWF4ctDt9v9QyC2g=
Subject key identifier: 0D:E5:00:A9:3F:12:81:4C:60:53:E3:FB:7C:46:F0:55:E2:47:3D:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1CDC4E51EF4C6AA79EC9DEFF75554252F1652605
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84409150-436c-4c4a-9f46-48842d929fbb.roa
Signing time: Thu 08 Feb 2024 00:00:00 +0000
ROA not before: Thu 08 Feb 2024 00:00:00 +0000
ROA not after: Thu 14 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dc:4e:51:ef:4c:6a:a7:9e:c9:de:ff:75:55:42:52:f1:65:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 8 00:00:00 2024 GMT
Not After : Mar 14 23:59:59 2024 GMT
Subject: serialNumber=877dd1ce29925ab3d2130ad284d78c743c3f931cc77dd3ef3aed7c870103d5b8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:12:d9:8c:4f:4d:dd:1c:64:90:e4:43:ce:
19:60:bd:e5:49:21:d3:dc:a7:06:45:82:78:6b:85:
66:57:81:b5:c9:64:bb:69:de:28:ab:30:59:a2:83:
cd:03:f3:6a:ab:ce:ab:c3:cb:a7:b7:ec:e0:d3:f6:
c8:42:22:58:c7:18:d0:7b:e6:cb:8a:8d:d3:5d:49:
55:7a:c1:22:7e:4d:ad:f0:30:60:2c:af:50:ef:5a:
0d:59:9d:88:cd:c3:c9:cc:ab:bf:4b:07:ec:87:d0:
12:eb:a9:23:32:6e:07:52:39:64:0c:54:f2:d2:ff:
a9:27:a4:9b:9b:f1:7c:0f:c1:5b:23:68:0e:3a:fa:
6b:b5:f1:de:47:c9:bb:a4:82:f8:ad:09:cd:85:77:
8d:57:cc:3e:31:20:22:86:c7:6f:35:84:33:2b:d9:
96:15:7c:3a:bd:8f:0f:c4:e3:35:70:b7:88:21:fc:
9a:6b:bc:49:75:c1:75:c5:e2:26:6e:2d:bc:ab:0b:
81:fe:f2:57:18:74:6e:66:75:bf:60:41:7f:32:90:
3d:24:b8:0c:62:fc:f7:25:d1:ef:4a:89:5a:8a:b1:
8e:f8:1c:0c:5e:6c:d0:18:0c:db:3a:57:d7:70:62:
d4:e6:67:0e:d8:c1:aa:c7:6a:14:80:c3:34:57:2f:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:00:A9:3F:12:81:4C:60:53:E3:FB:7C:46:F0:55:E2:47:3D:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84409150-436c-4c4a-9f46-48842d929fbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4c:80:c0:5c:90:a8:62:8a:be:c2:7e:be:01:03:d9:27:c9:
50:08:2e:cf:57:8b:70:a0:dc:47:3c:92:61:2c:72:f9:cd:1e:
1d:78:48:53:41:b4:18:5f:58:67:ea:77:1b:d1:88:4c:82:2e:
52:20:d5:12:0e:66:84:72:d4:b2:98:67:d3:0c:df:59:27:7f:
da:d6:0f:b0:fd:f2:76:72:5c:0b:c3:f2:21:5d:20:d0:0f:d5:
db:70:66:11:43:e1:0f:46:dd:fd:02:d3:4b:ea:51:2b:b9:ea:
e1:63:99:12:73:19:a6:b8:ff:be:34:b6:52:09:a8:28:86:7c:
b0:2b:fc:6c:d6:e5:15:b6:3d:20:6a:e9:5e:56:d7:9b:c2:ef:
99:96:83:e5:55:6a:81:2a:6a:35:19:32:3d:50:83:e0:53:81:
ba:04:12:80:91:ea:d5:be:9b:d1:58:5f:23:1a:6e:96:74:30:
4c:62:39:39:38:1c:36:d2:28:3d:28:7f:bb:15:ab:48:b1:85:
a0:9d:14:67:0d:b0:50:3b:82:63:73:0c:87:9d:4c:8b:74:3e:
20:c2:9d:4a:2d:ab:67:d8:44:73:d7:10:15:08:b4:9e:77:ae:
42:f9:7c:7b:4a:05:37:7c:f2:d3:6e:33:97:ca:23:18:8c:ab:
88:27:39:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:15 2025 by rpki-client