Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b9b1d67-e7bd-49c5-8015-20c21555b22f.roa
File: 8b9b1d67-e7bd-49c5-8015-20c21555b22f.roa (raw, json)
Hash identifier: JNWnjLKEAoiXGvRT76whwe3Nyq3QMSHJrPinYSTC+Xo=
Subject key identifier: FC:56:4D:A8:9B:A1:1C:39:6E:93:FF:5C:9B:9B:0E:03:E3:16:8F:F9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 02966CA4D47EC3F7EBCEC18767AD329E2664B30F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b9b1d67-e7bd-49c5-8015-20c21555b22f.roa
Signing time: Sun 29 Sep 2024 00:00:00 +0000
ROA not before: Sun 29 Sep 2024 00:00:00 +0000
ROA not after: Sun 03 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:96:6c:a4:d4:7e:c3:f7:eb:ce:c1:87:67:ad:32:9e:26:64:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 29 00:00:00 2024 GMT
Not After : Nov 3 23:59:59 2024 GMT
Subject: serialNumber=8356ce998ae45cae5f8bbc132fc9db9ed7027314f015d6eeece5b5b5580a98d8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:db:90:e0:f9:51:fe:e3:fa:77:77:85:00:
79:34:32:c2:42:5e:4f:be:13:c3:68:b4:29:ac:98:
e6:3f:75:6c:0d:41:ab:91:dd:fe:eb:b6:fd:33:81:
dd:e4:c0:e2:5d:da:8b:06:fd:05:58:b6:a0:76:64:
9d:a5:0c:ce:cb:c0:5b:ee:ae:fb:1a:69:c0:a0:f6:
fb:4d:bc:39:89:82:a3:e2:0d:7f:ab:b0:f3:5e:07:
8b:2e:27:8f:d1:e9:96:f6:6c:1e:8c:2f:b1:68:8a:
b3:1d:d4:28:3f:45:8a:66:3f:4a:f4:d7:8f:b3:2e:
ec:a2:3b:fa:a2:4f:1d:00:30:95:1d:12:41:43:32:
6c:0b:05:20:8f:9b:55:39:48:b5:9a:d5:f7:96:cd:
b4:87:21:bd:e3:d2:ac:8c:31:54:04:95:47:84:e5:
05:2c:54:0d:f4:b8:85:c8:ff:ce:a5:8b:bc:98:00:
cc:a2:ef:2a:33:78:a6:2c:56:4a:41:93:b3:61:e3:
3c:fa:28:48:fd:67:2a:a3:68:06:f5:ab:91:40:5e:
b6:ee:5b:f1:1e:0e:6e:e4:88:ac:ae:5a:0f:25:8c:
ad:09:98:97:e3:8d:49:f1:d4:1c:27:4c:b0:e0:a9:
62:93:7a:2b:50:fe:c3:41:e7:8d:65:23:c3:09:95:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:56:4D:A8:9B:A1:1C:39:6E:93:FF:5C:9B:9B:0E:03:E3:16:8F:F9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b9b1d67-e7bd-49c5-8015-20c21555b22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
43:87:1a:39:f5:f2:f7:36:f1:7d:14:84:d5:cf:51:04:6e:db:
12:04:f3:ea:86:62:9d:bc:67:7a:88:51:7b:85:f9:44:dd:22:
fc:4c:78:3c:aa:c4:09:46:02:e1:c4:8b:a9:32:2f:b0:ef:d6:
7c:ec:77:0f:d2:2e:3f:b8:ee:99:a0:1b:7e:6b:ec:2e:f2:e8:
73:67:ce:2a:de:19:b4:8d:07:c5:cd:12:09:de:99:6e:15:2c:
62:66:5c:fe:17:8c:14:a3:9d:1a:70:d9:6c:86:a2:3c:3d:90:
65:07:df:a1:8f:e1:a3:62:61:9b:f2:b4:f2:7c:14:e5:41:79:
cf:a3:f1:4a:bd:66:92:b8:88:ee:61:67:f2:e2:83:76:3c:fc:
81:c4:19:cb:b7:e6:06:5d:e5:37:c9:6c:e2:88:e2:43:c4:68:
ac:ca:ef:82:e8:fc:94:94:f5:4d:1b:c1:d2:88:ef:f6:d5:83:
7a:af:e2:e6:bd:77:a3:e5:1a:de:75:d0:e1:66:8a:73:27:6b:
19:51:8a:00:48:9f:fc:b4:7c:35:59:aa:09:3a:06:40:9c:5d:
0d:35:4b:ac:47:10:13:3b:18:d7:60:69:5b:dc:bf:3d:25:3f:
ee:c0:b8:33:89:09:1d:54:0c:bc:51:20:34:3e:fb:fe:94:41:
44:0f:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:03 2025 by rpki-client