Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93c292af-eded-4a24-ae5d-b9721ad57036.roa
File: 93c292af-eded-4a24-ae5d-b9721ad57036.roa (raw, json)
Hash identifier: uR8f69g6I/ZCc1cC0OXBeOqUc5SbyrmOxq6GLyuexiM=
Subject key identifier: 24:09:6C:06:66:05:EB:DB:67:25:CE:74:69:A3:D2:6C:71:2D:1C:8B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1F1F9F98480DB898C0B794BFF117BA51983C88DE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93c292af-eded-4a24-ae5d-b9721ad57036.roa
Signing time: Fri 29 Sep 2023 00:00:00 +0000
ROA not before: Fri 29 Sep 2023 00:00:00 +0000
ROA not after: Fri 03 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1f:9f:98:48:0d:b8:98:c0:b7:94:bf:f1:17:ba:51:98:3c:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 29 00:00:00 2023 GMT
Not After : Nov 3 23:59:59 2023 GMT
Subject: serialNumber=75ed9b49460df5efadf6d76c72722fb40754bea2ffa790f90f04e0a2f44351e3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:36:34:3c:ad:2b:f4:09:40:03:5d:fb:87:
fe:20:45:43:24:a1:44:4d:72:c3:b9:58:6d:fa:38:
22:3b:f9:57:50:e8:b4:54:78:bc:3b:e7:78:ab:d2:
c2:35:37:0a:2f:48:28:8d:59:b7:90:7b:dd:13:a4:
84:f6:4a:99:1d:0c:93:de:e2:ea:41:31:07:0e:be:
f7:9f:ab:a4:50:79:fb:33:42:e6:54:e9:cf:80:22:
cd:60:62:87:9b:46:86:ca:b2:51:33:0c:bd:89:e1:
f8:5e:de:e0:d8:ed:f3:e4:93:af:b9:09:6c:8e:86:
8e:c0:82:ac:c8:ff:00:99:17:3a:88:1c:1e:49:a2:
49:6f:b2:59:5e:93:d6:49:cf:95:f1:9a:ac:d8:a3:
25:60:cb:80:a8:51:86:4d:0e:04:ad:1b:82:57:37:
b9:8d:ea:b6:1f:df:cc:b5:cf:f9:77:d0:b3:81:0f:
27:05:32:97:1f:e8:f4:a2:eb:70:8d:40:a4:13:f9:
e3:8b:1f:52:3e:89:be:c9:83:66:5d:66:4f:16:cd:
00:ec:79:9e:35:5d:8d:04:1d:5c:10:aa:8d:36:6e:
a7:b6:18:f0:66:07:7b:b5:20:56:e6:fd:6c:bb:b8:
de:3d:24:2b:26:b6:bf:cd:40:40:35:fe:fd:70:e2:
77:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:6C:06:66:05:EB:DB:67:25:CE:74:69:A3:D2:6C:71:2D:1C:8B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93c292af-eded-4a24-ae5d-b9721ad57036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2b:a1:83:fb:bb:fa:26:7b:b9:c1:2a:fd:7d:e2:3d:b8:3a:
ca:af:92:a4:04:65:a1:66:64:f4:5b:59:9a:f3:51:3e:3d:5b:
94:c4:ff:d1:8e:62:a8:49:18:cd:87:07:36:c2:9a:bf:04:ad:
a9:58:95:11:9d:91:40:72:b2:d7:10:90:3e:06:2f:3b:75:c0:
38:1b:2e:17:4f:55:6f:f3:00:73:fa:4f:4f:d9:8d:49:7f:dd:
4e:a4:04:23:b8:c4:95:fc:76:84:a3:13:be:b6:7c:63:ba:b3:
3f:84:9c:b2:95:0b:79:6e:59:b9:95:a7:d5:e8:e8:16:06:f5:
83:28:c8:6c:d2:d7:99:3f:3e:ef:a2:a2:69:f8:49:fe:77:2c:
b9:1d:f9:a8:43:2e:1e:13:a5:ef:9c:42:1e:05:49:a5:8d:8d:
7d:02:c4:06:b3:54:d5:59:99:35:62:3a:b6:61:d3:9d:d5:b3:
85:39:6f:69:43:0c:99:92:a4:86:9d:ab:35:59:08:95:ee:63:
58:d0:89:56:95:f0:45:98:dd:6b:8c:90:99:ac:79:5b:6c:86:
2a:d8:68:f1:3f:36:d1:73:cc:4f:d8:c8:3e:9f:92:c4:4b:19:
81:61:21:87:ef:f5:26:99:53:0a:33:8f:05:d6:9f:87:1d:04:
10:06:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:20:28 2025 by rpki-client