Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9634eb97-0b62-421d-bdf2-addd92fa88d6.roa
File: 9634eb97-0b62-421d-bdf2-addd92fa88d6.roa (raw, json)
Hash identifier: SoeoS+bpfx8DhnWYuOM6399eyQEYaiDFV4AKYJi1SyE=
Subject key identifier: 22:2A:FF:78:3A:B0:1E:08:24:3C:7E:56:63:84:E6:33:AB:61:F7:19
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D2E1015C00EA63B9AD5FB7D4183C34A853841DE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9634eb97-0b62-421d-bdf2-addd92fa88d6.roa
Signing time: Fri 01 Nov 2024 00:00:00 +0000
ROA not before: Fri 01 Nov 2024 00:00:00 +0000
ROA not after: Fri 06 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:2e:10:15:c0:0e:a6:3b:9a:d5:fb:7d:41:83:c3:4a:85:38:41:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 1 00:00:00 2024 GMT
Not After : Dec 6 23:59:59 2024 GMT
Subject: serialNumber=c6ca54c9eec129b9cbe5028b63ab87238dc91d71f10f07cc3e23653df2644dd1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:85:42:4b:63:87:4f:f8:ab:6b:bf:4f:33:
8d:d0:7d:4d:00:ba:8d:c9:eb:26:e8:ce:76:1a:dc:
8b:2f:d3:bc:1b:ac:65:8b:fe:db:f5:c1:20:90:5e:
6b:89:ad:d5:dc:00:46:28:f0:07:49:72:91:d6:4f:
42:4f:af:8f:b3:d7:8f:f2:e8:c2:63:49:74:99:f2:
09:ea:a7:a1:34:48:15:f7:9e:e0:5d:85:58:73:c3:
a7:6b:88:b8:4d:9f:61:2b:ff:10:4e:9c:1c:44:92:
21:6f:e8:0d:ee:af:b9:fd:b6:33:2f:27:a0:80:f3:
10:c8:ee:f9:66:bc:cc:d5:6f:93:c7:52:cb:aa:dc:
6b:3d:61:88:2f:92:a0:a2:3f:d3:5c:c2:c7:98:71:
75:01:d7:b4:8f:6e:cf:64:fc:8d:de:06:e9:91:23:
97:3e:4a:32:36:21:42:9a:00:cf:5d:2f:2d:5c:c8:
94:dd:e1:50:62:53:13:2b:90:f9:f1:f0:4b:ec:0e:
1b:2a:85:90:49:bd:2f:7c:36:80:6b:b5:44:4c:9c:
48:3a:7f:4a:ce:da:1e:8d:48:33:f1:32:11:4d:36:
c0:8c:42:78:d0:3a:37:d1:65:80:6b:e0:6d:8a:7f:
77:98:28:6b:ca:c9:0a:cf:a8:9c:ca:25:2c:0f:9e:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:FF:78:3A:B0:1E:08:24:3C:7E:56:63:84:E6:33:AB:61:F7:19
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9634eb97-0b62-421d-bdf2-addd92fa88d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:68:8c:5b:4c:93:41:6a:8a:12:42:97:07:d8:b7:6d:5c:dc:
f2:79:f4:44:ef:90:ba:43:57:8d:4f:2a:0f:bc:80:52:c7:27:
c8:e1:a1:26:d2:38:59:aa:03:42:e8:78:cc:10:0e:3c:7f:42:
ba:1f:44:0a:73:44:44:e9:ae:b3:cf:90:16:4d:ce:d4:a5:2b:
dd:e5:67:51:7f:6d:68:6b:29:43:3c:cd:49:14:44:d1:54:cd:
0c:f3:c9:19:74:34:1a:37:0b:4a:12:52:b1:0c:4f:b0:18:e7:
86:e0:2b:c0:62:93:1f:59:a7:fc:29:48:ae:df:f0:e3:53:f3:
89:c0:6d:30:94:8f:9e:fb:4a:f6:88:53:2b:e8:e1:32:f2:69:
4e:fd:41:82:c9:70:7e:a3:d5:1b:a8:bf:21:3c:e3:7f:2d:09:
2a:b5:60:97:ba:56:45:b0:64:89:36:3e:10:a6:be:42:08:cd:
04:7c:46:96:50:15:b7:4d:dc:2e:67:df:c0:f9:b6:cf:d3:54:
c4:0c:ab:3a:e6:f7:81:09:66:75:cd:82:9a:30:4e:27:16:39:
63:d7:bf:a8:0e:2b:d4:6d:a8:d2:17:7a:15:5d:a3:f4:92:28:
fa:9f:ba:13:26:42:5c:e6:07:5a:c9:fe:cf:27:a5:de:04:c8:
5d:e2:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:52 2025 by rpki-client