Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a08f2b02-c0f0-4f39-ad4b-e0c4296f9e89.roa
File: a08f2b02-c0f0-4f39-ad4b-e0c4296f9e89.roa (raw, json)
Hash identifier: Yca1VSSh5F9tq4hcnn5lam73rqPNm5HVT73U2n8NhKA=
Subject key identifier: 7F:FE:C1:B2:72:0D:B3:78:DB:02:9F:F7:62:26:23:FF:C8:E0:6A:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0FF9A9780AF7C16A2AE7EDF31A958D52B2D7A310
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a08f2b02-c0f0-4f39-ad4b-e0c4296f9e89.roa
Signing time: Tue 10 Sep 2024 00:00:00 +0000
ROA not before: Tue 10 Sep 2024 00:00:00 +0000
ROA not after: Tue 15 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f9:a9:78:0a:f7:c1:6a:2a:e7:ed:f3:1a:95:8d:52:b2:d7:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 10 00:00:00 2024 GMT
Not After : Oct 15 23:59:59 2024 GMT
Subject: serialNumber=bafcd64b1bb2673e2dc309e4e23c4c73f312630b958abc1061efaa1be7cf6b7b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:4f:db:2a:e5:d7:f8:3b:96:40:03:98:62:
20:2d:95:c9:78:09:30:3c:d9:40:57:af:43:95:92:
c6:63:fc:88:11:9e:d5:08:0a:0b:70:cc:04:72:6e:
3e:54:b2:5b:f2:1c:01:d1:a0:eb:bd:05:3e:4c:ac:
5f:21:fa:1e:37:55:29:99:f6:77:2f:7e:96:54:bf:
3b:93:0c:eb:65:ae:ea:81:50:a2:7e:aa:c8:cb:09:
b2:0d:f6:8b:b7:02:5c:e7:9b:68:13:26:bf:be:63:
43:98:bf:ec:55:0c:3a:3e:17:6c:79:79:53:a7:40:
6a:3a:25:ab:d7:03:df:01:68:8f:24:3d:72:90:b0:
41:2b:f8:62:56:5e:22:d8:c2:df:fe:08:fb:c7:b0:
30:a7:68:68:0a:44:dd:4e:73:0a:69:23:23:3b:4f:
39:de:8d:ee:66:6f:be:84:4b:21:e2:56:47:75:60:
89:21:b8:67:bd:3d:8c:5f:a8:4b:b2:a0:dd:8e:b8:
b5:09:84:a5:8d:75:5e:38:67:0e:a4:73:ba:9d:13:
86:d4:ad:38:95:35:7e:f1:53:80:fe:fc:13:76:ae:
1c:71:1c:e1:c4:29:7f:cf:b6:cd:c5:24:b6:40:1e:
dc:ea:ac:0b:6a:a6:f2:29:b6:11:80:bb:12:e8:e3:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:C1:B2:72:0D:B3:78:DB:02:9F:F7:62:26:23:FF:C8:E0:6A:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a08f2b02-c0f0-4f39-ad4b-e0c4296f9e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b1:8b:e5:24:c0:ef:61:21:61:02:56:85:cd:1a:da:33:db:
ce:3d:39:5a:ea:0c:a6:5d:95:71:f0:a3:73:94:fa:f3:6e:88:
2d:dd:01:93:89:ce:63:d3:7d:6a:ab:84:59:d3:cc:60:7c:81:
9a:84:c1:67:54:f6:58:58:08:5d:85:ea:6f:6a:85:15:af:50:
8f:0c:29:66:05:41:df:49:eb:f7:b8:c0:1d:79:c4:2f:50:67:
1e:e8:85:22:ca:33:86:02:80:e4:3b:a8:cb:59:1c:76:56:0e:
40:c5:03:39:16:c8:bf:d8:2b:1c:1e:02:70:8f:67:e7:06:6a:
25:10:0f:9c:60:1b:40:91:51:8e:75:f9:de:93:1d:02:18:f5:
88:b5:f8:fc:d1:50:b5:46:05:f8:97:42:d2:21:98:47:db:be:
16:8c:9f:ed:06:f7:95:10:6a:a7:5d:94:2e:9b:d0:a0:70:ee:
26:61:22:81:1b:01:58:83:52:db:1b:c0:88:89:96:f0:ea:23:
91:0d:be:f9:6e:6f:35:db:65:39:ad:c0:d4:67:f3:27:7c:b8:
96:77:51:d7:86:51:58:39:d6:fa:48:ed:11:8c:fc:70:84:41:
61:d1:ea:42:38:eb:39:c1:ca:d2:ab:c0:63:eb:22:25:c9:08:
51:40:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:14 2025 by rpki-client