Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1269483-8e40-4a8b-b629-ccc111e02f6e.roa
File: a1269483-8e40-4a8b-b629-ccc111e02f6e.roa (raw, json)
Hash identifier: JwJodCTzGYU/KWfshE1tHKUPTIElMM/LWEVHhG/ljbI=
Subject key identifier: 23:BC:E4:82:B5:A4:38:D3:66:E7:F8:93:66:EF:5D:55:0C:D2:26:CB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3F029BB2CFCE8A89ABA74F47FAFB7AFD792E12AA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1269483-8e40-4a8b-b629-ccc111e02f6e.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:02:9b:b2:cf:ce:8a:89:ab:a7:4f:47:fa:fb:7a:fd:79:2e:12:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: serialNumber=1b6460ea36718631cb0ccb8e330aa2539073f6a532a46cf7baa5425b16127019, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:f9:03:47:b3:50:50:26:1c:81:03:65:93:
d2:ea:b7:ba:7d:26:ff:2f:cb:fe:5a:f3:70:70:1e:
6c:97:93:d2:c4:7d:39:fb:dd:2a:87:7c:8f:7f:0a:
ba:6d:97:2f:24:2c:18:64:8d:5c:ec:67:8d:fb:68:
cd:c3:69:65:c6:db:f0:88:bb:3b:05:5c:a7:f5:1c:
2e:e6:4b:61:1d:33:cd:f7:09:f1:ec:fa:84:2e:74:
1d:9d:ec:78:93:e5:7a:c3:12:e4:29:d9:60:b6:94:
40:42:7d:7a:e2:b6:4e:b5:ba:8d:7d:a9:31:c0:af:
58:0c:86:4f:88:16:05:54:35:4d:24:30:8e:47:f2:
e4:1d:58:e6:92:75:a5:c9:1c:80:1e:f2:c9:0b:40:
be:d2:0a:2a:62:a4:fe:2a:9d:25:4e:08:d5:7f:5a:
60:2a:1a:cc:69:59:05:26:4a:47:77:13:15:fa:d1:
28:48:04:9c:3a:53:b6:70:0f:29:c2:e4:f3:42:b5:
56:cb:fb:b7:84:67:a6:19:22:ee:9b:56:57:bd:c0:
82:c1:51:bb:f4:e7:fc:f3:e6:3b:15:98:b1:23:e6:
56:c5:8c:b5:e4:17:3e:49:f6:d4:71:bc:17:ad:37:
ac:bd:c7:81:ff:0d:39:4f:e6:8f:2d:5f:d2:f6:84:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:E4:82:B5:A4:38:D3:66:E7:F8:93:66:EF:5D:55:0C:D2:26:CB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1269483-8e40-4a8b-b629-ccc111e02f6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ea:24:41:aa:a3:76:6d:dd:3e:43:9d:d8:b5:21:fd:47:c3:
b6:08:98:c5:64:e7:93:d3:d5:d1:e5:31:5d:23:b1:6e:80:a1:
97:52:b3:0c:37:ed:46:43:c5:1b:61:ad:4f:8f:7b:7e:bf:73:
80:43:bb:09:ad:ee:6e:34:ee:77:c8:3d:34:0d:d8:41:7a:a5:
73:50:5b:1c:af:47:c4:0b:e3:26:52:aa:3e:15:9b:7b:be:11:
92:6b:de:00:e2:16:49:60:91:5a:0d:ad:77:e7:73:ee:2f:35:
09:a3:45:06:b1:66:15:02:3a:0c:a2:f4:ce:9e:6e:c9:63:0c:
d0:09:ce:5f:43:70:46:95:5e:c2:cd:b7:60:5e:38:c3:0a:c0:
2e:88:89:d9:7e:e0:55:68:1e:51:00:db:96:d0:32:56:dd:8d:
6f:6a:22:48:3e:42:3a:34:da:eb:9a:b9:70:df:b4:52:42:c8:
a2:98:e5:d4:ad:b1:e9:dd:bf:47:30:b2:7b:75:35:b9:82:35:
2d:d5:02:4f:ad:1f:79:51:09:0c:89:b3:ab:b1:90:3e:ad:8b:
45:41:a7:dc:3d:22:1a:80:e0:0e:5c:d9:a5:a2:28:ca:6a:b7:
c1:67:ca:04:00:ba:42:94:aa:b2:34:53:d9:fd:05:a7:43:4a:
d3:a4:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:28:31 2025 by rpki-client