Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2b9ac51-d4c0-4599-9e48-c78b1136ba26.roa
File: a2b9ac51-d4c0-4599-9e48-c78b1136ba26.roa (raw, json)
Hash identifier: 4wR5jh8PT/fWHOvu6R0BJSGSIJtZqp3x/zMM5p24Lmw=
Subject key identifier: 8B:50:29:D1:37:7E:CB:E9:EC:74:E9:07:6B:6E:14:B2:B4:E9:00:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1BB61E9FAE12D8EB7ADDA65A082906EAAB568904
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2b9ac51-d4c0-4599-9e48-c78b1136ba26.roa
Signing time: Wed 04 Sep 2024 00:00:00 +0000
ROA not before: Wed 04 Sep 2024 00:00:00 +0000
ROA not after: Wed 09 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b6:1e:9f:ae:12:d8:eb:7a:dd:a6:5a:08:29:06:ea:ab:56:89:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 4 00:00:00 2024 GMT
Not After : Oct 9 23:59:59 2024 GMT
Subject: serialNumber=08aef88e6ddcbcdcfcc0084dd7fd0b4d33067b153e6d4cf4b2f714847bc98bb5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:9a:62:aa:0f:9b:6b:f4:cc:3f:88:c9:9f:
d1:ef:f4:a0:bc:e7:65:b2:e2:fe:98:d7:94:a8:78:
0d:eb:ff:3d:d7:0c:ba:d4:96:85:9a:12:68:f8:e5:
f3:6a:80:3e:5d:9e:68:4b:88:6d:e9:f8:4e:9b:d8:
7d:b7:f3:92:69:c2:82:d4:cd:aa:96:b4:65:b8:23:
90:e5:71:5b:bb:d9:91:4e:90:5a:2a:1e:2f:4b:e3:
93:4c:2b:b2:e6:ca:42:e4:11:92:8c:80:e1:ec:9e:
fe:04:e2:f2:24:c6:0e:92:a5:91:81:96:24:fc:7d:
e0:b1:0a:2c:11:7a:fd:4f:23:7b:e0:14:19:26:9b:
0d:37:8e:8f:30:b8:f2:c2:57:4b:1c:f0:ce:6b:bc:
24:de:78:6c:53:9c:9d:cc:1d:b7:cc:1f:19:5b:c2:
8e:8d:78:aa:6a:62:27:f5:14:82:96:cf:14:e5:ed:
68:c7:ae:6d:fe:cf:55:c4:f8:3f:96:49:3b:e4:19:
da:47:ab:71:ea:8f:ac:7f:d3:c8:ec:67:54:db:aa:
9c:44:48:3e:bf:35:58:87:ab:35:b3:1b:61:23:cb:
78:e4:84:e2:07:3d:87:a3:ef:e3:b8:c8:c0:c4:7d:
23:93:94:db:13:36:bd:47:8b:c5:88:16:11:20:c2:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:29:D1:37:7E:CB:E9:EC:74:E9:07:6B:6E:14:B2:B4:E9:00:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2b9ac51-d4c0-4599-9e48-c78b1136ba26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7f:c9:94:57:7b:37:88:07:63:c7:6a:9c:39:3b:17:a2:fe:
2c:14:2e:c1:35:cf:e5:df:bc:d8:05:16:e5:38:ce:f8:c6:44:
be:49:a8:cf:e2:13:84:87:d7:a8:1c:bf:d7:5e:57:b4:52:11:
d4:e9:8c:b2:0a:ca:6d:6b:2d:cf:73:68:fa:12:29:78:ea:5c:
9d:b5:64:3c:4f:80:d3:bd:2b:54:41:d7:9c:ae:f4:89:4c:5b:
4b:81:3f:ef:0b:38:15:e4:06:a1:9a:51:f0:53:9e:78:dd:93:
9f:c9:22:41:c6:b5:8a:68:62:46:88:c7:38:fc:70:8e:1e:64:
56:6c:f7:3b:25:2e:1c:4d:16:2c:88:7f:47:4a:79:3e:1a:fb:
c4:1e:c8:ad:7c:51:04:18:16:79:ed:ed:9c:a0:91:d6:d0:c1:
09:51:f3:ac:c3:4c:79:bc:b5:1e:e0:6e:9b:45:82:cb:e0:5a:
3c:3c:50:c7:e8:1b:4e:87:e4:93:ca:ad:51:0f:4b:f9:2f:6d:
6d:b5:cc:c5:31:1e:1b:dd:db:ac:81:1e:e6:74:0f:58:bb:f4:
5a:13:81:9c:5b:c3:15:95:85:b6:62:b8:6a:1a:a1:40:25:c1:
62:cf:03:3b:60:12:5f:a9:17:a6:25:9d:48:2e:32:44:83:1c:
2f:09:30:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:01 2025 by rpki-client