Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a53df44d-3460-4d14-99c1-7f0fc612cc45.roa
File: a53df44d-3460-4d14-99c1-7f0fc612cc45.roa (raw, json)
Hash identifier: 0rlovjQMYhWqEtFulsWgHaM89jmZCjF8T/MagQHMlH0=
Subject key identifier: C7:62:67:9B:C6:3A:B2:23:42:B1:3A:06:59:75:E0:74:63:23:34:15
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3EF9F89A649E3FD7A7195EBA9E30AAFDE9DE1F20
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a53df44d-3460-4d14-99c1-7f0fc612cc45.roa
Signing time: Sun 10 Nov 2024 00:00:00 +0000
ROA not before: Sun 10 Nov 2024 00:00:00 +0000
ROA not after: Sun 15 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f9:f8:9a:64:9e:3f:d7:a7:19:5e:ba:9e:30:aa:fd:e9:de:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 10 00:00:00 2024 GMT
Not After : Dec 15 23:59:59 2024 GMT
Subject: serialNumber=e2d515368af1693017419d9feb3b493dd14944913b1ec8aacd98bf4bf138710d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:db:5c:e6:e3:98:1d:cb:54:27:a5:60:0b:
c7:f9:38:16:d3:41:d5:33:50:b5:14:48:43:54:39:
13:b8:7a:bc:8f:5c:02:dd:bf:d7:be:38:27:eb:9e:
83:99:43:9e:f6:7a:18:3a:0b:78:40:66:f2:03:dc:
3a:01:f2:a8:4a:ee:92:e6:f5:7e:f4:06:80:ab:b8:
1b:be:e8:54:a5:6a:8e:06:ba:6a:78:83:50:01:d8:
58:22:2c:81:54:a1:a6:1f:f9:fa:e5:eb:81:15:73:
e9:ce:69:16:40:22:6d:57:e4:1a:d2:a3:5c:20:10:
36:e2:08:dd:e0:bc:a7:21:b6:9c:55:29:2c:7b:a0:
70:ba:00:18:93:d4:7a:76:32:3d:f4:7b:34:d1:f6:
c0:92:c5:4f:47:6d:b3:90:bf:e9:5a:45:74:16:df:
04:a5:46:84:64:cf:f2:98:55:41:99:b2:4e:55:25:
03:5d:ba:b0:32:67:ae:5b:bc:00:a7:2f:38:a9:f2:
77:0f:2e:b7:4b:b3:72:e1:b2:2f:f1:f6:dc:11:d2:
8e:71:0a:03:90:03:0e:47:63:2e:ca:3d:d6:25:cf:
0e:fa:0b:9d:2e:1d:b9:62:0b:80:df:d5:fd:b2:4d:
43:9f:2f:23:31:74:18:1e:17:a2:03:79:97:7a:ab:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:67:9B:C6:3A:B2:23:42:B1:3A:06:59:75:E0:74:63:23:34:15
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a53df44d-3460-4d14-99c1-7f0fc612cc45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7a:c3:9b:90:29:03:b6:5b:26:db:a1:32:cb:73:8a:91:64:
0b:f4:fe:d8:18:ca:42:72:6f:9f:e9:73:37:2e:75:1b:01:4a:
07:99:1b:f3:0d:77:f5:04:d5:df:66:0d:b4:0d:19:04:a1:6c:
0f:1a:df:8a:0a:f4:31:03:b3:95:90:77:fe:b6:ed:c5:35:2d:
5b:9e:cf:ff:e3:a9:05:69:af:88:7d:ee:0a:93:41:25:e0:09:
d5:34:c4:55:26:f3:fd:e9:f9:5b:72:c2:03:93:fd:e0:6f:f5:
4e:69:04:23:c2:a2:96:67:69:52:4f:0c:6e:a4:c0:0e:b4:70:
4b:fe:8b:c2:d5:6b:09:a9:57:66:df:29:f2:16:05:e3:10:d4:
73:52:6d:e8:79:50:03:4c:4b:92:fc:5a:1c:6b:3f:28:76:ab:
49:af:ec:3f:65:b8:32:03:81:4d:36:9d:86:2c:45:c4:db:0a:
05:76:b8:fb:c4:1a:6e:93:e5:ec:4d:cc:63:36:f5:fa:f3:5e:
cb:66:01:3e:ac:c9:56:d4:1f:43:d7:4f:d4:31:5c:f0:9c:1d:
19:73:9e:db:21:a7:75:1b:b0:fc:f2:2d:96:89:d8:e1:97:66:
85:94:07:6d:04:64:b4:56:e7:1c:d0:1d:e7:bd:60:d4:b6:19:
fd:02:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:34 2025 by rpki-client