Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b223e65c-8e53-4b16-956a-50bbfc1a74bd.roa
File: b223e65c-8e53-4b16-956a-50bbfc1a74bd.roa (raw, json)
Hash identifier: rBsDX8mCsQ1ZLRtTHWxmwiFSUxnbO9/9C2WjrOkhPOE=
Subject key identifier: 8C:97:D2:EB:FA:9A:20:EA:56:12:EC:7E:EA:F6:C0:CE:58:9E:B7:53
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EE752DF546C2B87C6B3989A29CEF6B3160AB2A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b223e65c-8e53-4b16-956a-50bbfc1a74bd.roa
Signing time: Mon 07 Oct 2024 00:00:00 +0000
ROA not before: Mon 07 Oct 2024 00:00:00 +0000
ROA not after: Mon 11 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e7:52:df:54:6c:2b:87:c6:b3:98:9a:29:ce:f6:b3:16:0a:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 7 00:00:00 2024 GMT
Not After : Nov 11 23:59:59 2024 GMT
Subject: serialNumber=e4b26c1fe0472e20e42b9b725e625c3d94b3e2634097c0da189b243bc520ea11, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:a5:47:36:21:77:47:f3:99:e7:b9:ca:f4:
0d:1e:18:0b:8f:be:6d:14:e5:85:2d:fb:18:56:ca:
d3:b2:03:43:3e:f4:f5:85:3f:8c:f5:17:78:c5:28:
74:80:e8:5f:82:b3:b2:27:aa:cf:3a:1b:a8:04:d9:
d2:d5:cc:53:4e:1f:46:5e:b0:b8:11:e3:32:98:17:
e6:d8:22:1a:f6:73:09:a8:a4:46:a4:e3:4f:d1:a9:
10:1e:94:bd:9e:69:6a:6a:50:10:7c:11:dc:ac:71:
bd:fb:b6:8e:a0:1d:81:5e:c3:1e:2b:04:3d:3c:37:
17:71:66:71:99:66:21:09:74:cf:55:9f:bf:df:97:
ae:fc:90:88:6d:28:c7:52:41:76:46:ab:9f:66:7f:
dc:60:50:6a:42:be:9c:a9:52:e2:00:de:3b:84:59:
b7:7f:55:a9:e3:2b:48:7b:98:9c:7d:64:b5:2a:e1:
78:f9:dc:e0:75:f4:4d:e9:fb:64:66:48:6e:fc:c3:
d5:4b:ed:b2:36:51:36:f4:b3:15:3c:c0:31:81:90:
16:45:21:46:8b:41:d1:57:7d:e0:b7:84:58:3e:5e:
cd:2d:fb:13:57:65:ac:11:88:3e:c3:95:c2:3b:14:
33:cb:9b:ff:ce:50:d4:c9:66:29:30:37:85:d0:67:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:D2:EB:FA:9A:20:EA:56:12:EC:7E:EA:F6:C0:CE:58:9E:B7:53
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b223e65c-8e53-4b16-956a-50bbfc1a74bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:50:42:89:67:d2:8a:37:cb:ea:88:77:74:bf:1e:67:13:40:
ee:f5:f0:25:26:f1:01:ec:8a:a0:b4:8f:f6:32:f4:6e:4f:9e:
ab:75:61:76:02:31:69:b8:ce:1e:b4:78:32:c0:af:63:58:9e:
e3:ae:ea:2c:cb:b4:1b:f5:24:9a:06:9d:34:26:b9:d2:2a:f8:
fb:59:bc:37:b6:17:bd:22:b9:9f:f3:08:43:16:09:13:e6:f2:
08:bf:5c:23:5c:fb:ba:e9:8f:6a:8f:d1:4c:2b:b1:1a:61:c1:
72:b3:a1:cb:9f:32:c9:ce:5f:a0:77:22:18:3f:40:90:e0:34:
42:e1:e6:f8:6c:e9:fa:b6:38:80:2d:f4:b3:0f:26:e2:47:c0:
e1:02:83:49:31:fd:57:6a:5d:7b:d6:fd:34:38:a7:36:62:3b:
ef:1c:f6:6c:fa:79:a5:18:3e:4c:c6:fc:0a:d2:72:eb:be:8a:
5d:80:aa:74:fb:b1:a4:43:a9:05:65:e5:24:85:9d:6b:e3:2b:
de:ac:21:ef:0f:45:b6:53:da:74:19:18:87:e7:01:55:c8:e2:
10:cc:0f:42:19:d8:10:66:07:36:7a:f2:c3:fd:a7:8a:7a:e6:
12:c6:83:ee:3d:f4:96:a8:db:9e:28:a6:b1:18:16:06:e9:0a:
17:17:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:02 2025 by rpki-client