Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3b50427-7d2c-4921-a61a-bf233b126cb0.roa
File: b3b50427-7d2c-4921-a61a-bf233b126cb0.roa (raw, json)
Hash identifier: r1ggVk5eDq+7uxV39kv+Hk4jrhW0hhXPhtjIx6njeOk=
Subject key identifier: F3:58:41:42:31:45:B7:DC:E5:BE:16:07:54:53:42:8D:41:1F:47:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 079125B10D72424C1911DD44527E5ECACA408B49
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3b50427-7d2c-4921-a61a-bf233b126cb0.roa
Signing time: Fri 05 Jul 2024 00:00:00 +0000
ROA not before: Fri 05 Jul 2024 00:00:00 +0000
ROA not after: Fri 09 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:91:25:b1:0d:72:42:4c:19:11:dd:44:52:7e:5e:ca:ca:40:8b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 5 00:00:00 2024 GMT
Not After : Aug 9 23:59:59 2024 GMT
Subject: serialNumber=4f00b2a4fde8fd41389e88d56b6f5da24a83ec39434d9d8c314eeeea7482a3cc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:e3:03:04:70:d3:75:fe:79:88:5a:58:d5:
c4:cf:9b:16:72:d7:a0:4c:8a:e5:80:94:e1:c1:87:
24:fe:1a:d7:82:d8:24:ee:6e:f4:41:47:74:ee:9f:
b7:a2:a5:2c:12:2e:1b:eb:16:88:3e:8f:59:4b:41:
2b:fe:ea:68:5d:20:f8:c5:a0:4d:ac:a6:a6:82:8a:
76:7d:55:b6:a1:e5:6f:63:9c:71:24:b9:7a:e1:03:
35:09:37:ce:f1:13:c7:cf:87:95:4f:49:4c:33:b7:
1f:70:b9:ab:c8:1b:87:59:68:18:a3:42:d5:01:61:
26:d3:95:86:be:97:84:4a:06:f4:d0:96:ce:ff:56:
3b:d3:6d:c2:b9:3a:06:6a:26:b1:cd:b7:1d:72:99:
15:1e:3a:54:f9:d1:f4:25:38:d3:cb:66:fa:82:ad:
b1:9a:33:a3:b0:3e:8b:07:a9:c2:e0:20:ce:19:5c:
36:2f:43:5b:54:23:36:7c:50:44:46:a5:19:e0:84:
5a:19:a9:db:8c:41:84:8f:cf:1d:f0:b9:e0:f9:0e:
6f:66:d0:26:c9:7d:70:0b:25:4c:84:da:7d:29:74:
a1:05:35:bc:8a:d4:12:3f:31:24:54:c1:cb:d8:07:
c7:3e:af:74:32:78:a5:b2:95:49:78:f9:96:a9:99:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:41:42:31:45:B7:DC:E5:BE:16:07:54:53:42:8D:41:1F:47:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3b50427-7d2c-4921-a61a-bf233b126cb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:54:cd:70:90:80:7d:d2:26:8e:b4:f2:42:25:9e:3a:1f:b0:
55:00:a3:ff:3f:0b:21:72:82:cf:ea:ab:76:b5:e0:16:5b:ff:
6d:92:b9:01:16:06:d6:8a:88:f1:70:95:af:18:f5:2d:9a:03:
a0:7a:3a:e8:64:2a:54:9c:ce:3b:57:53:8d:8a:29:1b:8d:ae:
04:d6:bf:c6:52:de:6d:56:70:68:db:1b:7d:99:34:ce:4b:c4:
ec:c8:bc:77:d6:aa:61:1a:bc:2f:08:0f:aa:c8:75:7d:bd:52:
82:45:99:3e:9f:d2:86:5c:8c:e0:87:1c:0a:2b:d3:86:6b:64:
9a:30:ed:67:5a:9a:79:34:27:81:94:97:aa:1b:65:f0:4c:a3:
cc:9c:0f:dc:d7:0c:1d:6a:67:e8:1c:1d:29:b2:b1:ca:d4:86:
61:3b:82:b1:62:a2:9a:4e:69:5c:d8:90:ce:d0:a1:b0:e2:a1:
8d:c5:85:f0:b9:35:1b:15:5b:03:4d:30:2b:cf:eb:ef:94:54:
d2:79:de:46:ac:05:18:12:2d:a0:be:3c:a5:9b:be:78:ce:e8:
65:08:55:7e:76:ee:02:be:ef:5e:8a:24:61:c1:45:72:83:28:
b3:75:29:0a:ee:ef:ea:bc:c1:11:1c:87:26:51:e8:48:b5:59:
f4:7c:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:46 2025 by rpki-client