Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5bf8969-5083-4cd8-8eaf-2ed6adb5645f.roa
File: b5bf8969-5083-4cd8-8eaf-2ed6adb5645f.roa (raw, json)
Hash identifier: ik2ehRI97+8rTZWDf9/T+88mGTsdnS/08HGC7UM3Hhk=
Subject key identifier: AD:E4:BC:24:2A:FB:A4:5F:53:38:0D:F4:0D:47:58:44:EB:58:8E:78
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6F5DFF5D10DCB11887E921CB5E9DA5ACDD06E355
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5bf8969-5083-4cd8-8eaf-2ed6adb5645f.roa
Signing time: Fri 31 May 2024 00:00:00 +0000
ROA not before: Fri 31 May 2024 00:00:00 +0000
ROA not after: Fri 05 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:5d:ff:5d:10:dc:b1:18:87:e9:21:cb:5e:9d:a5:ac:dd:06:e3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 31 00:00:00 2024 GMT
Not After : Jul 5 23:59:59 2024 GMT
Subject: serialNumber=2a82c3459510dbccfd6e3f31c9ac961c5315817b058b46c3d3267ba3c4d863f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:03:94:b0:fa:77:18:52:7b:35:c4:43:4f:
5a:e8:25:15:83:f9:8b:b2:9c:ab:25:2b:7e:79:2c:
b0:fb:e5:b2:53:fd:fa:77:f3:41:cc:ef:a2:c8:bd:
77:84:bd:13:99:9d:0e:cc:0a:88:a1:43:72:1e:87:
67:9a:03:f9:f4:13:9d:02:30:53:fe:4f:7d:e3:12:
0e:8a:86:ab:c5:83:d1:5f:e6:85:4a:7e:ef:0f:92:
5f:13:79:1f:95:9f:55:15:59:52:fb:6b:cf:92:ed:
49:11:b3:21:40:c9:cf:ba:26:c3:c6:94:31:2b:a8:
64:6e:81:76:04:9c:39:de:3b:c4:e9:c9:78:9a:0f:
4d:e2:f7:26:85:aa:f1:78:7e:1a:c6:08:ee:a7:bc:
61:4c:24:5f:47:93:c3:23:57:50:d7:94:a4:99:cf:
d4:08:d8:96:57:70:6d:ad:01:02:f7:ef:15:b6:b4:
bf:5e:3b:30:f1:46:11:d1:01:b9:f2:a0:00:cd:15:
6f:bd:40:af:18:cd:ce:df:ae:6d:96:c1:dc:63:64:
06:50:2e:a0:f2:f2:b1:a0:5e:29:51:f8:a7:7e:0d:
34:d4:1b:36:42:a8:fd:2f:e5:95:fc:b1:e8:b3:b3:
71:6f:1b:86:e3:fc:1d:4e:54:f2:cd:93:d1:31:45:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:BC:24:2A:FB:A4:5F:53:38:0D:F4:0D:47:58:44:EB:58:8E:78
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b5bf8969-5083-4cd8-8eaf-2ed6adb5645f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
65:96:c9:91:eb:4d:71:bb:67:34:46:00:b5:34:3c:b5:52:14:
67:59:09:b0:72:b8:98:2d:e7:80:79:33:38:f8:f0:9e:8b:6d:
e8:33:a5:9e:9b:6b:73:ab:49:e6:a5:0f:b5:e0:09:a1:02:57:
fa:4a:c1:c7:99:20:69:54:88:a3:bb:f3:12:b1:8d:80:f5:b4:
8c:af:b7:5c:44:39:0a:da:90:b8:0d:e0:89:3d:af:82:2c:11:
96:7b:cd:f0:d1:af:af:d0:aa:f5:b2:38:c5:17:c4:79:53:41:
79:5e:a4:d5:88:28:23:c0:46:43:cb:77:d5:d5:15:3f:c9:d6:
18:5e:78:5b:a9:53:7f:e5:5e:7e:eb:e3:18:94:9b:70:8c:62:
b6:a8:7c:8d:18:fb:d0:df:fc:9e:5a:81:cb:da:39:20:49:bd:
23:99:be:ad:c5:fb:81:fd:0a:93:26:20:59:e5:86:21:fd:34:
13:74:47:b9:df:0e:ea:a9:5b:8f:81:a5:ec:88:82:34:e7:c0:
00:af:1b:35:52:65:80:44:38:34:df:ec:5f:d8:2f:ac:c0:3b:
27:d5:76:e5:a8:de:57:4d:63:79:a7:f8:1c:10:7f:bf:05:52:
b0:b0:dc:5e:a0:bc:a8:e1:f2:09:3a:7a:85:96:7c:45:34:ef:
40:4d:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:32 2025 by rpki-client