Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9327494-1539-43a1-bcd9-5b6c04ca3a81.roa
File: b9327494-1539-43a1-bcd9-5b6c04ca3a81.roa (raw, json)
Hash identifier: qZIXhnTRo5pHvusnfn6vDlf0f0oBN9gtiSPYl993HGc=
Subject key identifier: CD:E0:03:DC:31:29:73:89:51:22:81:BE:DE:7E:B6:8F:34:34:47:F2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 64E13EAD6D37489A842BE704AC4F8351AE4569C2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9327494-1539-43a1-bcd9-5b6c04ca3a81.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e1:3e:ad:6d:37:48:9a:84:2b:e7:04:ac:4f:83:51:ae:45:69:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=15691fa5b95c88172a711265548d33d4beab34923f75753645c2bd92be94d7ce, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:e0:0f:e1:3c:a0:14:a2:e4:51:0b:09:0e:
63:a6:2b:49:a2:18:c9:2d:2e:f4:3b:a9:8a:d3:a5:
a2:11:50:d9:25:bd:85:fc:d4:1a:af:c1:da:13:b5:
28:d8:18:20:2a:91:f1:9e:77:2c:2d:cd:ef:dc:ec:
c1:0c:e9:21:4f:4b:ad:07:6b:72:46:27:5b:d3:d5:
c0:29:46:71:b6:de:17:61:f1:f6:30:e3:b2:bf:f5:
97:e2:3a:1f:c5:99:60:7b:9b:e7:b0:bd:6b:fb:b4:
a8:5a:ad:bb:6b:1f:31:87:a7:57:f9:0d:a4:dc:a7:
af:56:9f:4c:3f:ff:42:61:fa:cd:ea:85:6f:7a:e8:
2c:e1:43:fb:43:09:e4:6d:9a:0c:5e:92:72:28:f0:
10:47:e8:27:b1:67:c0:38:e2:ca:ad:39:c9:19:1e:
c4:b6:06:f5:d2:36:0c:8d:04:08:c7:cd:02:02:f9:
e8:c5:e9:2f:55:66:ca:42:96:c8:ec:46:72:51:60:
45:6d:b4:4f:36:e4:94:27:e0:b0:1b:3d:2d:f2:8d:
c6:4d:3f:e6:4d:73:56:7c:f0:06:41:ce:c0:64:a4:
ca:fb:42:61:77:0d:f8:d2:c4:5a:1a:3b:64:ec:a6:
05:22:09:0c:82:a9:6f:2f:08:84:5c:f6:fa:50:54:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:03:DC:31:29:73:89:51:22:81:BE:DE:7E:B6:8F:34:34:47:F2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9327494-1539-43a1-bcd9-5b6c04ca3a81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:22:b8:79:05:37:19:10:9f:d3:9c:07:43:4b:1a:fc:46:99:
1f:58:ca:5e:fe:76:4f:22:b9:ab:be:31:91:57:82:47:63:be:
14:70:9d:8e:9d:da:22:0c:c4:21:a8:1d:c8:ed:62:75:74:82:
5f:3d:46:2e:11:52:ab:93:3b:11:e6:bb:2a:c6:ad:f9:e6:a9:
fe:8b:88:d4:71:4e:24:be:7c:43:e5:79:76:b9:e4:90:f4:82:
fc:83:3d:6f:bf:08:f4:23:4c:6b:47:b8:e8:e1:1a:a7:40:c2:
3d:f6:86:48:8b:d6:23:42:dd:8d:c5:04:42:36:59:59:db:a7:
39:41:04:1c:af:21:ec:58:23:4e:56:90:5c:52:46:7d:90:87:
9d:a5:dc:75:96:47:3b:1a:27:09:1f:77:da:9e:38:63:ba:c0:
81:84:f4:a7:64:aa:2f:9e:d3:35:c5:37:e8:d9:59:d9:c1:bb:
78:82:cf:0b:6c:8f:8e:cd:1d:52:e2:73:9f:58:18:a8:10:e4:
cc:8f:37:0b:fd:75:1c:87:45:8b:3d:de:3a:07:c0:2d:a7:33:
78:19:c6:2b:3d:5f:93:ba:c9:a9:e3:ea:2a:23:0b:74:93:f4:
e9:37:c7:9f:7a:57:b6:99:0b:50:6a:b9:af:64:0c:79:28:d4:
4f:7e:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:00 2025 by rpki-client