Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bbcda7b7-27d1-40b0-86f3-09ff124b2cb1.roa
File: bbcda7b7-27d1-40b0-86f3-09ff124b2cb1.roa (raw, json)
Hash identifier: sN/SY5vK1z7SZ9vR3JXzGyS8Y2pA+B6FoHAdOe6IAm0=
Subject key identifier: 39:5B:0D:5C:08:E5:A0:D7:4F:16:FB:E1:68:60:77:C4:19:6A:86:38
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0B3DBD35232EFB8A610A2530F6332C715924A88F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bbcda7b7-27d1-40b0-86f3-09ff124b2cb1.roa
Signing time: Mon 20 Jan 2025 00:00:00 +0000
ROA not before: Mon 20 Jan 2025 00:00:00 +0000
ROA not after: Mon 24 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3d:bd:35:23:2e:fb:8a:61:0a:25:30:f6:33:2c:71:59:24:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 20 00:00:00 2025 GMT
Not After : Feb 24 23:59:59 2025 GMT
Subject: serialNumber=433ce1b522286b86b345ac2e19afc50d5c643bdcbcbb8bb12778b5794fa381b6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:6d:89:87:4b:68:c6:9e:60:8d:81:c9:07:
1c:4d:72:47:e1:25:d2:c8:8c:d5:9a:8d:99:49:9b:
22:b4:5f:e2:f8:3b:78:82:b4:22:24:e3:7e:4f:5c:
cc:e6:53:ea:6b:e8:59:60:06:2c:10:43:64:bf:51:
51:59:d0:5f:de:aa:69:eb:23:13:54:c2:26:c3:fb:
75:e3:64:d5:32:b6:99:4e:f4:85:4d:5a:bb:60:41:
60:b6:ad:86:44:ff:5f:7e:f9:77:ee:7b:dc:2e:58:
59:55:8b:dc:fe:6e:cd:30:2e:29:2b:8c:f7:2e:b9:
45:fb:6b:22:d0:ec:57:e1:a6:c4:f8:83:63:e1:24:
20:ec:f0:95:ea:ad:24:10:14:17:51:2a:23:b9:f5:
96:f8:f4:18:9e:eb:59:92:85:ad:52:58:b5:0d:84:
0a:08:7d:ea:3c:18:b7:5e:02:56:e7:cc:dd:b8:78:
da:49:09:71:35:95:87:d0:c0:33:a1:1a:fb:43:b6:
70:05:03:30:e9:b1:6a:a1:ef:42:ec:2d:6a:01:e1:
21:5a:ca:b7:f2:f4:c4:80:27:34:0b:05:d2:72:62:
ea:63:1d:ab:f4:d0:85:1c:a3:4a:11:53:0b:b9:01:
a1:2e:d4:54:a0:f7:fb:03:4f:86:ad:67:d2:5e:85:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:0D:5C:08:E5:A0:D7:4F:16:FB:E1:68:60:77:C4:19:6A:86:38
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bbcda7b7-27d1-40b0-86f3-09ff124b2cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:df:c5:e3:5a:41:8d:f7:f4:fb:07:03:c1:e3:6f:4d:4b:0d:
c9:2d:22:61:a6:2b:76:1c:22:de:28:de:3b:ba:b2:f4:2a:ff:
ae:9e:fc:76:35:a7:36:38:33:c4:d6:e7:0c:fa:3f:91:9d:08:
56:c2:d2:7f:ff:54:32:43:43:0f:9e:c6:dc:48:de:e1:f2:93:
22:9e:8d:07:7c:fe:84:68:cc:9d:9c:ea:11:22:5c:7d:ff:97:
70:cc:03:61:48:67:93:3f:49:5b:7e:eb:39:78:e3:e9:34:f9:
13:e7:fe:dc:22:01:6d:93:27:8c:79:47:f2:35:39:f3:22:1f:
1f:1b:cd:a8:d1:f7:50:bb:8e:63:a9:a2:45:07:ed:dd:20:b7:
e6:80:a9:48:eb:47:46:33:ee:ba:83:7e:2b:55:fc:ec:4d:08:
d8:82:a3:7a:d8:ff:41:5e:70:9f:eb:26:ea:92:43:73:9a:37:
ee:0c:db:d8:4b:19:45:68:a8:02:c8:d8:a3:c2:e1:aa:f8:fc:
d5:20:9c:5e:8e:a7:b9:30:3a:8d:9f:e9:b3:d7:d7:95:56:fb:
0f:da:58:7e:36:a2:62:4c:a8:53:a3:1f:cb:06:38:ae:15:2d:
c1:ba:7c:28:97:75:1a:51:44:1d:f2:cf:44:84:0c:d3:a4:77:
fc:9d:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:51 2025 by rpki-client