Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf67cb71-1406-4833-91e0-2273b95d3c83.roa
File: bf67cb71-1406-4833-91e0-2273b95d3c83.roa (raw, json)
Hash identifier: nAh1ZDf7GLBqpbKZpRqcq+VgcAnIT58wrIR2Gw/zyxk=
Subject key identifier: 60:0B:E4:73:01:7B:73:6F:36:78:C5:B1:49:CB:ED:B9:EE:E6:7D:48
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2FAA4D6045DD2E42DCEC7BB641E9064725BE7A2B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf67cb71-1406-4833-91e0-2273b95d3c83.roa
Signing time: Tue 28 Nov 2023 00:00:00 +0000
ROA not before: Tue 28 Nov 2023 00:00:00 +0000
ROA not after: Tue 02 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:aa:4d:60:45:dd:2e:42:dc:ec:7b:b6:41:e9:06:47:25:be:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 28 00:00:00 2023 GMT
Not After : Jan 2 23:59:59 2024 GMT
Subject: serialNumber=ad7997e218dc66d874d61e0fbaa2cdbca6007a30772bffd58f906e4991f1700b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:dc:d9:17:1b:31:f9:95:11:46:4f:07:85:
5f:80:e9:e2:1b:af:ed:ed:0b:90:f9:8c:ea:d9:ef:
72:d5:da:e1:7f:6d:55:3c:a5:44:c7:3d:e1:7e:83:
61:b2:b7:7f:ed:ba:28:44:8a:d7:3a:c9:41:e9:26:
da:b1:c7:71:ed:fb:19:85:7a:a3:bd:e3:b0:72:1e:
cd:ff:85:86:3e:fd:dd:97:e8:89:d0:14:b2:89:1d:
5c:8b:19:6d:8a:62:19:14:5b:9e:e5:35:56:44:de:
a2:b8:37:28:f8:5b:65:5c:84:77:d3:b3:95:ed:38:
03:fc:c8:19:15:0d:95:36:bc:e5:47:db:bf:28:d6:
7e:eb:e1:02:25:90:73:e2:74:c6:26:26:ac:30:00:
85:02:0d:4d:db:2d:05:0a:52:ea:0d:6a:14:e0:c3:
39:41:3c:25:64:f5:9c:ca:b5:12:89:11:01:3a:3c:
0c:34:40:53:90:c9:c5:df:d8:ee:58:ce:a4:65:c7:
7e:bf:ef:2d:d7:73:cb:98:09:59:52:69:4f:a3:49:
f7:d5:50:85:09:a8:e0:c3:7e:cc:3c:3c:23:a6:bc:
85:44:72:0d:48:a9:6e:16:e0:e3:c6:98:cc:49:b1:
ee:4e:ab:bd:00:cc:bb:7d:5a:be:b1:80:ad:72:e0:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:E4:73:01:7B:73:6F:36:78:C5:B1:49:CB:ED:B9:EE:E6:7D:48
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bf67cb71-1406-4833-91e0-2273b95d3c83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8c:d9:c7:5b:b6:ef:b5:dd:39:73:ab:b5:38:0b:47:c1:81:
d1:d1:36:8c:41:72:72:40:1c:73:5f:4c:27:49:c1:1c:9d:bc:
73:1b:29:14:76:d2:45:f9:3e:ff:bb:14:66:6a:1d:74:5b:4a:
4b:7a:f2:3f:d3:be:fc:96:59:96:38:d6:fb:22:e5:7e:65:fd:
b3:cf:04:fc:2c:85:f6:14:11:9d:b3:51:df:bb:ce:e3:53:74:
8a:d3:af:7c:0f:d9:80:1e:1d:35:68:48:c2:1f:c1:96:ae:60:
cb:76:5e:14:3b:30:31:dc:ec:ff:de:bd:e0:66:c1:ba:57:cb:
82:0d:3b:e6:2f:c5:42:bc:9c:d8:54:b5:d7:3f:46:e6:d8:74:
e0:86:88:6f:ae:3f:e6:35:be:e4:fc:99:e4:11:02:5e:2f:ae:
46:2b:49:8c:57:d5:ff:75:30:f5:c0:cd:e0:cc:fc:c2:2f:83:
62:8b:2e:8c:23:58:47:9c:66:52:42:0f:be:17:7c:48:95:76:
e1:37:78:ec:76:7b:8c:1c:06:a1:eb:5c:f0:b6:3e:7e:ff:b7:
af:07:c3:94:09:36:d5:83:dc:9b:51:67:b6:ca:3e:5a:d0:26:
f4:65:b1:13:00:a7:56:3b:11:d3:81:68:58:37:49:bc:2a:cd:
94:59:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:19:29 2025 by rpki-client