Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c12ca9a8-d30f-4e13-93e4-8ce35c90eb8b.roa
File: c12ca9a8-d30f-4e13-93e4-8ce35c90eb8b.roa (raw, json)
Hash identifier: 6QhyNw0lxoIU6ndZuftjQyLggARH1dgExh7lCKOTnqc=
Subject key identifier: 46:11:77:12:5D:6B:05:9D:45:C3:42:24:74:E7:C0:3A:4B:A3:5F:DE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 33FA66CD471F2E9AEAA5DEF67C1C4461F010A8E7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c12ca9a8-d30f-4e13-93e4-8ce35c90eb8b.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fa:66:cd:47:1f:2e:9a:ea:a5:de:f6:7c:1c:44:61:f0:10:a8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: serialNumber=e0822ba278c8b76d947466feb7f0cdb620778178cffe40a65046b1689e64d757, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:0a:95:24:fa:25:97:e8:8d:fc:8d:e0:31:
b9:af:3a:8f:d0:ff:cc:5f:ba:93:fa:ae:46:f0:d1:
1d:42:99:f1:4b:d4:99:8c:56:53:11:e5:57:83:36:
b0:41:e8:35:ad:6c:52:2c:b2:72:81:7d:fc:d0:71:
b5:0f:c2:a3:3e:b1:39:2a:4f:15:1a:a6:c1:6e:1d:
9c:4b:c3:4d:f5:91:a9:1b:53:8a:43:9d:a6:2e:84:
83:8a:8b:88:88:f9:1e:94:4c:18:96:4f:e0:30:5c:
bf:3b:5e:2a:49:eb:18:de:dc:9c:23:83:7a:6b:5a:
72:59:3e:00:a3:91:68:ea:0e:2b:f7:d1:0e:18:19:
4a:d7:3b:9d:14:73:bb:10:20:d1:8f:d5:7d:fb:a6:
b0:52:13:a3:c3:53:ef:05:46:60:b2:a6:f7:01:ac:
41:df:45:22:3b:c1:76:61:a5:b7:21:88:84:e5:69:
ea:a6:c7:41:cd:28:10:73:a7:69:bc:2f:d2:e5:94:
44:3a:4d:23:93:e5:7d:76:57:a0:1e:99:85:07:e3:
c3:d4:1e:15:26:7c:16:70:20:9b:94:55:d1:6f:2b:
8a:c9:dd:d5:d9:f9:38:10:e8:d9:f8:b2:2d:81:bd:
30:a3:ca:d1:04:c3:80:85:9b:32:92:29:00:60:72:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:77:12:5D:6B:05:9D:45:C3:42:24:74:E7:C0:3A:4B:A3:5F:DE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c12ca9a8-d30f-4e13-93e4-8ce35c90eb8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bd:1b:f2:7e:46:49:89:7d:f4:c7:17:03:2f:61:d9:87:02:
61:6e:d9:f7:53:1a:8a:75:8f:55:81:4c:b2:e6:19:8c:40:f8:
4b:ee:8a:31:d7:a5:71:fc:1b:60:ba:61:22:7c:8d:97:b4:0a:
b9:a3:a2:60:ce:53:e1:39:a4:82:a1:f9:e1:9e:80:ce:c2:e6:
59:1a:a1:6f:70:1e:dd:45:40:b9:ca:32:84:4b:8d:28:d9:94:
77:af:a1:c6:51:bc:62:e9:66:9f:aa:34:83:13:f6:27:b0:48:
ea:99:19:af:a3:9d:d6:16:2c:b2:e0:6e:f1:64:e3:30:6b:dd:
88:8e:21:4e:8a:68:8d:69:0a:58:9d:0a:67:ab:5f:1b:b8:76:
f0:53:6f:92:32:2c:88:d0:0f:6f:87:f4:9e:15:66:4d:da:cc:
ff:98:da:49:42:09:88:ce:35:d0:6c:69:fa:55:b2:67:f4:a6:
9c:b3:6a:9d:91:3c:c4:8e:9d:83:2b:2d:0d:76:0e:e0:ec:2c:
72:a8:6f:b6:a7:0b:21:43:74:9c:cb:50:29:2d:07:26:3a:37:
d5:0f:e2:72:35:c8:87:48:3d:aa:55:d6:59:7c:8b:56:3e:8b:
d5:cb:07:73:c2:5b:19:98:b2:1e:bb:04:9f:1b:7d:6d:d2:a9:
95:bb:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:35 2025 by rpki-client