Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d9d04d-c88f-40dd-b5ad-2d37c996901f.roa
File: c1d9d04d-c88f-40dd-b5ad-2d37c996901f.roa (raw, json)
Hash identifier: fLYvfE6GDAjAKxe5pAWEEjrsG5pKytoQlg8qyidUuwI=
Subject key identifier: 74:3D:8B:FD:2B:47:B2:AE:4B:04:19:60:86:89:15:FA:B2:52:7C:F0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 305AB057E73682AD12F4B9021E7695125FD98CF3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d9d04d-c88f-40dd-b5ad-2d37c996901f.roa
Signing time: Mon 17 Feb 2025 13:43:20 +0000
ROA not before: Mon 17 Feb 2025 13:43:20 +0000
ROA not after: Mon 24 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5a:b0:57:e7:36:82:ad:12:f4:b9:02:1e:76:95:12:5f:d9:8c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 17 13:43:20 2025 GMT
Not After : Mar 24 23:59:59 2025 GMT
Subject: serialNumber=f0a6edbd1edeea35fac5d162178ba4b9b587f58cee77b6a72d2c5bd913d70d8b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:b4:8b:76:72:2d:73:86:11:c7:f5:e3:f4:
a6:a7:75:0f:d5:2e:c3:21:b9:c8:3a:9d:d1:18:b9:
a8:05:16:7f:d0:84:19:a2:4e:e6:70:a6:fc:8a:63:
d5:e8:8b:d2:91:58:6e:de:d0:57:8d:c0:05:43:02:
7b:f1:05:54:35:a4:aa:4e:6e:4d:81:0a:c3:7b:2b:
5d:ca:98:de:be:63:ad:2d:7c:0a:af:6e:7e:17:61:
ba:2f:d5:a6:0e:d0:e7:0a:0a:53:6e:c4:a8:77:a6:
c1:a2:ad:6c:9e:01:ba:ee:e4:91:51:5a:ac:fe:8e:
a6:0c:f1:52:40:89:2b:b6:cc:72:63:95:3b:1c:e0:
8f:19:35:f0:9a:99:ff:ab:96:59:f1:10:37:d5:44:
90:6d:bf:7e:be:ea:23:54:7e:65:8e:fa:2a:de:2a:
bb:41:75:c1:fa:6b:8b:43:c5:18:14:c1:ab:be:e9:
ce:2b:b6:20:eb:17:0d:a2:93:d1:84:93:6d:0b:2f:
cc:65:75:4a:95:fb:70:e3:96:8e:7a:54:89:21:9c:
d6:6a:63:07:bd:04:19:f5:f0:99:69:04:3b:50:90:
27:a4:41:e5:68:49:86:44:1b:57:82:0d:8c:9d:f3:
0e:7e:a3:b1:54:89:10:c4:80:a4:32:b4:96:b9:9e:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3D:8B:FD:2B:47:B2:AE:4B:04:19:60:86:89:15:FA:B2:52:7C:F0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1d9d04d-c88f-40dd-b5ad-2d37c996901f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:93:0f:40:93:9a:27:8e:8c:31:f6:cc:91:88:6f:6e:6e:b0:
f8:cf:27:46:88:49:89:8e:de:dc:02:03:70:fa:de:65:cb:b2:
8a:fc:3a:67:df:66:76:76:e9:20:93:b7:0a:e0:72:7e:3a:c3:
5e:0c:1c:2f:0d:3b:1e:cb:db:b6:05:0a:23:a6:51:1e:ac:29:
86:cd:15:4f:15:63:4c:f0:74:d1:db:ee:89:12:de:fb:d6:fb:
18:98:8b:e7:7c:60:a5:4e:c4:2f:49:0c:70:27:99:e4:8e:95:
35:98:45:ff:82:a0:3e:b1:37:6f:d4:eb:0c:67:36:a5:47:c0:
e4:b7:90:49:20:8d:89:3e:be:1e:4c:1e:e0:ee:e3:44:3a:17:
49:52:da:06:ed:e6:c8:68:0c:e8:e7:b5:37:0b:12:11:89:c1:
3e:b2:dd:0b:ef:3e:1f:8b:a1:3f:81:e2:ac:fc:a2:31:c1:a2:
92:e4:3c:d7:be:ba:26:a7:99:0d:83:c7:f4:43:0e:f9:24:a1:
8a:37:ba:ed:3f:fc:c3:bb:cc:6c:d8:08:67:da:d6:0c:ff:d1:
c4:66:2f:26:c2:30:03:fe:0b:3c:41:d5:8e:d7:d0:48:15:44:
e7:6d:f6:f1:06:49:14:8f:e7:a0:0e:91:4a:a6:c9:a5:ec:e6:
14:b4:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:54 2025 by rpki-client