Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c402d668-9c02-413e-8f52-b2ec4ae27bf0.roa
File: c402d668-9c02-413e-8f52-b2ec4ae27bf0.roa (raw, json)
Hash identifier: n77NxhhD1xqf3dBCgTdPjPjv7Qb8ikLPRoG9ziiXXoI=
Subject key identifier: 12:D5:F2:6E:8D:1A:B9:B0:8F:B1:84:8F:18:91:3D:DD:D0:F4:D1:58
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 10DB0C43A939FFDA65E9BC34D8267C5AA89B8977
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c402d668-9c02-413e-8f52-b2ec4ae27bf0.roa
Signing time: Mon 10 Mar 2025 23:48:20 +0000
ROA not before: Mon 10 Mar 2025 23:48:20 +0000
ROA not after: Mon 14 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:db:0c:43:a9:39:ff:da:65:e9:bc:34:d8:26:7c:5a:a8:9b:89:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 10 23:48:20 2025 GMT
Not After : Apr 14 23:59:59 2025 GMT
Subject: serialNumber=2b54687d031d3fd821f3cc1dce30941c995342c3b4f30b71748374f351916b49, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:55:47:73:08:01:ec:0e:8d:65:31:f0:d7:
91:20:71:10:d7:19:94:5e:33:ea:2b:3d:87:a3:0d:
23:57:1a:dc:58:71:e6:69:76:3e:9b:cf:5a:0d:26:
cf:28:df:32:72:bf:57:a6:7d:2f:95:f8:1b:d0:81:
09:71:af:be:f7:d8:ee:8a:58:04:23:b0:14:4c:56:
36:9e:34:90:88:5f:40:26:9d:6c:05:61:cc:b6:24:
4e:2c:3e:4b:ae:3c:aa:6c:13:ef:65:5b:c5:66:6a:
1d:47:01:ed:94:f3:7e:54:4f:2f:d7:53:16:d0:c1:
3a:c6:43:ee:9f:1b:b6:c7:01:08:5b:d0:4b:d9:8f:
cc:9a:97:7a:96:ae:f9:b2:12:3d:b6:3d:37:2c:b3:
4e:f3:39:02:63:71:76:5e:ba:28:f9:ae:10:09:59:
4b:e9:5d:eb:b0:78:97:ab:a7:33:40:e9:24:b2:6b:
26:05:65:2f:20:9f:eb:cd:e4:21:fc:b8:6f:97:83:
07:a2:b3:0e:1d:2f:d9:2e:e1:81:d3:c1:8b:3f:56:
8d:dd:c7:a4:c8:19:0b:58:4e:4b:df:93:ab:09:5d:
71:58:a5:e2:d3:14:dc:8f:9d:b1:0d:49:a2:95:8b:
64:ad:85:4f:cc:ff:9b:76:e6:44:34:d6:e5:5f:62:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:F2:6E:8D:1A:B9:B0:8F:B1:84:8F:18:91:3D:DD:D0:F4:D1:58
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c402d668-9c02-413e-8f52-b2ec4ae27bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3f:8b:6a:ae:2f:1e:96:bb:9e:74:47:f4:4d:7d:7e:b0:12:
85:1a:ff:72:ee:fd:08:7a:b4:bb:e0:b9:91:78:bb:6c:83:ec:
58:b6:46:02:0e:73:a7:dc:d2:92:dd:7f:c2:a5:9a:d8:a3:49:
4b:f7:51:ba:61:8f:60:ec:f3:5d:e7:e3:67:fe:dc:25:6d:d9:
63:df:07:08:b7:aa:5f:5b:72:e9:b1:4f:1d:bf:a9:b2:ae:33:
22:b4:be:a6:78:07:fa:5e:7e:e8:0d:47:a7:db:6e:c4:c9:49:
bb:53:41:2b:2b:c5:4d:75:05:d0:ad:fb:24:e3:c4:e1:b4:a9:
b5:68:a7:40:4c:ec:47:dc:aa:47:05:42:86:a2:1e:f8:4c:35:
07:2d:d7:cf:c5:5c:55:d7:ec:e1:41:5f:40:d8:28:97:60:ac:
b6:5b:ca:d3:70:b7:bf:3c:fb:36:48:81:5a:a1:04:b9:3e:61:
89:c9:a1:36:ce:ba:d0:b2:5e:2f:c8:07:89:55:97:7a:d5:06:
8d:80:7e:8e:8d:c9:dc:e3:05:c7:db:22:38:e6:00:b7:07:84:
a2:85:33:a7:ac:fa:d3:00:80:e6:62:e8:c8:f4:ed:ac:c3:79:
78:7b:c4:76:37:05:5e:9a:6a:36:d2:6d:db:6c:cf:d0:55:81:
0a:a7:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:31 2025 by rpki-client