Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c4bd1540-2d6f-46d4-a8c3-ed5421659099.roa
File: c4bd1540-2d6f-46d4-a8c3-ed5421659099.roa (raw, json)
Hash identifier: b0Li/SbCi7A0ClXF8M/tW2zIRZre8Dh7oz7wAVAnBtE=
Subject key identifier: 2B:8C:3D:0C:8E:D4:9F:E6:44:6D:50:C2:09:BC:3A:22:D1:79:29:00
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6C99C29B1C1997394D688060146FB7A44CC75F15
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c4bd1540-2d6f-46d4-a8c3-ed5421659099.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:99:c2:9b:1c:19:97:39:4d:68:80:60:14:6f:b7:a4:4c:c7:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=b831384d78f06d572e4c4e4ac317846ba46838d80920a1e90935291945b58804, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:b7:9f:6a:05:bb:5f:af:65:2e:74:58:1b:
d0:00:a8:fa:9e:55:99:47:55:5d:6d:24:f6:66:15:
08:77:3b:4f:26:09:17:0c:9e:42:89:65:80:a9:3e:
4f:b5:71:4f:b7:d8:22:84:cb:0c:85:66:4e:3a:8d:
c2:2f:0b:80:0b:44:77:35:a5:3a:7c:18:d5:86:18:
97:9d:d1:7c:c4:85:18:f1:62:e1:ea:72:12:fc:c5:
fe:87:4b:db:6d:7e:ab:86:14:e3:73:b0:9c:cb:9b:
25:7d:35:6b:d1:4e:8c:4f:5a:3c:85:47:59:6b:f7:
64:20:92:34:27:0d:02:5e:ab:6e:36:1c:2b:34:25:
86:8a:c1:dc:95:be:18:d0:79:39:27:60:1c:bd:ae:
aa:31:79:b1:9e:d2:2f:f3:88:17:d1:f5:6e:b3:1c:
bd:97:ad:f4:f7:f3:a2:9a:5b:03:1c:f9:3f:9f:6c:
48:c9:59:fe:05:a8:37:06:83:84:56:aa:5b:02:83:
fb:f4:cc:c2:8e:6c:25:94:e7:2e:14:67:30:63:43:
54:32:ba:37:b1:8b:0f:e5:d8:bd:e6:9e:86:34:41:
20:36:40:8c:c4:d1:2d:37:78:14:9a:22:fe:7c:6d:
fd:f1:f1:e7:2e:e7:b1:1c:61:af:ac:1c:45:1d:82:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8C:3D:0C:8E:D4:9F:E6:44:6D:50:C2:09:BC:3A:22:D1:79:29:00
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c4bd1540-2d6f-46d4-a8c3-ed5421659099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:92:1c:7b:2d:77:00:3c:f7:26:b7:ba:6f:bf:d7:a9:89:5d:
f3:24:32:b4:1f:a2:50:10:a3:0e:28:44:02:a5:01:ca:4a:47:
b7:93:f8:a5:61:ab:a1:d7:d1:68:2d:08:57:d7:58:27:43:12:
fb:30:1c:6d:41:71:83:6b:c5:70:ab:68:7b:1d:a9:30:8a:b8:
b8:77:13:ef:e7:ac:a4:67:08:fb:96:b2:00:b3:97:cf:fe:09:
10:19:f7:f0:c3:30:f7:f3:cd:3f:83:96:dd:a5:d9:a6:6a:cd:
66:34:0e:cb:70:3a:2a:ed:1b:47:64:52:6a:5a:75:35:ff:77:
8f:fe:08:53:8e:14:04:3a:aa:ae:75:1d:1c:51:9f:c2:15:83:
27:e7:44:1e:4c:68:c3:08:a5:13:5e:d3:5f:dd:95:77:9a:59:
4b:d1:da:b4:42:f3:1f:be:7f:8e:c9:98:3f:da:f7:75:e1:0a:
7b:23:9f:c6:71:55:cb:1f:e7:92:36:f3:e2:12:d2:0e:c6:9e:
37:66:47:a7:25:12:a3:a3:31:ac:f8:4d:a0:0b:0d:92:55:3c:
6d:04:02:42:12:ca:b7:96:5a:f9:cd:77:e9:1d:74:03:3d:a4:
10:86:8e:35:5d:ea:9a:fb:87:49:a6:d3:27:05:b7:1d:4c:ec:
c5:d9:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:16 2025 by rpki-client