Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c74d4c14-6cfc-4210-ad1a-69db2cc46841.roa
File: c74d4c14-6cfc-4210-ad1a-69db2cc46841.roa (raw, json)
Hash identifier: Es89FKAs3xKQVWCFZZh3CsHhfaQ9prsJOtm7ythbHmY=
Subject key identifier: 44:75:79:1B:E5:76:DC:1A:39:17:AE:68:A7:10:A3:09:17:1C:CA:E7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 330C929023EA1582B7F0BB7970A12CBC279D71B3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c74d4c14-6cfc-4210-ad1a-69db2cc46841.roa
Signing time: Sun 13 Aug 2023 00:00:00 +0000
ROA not before: Sun 13 Aug 2023 00:00:00 +0000
ROA not after: Sun 17 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0c:92:90:23:ea:15:82:b7:f0:bb:79:70:a1:2c:bc:27:9d:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 13 00:00:00 2023 GMT
Not After : Sep 17 23:59:59 2023 GMT
Subject: serialNumber=6ca16426492c12edf94219c65d21a36da7adbd85f340bfb55809a0bae7550404, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:7f:0f:1b:2e:a3:55:1a:88:c8:41:91:24:
c2:25:c2:87:d2:ab:c9:72:f1:0f:1d:46:c2:48:c9:
ab:c8:0f:4b:d6:5d:51:f3:00:2c:ea:00:ba:fc:23:
83:cb:68:ad:f4:53:d2:27:fc:be:4a:2c:46:af:b3:
21:2b:81:b7:de:45:9a:77:13:ca:84:48:b4:cd:ab:
08:6a:28:59:23:fc:1f:95:3a:ca:6f:20:01:fe:c1:
b3:85:bd:86:20:a9:c8:2d:12:d6:66:27:4e:25:53:
4b:fb:36:79:cb:17:25:ae:66:00:a9:ce:4a:da:2e:
b5:d8:7b:d6:0e:ff:7a:bb:11:c9:96:a2:66:11:e1:
cb:50:14:b1:31:d1:dd:fd:00:e5:1e:82:b2:cc:0a:
9b:e1:c8:8d:80:bf:4c:7d:46:7c:90:c1:fc:1e:62:
61:db:bc:8e:98:dc:50:b3:9b:ed:12:99:74:84:5c:
d4:aa:bf:6d:52:d1:b4:b4:b6:d1:84:11:9d:29:c4:
52:90:4e:07:79:28:1e:1a:b7:76:b4:c2:56:b4:09:
3f:a0:12:e1:8f:9a:b8:67:dd:47:ab:84:92:10:64:
0e:75:11:73:53:65:e4:a6:da:38:03:0d:92:6a:02:
f5:99:5b:75:28:f5:ae:14:0e:db:cd:17:3a:28:a0:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:75:79:1B:E5:76:DC:1A:39:17:AE:68:A7:10:A3:09:17:1C:CA:E7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c74d4c14-6cfc-4210-ad1a-69db2cc46841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4d:29:2f:ec:09:3b:00:1f:d9:61:77:56:17:db:cb:67:2d:
77:53:b1:76:6a:6b:75:7f:1d:2c:a4:83:90:06:e1:3c:58:d8:
5c:dc:8c:1f:ef:4e:17:6b:3e:4d:0c:15:36:02:2a:2d:d9:8c:
e5:bb:06:84:53:d5:7b:e4:0d:c0:5f:c4:49:44:b8:4c:71:64:
4b:5c:12:c7:a8:aa:63:4c:71:70:fc:70:63:63:83:78:7c:b2:
ed:53:96:bb:3b:f9:ed:25:ee:73:76:22:51:4e:28:30:69:0e:
6c:40:5f:ad:8b:62:b5:d5:a9:69:48:6d:05:77:bd:7d:00:fb:
76:35:c1:cd:7f:ba:5c:fe:d1:26:fb:5c:da:46:59:65:62:76:
39:3c:03:22:f0:ad:4d:1e:f0:05:b4:3f:23:99:45:69:98:25:
29:c9:25:4e:3a:a0:5d:d7:f2:bf:df:4e:f0:10:88:8e:90:d2:
24:d7:6b:09:a1:b5:ba:e3:89:0a:e1:9b:9f:37:7b:92:c2:75:
14:53:a3:10:fb:88:6e:4f:59:ba:44:98:0a:a6:36:1e:1e:d8:
5b:ca:09:c5:88:ac:c1:ee:a3:0a:27:89:4f:d7:3b:81:a7:22:
ea:28:10:c1:ad:f6:56:e0:e8:4c:89:c5:0d:04:5e:ff:40:ae:
74:39:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:13 2025 by rpki-client