Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ccf7bc6c-f9ee-4518-8203-a571e86b0625.roa
File: ccf7bc6c-f9ee-4518-8203-a571e86b0625.roa (raw, json)
Hash identifier: gIHzPvJfS10gT4gcaya4nor+nxpHcFXMnQYxQG/gTwA=
Subject key identifier: 98:83:DA:47:B1:61:6D:15:F0:48:BA:33:A5:2A:49:A6:4A:4B:49:C7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4DE83D8578595BF7C771F396413BAEDC139843AA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ccf7bc6c-f9ee-4518-8203-a571e86b0625.roa
Signing time: Sun 19 Jan 2025 00:00:00 +0000
ROA not before: Sun 19 Jan 2025 00:00:00 +0000
ROA not after: Sun 23 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e8:3d:85:78:59:5b:f7:c7:71:f3:96:41:3b:ae:dc:13:98:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 19 00:00:00 2025 GMT
Not After : Feb 23 23:59:59 2025 GMT
Subject: serialNumber=106b3c1e74d33c52a7c9caaaaba67e48d72f6e1173f27213ffb67109d9ce5cc4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:fb:f5:4e:f8:37:84:7d:8e:8f:80:00:e9:
b5:e3:e3:c6:12:04:1f:70:1e:31:45:91:b8:fe:a7:
12:f7:df:92:1f:39:c9:ab:4d:74:d8:99:2d:7a:a7:
a7:fe:25:02:1d:79:a5:5c:d2:a6:eb:05:75:c0:53:
62:0b:6d:0b:8c:24:d9:99:1d:e1:44:2d:4d:db:32:
c3:8f:77:d7:56:33:f4:ff:c8:ea:ac:85:1c:f7:6b:
5f:6d:54:94:2a:b1:98:5b:f2:b7:0c:5e:bc:03:36:
bf:89:76:43:e5:2f:e9:78:3d:8f:cb:77:84:7c:68:
f9:95:74:3b:fa:bb:5e:a9:61:2a:d0:e3:50:56:ca:
a9:9b:23:b3:cf:5b:31:1e:c5:d3:80:8d:c0:f8:6e:
f7:d5:04:99:8a:b0:b6:3d:1b:64:f1:a4:d4:8f:5e:
83:56:c9:c5:1e:1a:31:e8:5a:2f:28:5b:e6:ed:1b:
31:36:71:89:42:ea:39:e4:f9:7d:fc:41:90:56:eb:
a6:6b:87:44:f5:de:ef:80:e3:01:f1:11:4e:7d:7f:
66:33:ed:a4:49:3a:e2:7a:12:d0:05:ee:be:99:00:
3c:c1:0f:63:4d:74:c1:4b:fb:24:b6:9a:61:83:06:
d3:e7:9f:a1:12:68:d4:20:b6:00:5a:18:9c:fb:56:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:DA:47:B1:61:6D:15:F0:48:BA:33:A5:2A:49:A6:4A:4B:49:C7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ccf7bc6c-f9ee-4518-8203-a571e86b0625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e0:5a:00:0f:d6:6a:00:93:c8:35:c0:4d:65:f1:83:64:20:
27:54:b5:fb:41:27:a7:d1:3a:08:71:33:e6:c7:73:f1:f7:2c:
6a:4c:ad:06:d1:a0:26:43:06:6f:68:5e:af:ba:7a:92:4e:a4:
79:b9:e4:5a:74:a3:6e:59:61:61:c9:ea:9c:55:48:4c:11:08:
a2:77:dd:75:ad:b2:ea:b7:27:c8:c2:da:d0:33:a2:6b:3e:90:
47:a6:a4:3e:86:df:8c:32:57:37:dc:5f:40:e5:8c:4f:ec:29:
4a:58:c5:08:52:6b:79:e0:2b:a1:50:92:a7:6f:a0:9d:6c:f4:
af:27:69:37:c1:e1:a1:0f:41:ed:45:37:46:33:12:be:8b:67:
e9:8f:1d:4a:ff:cd:0d:7c:44:24:0f:ca:ff:fa:8c:d1:2e:cd:
4f:76:11:70:de:d7:4b:8c:5e:06:0a:fa:6a:4b:4f:6a:71:5a:
a7:14:18:6e:82:4a:74:c1:aa:80:a7:09:6d:66:70:c0:e6:aa:
f0:81:a7:df:7c:e1:bb:e8:e7:9f:b3:5f:ee:40:3e:36:cd:96:
86:e7:25:bc:7e:54:29:3b:6c:6a:b5:ba:8a:07:72:70:97:8d:
fc:ac:c6:4a:ff:90:e2:58:5e:15:b4:09:4b:fb:90:d6:48:cc:
28:57:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:18 2025 by rpki-client