Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce476c79-1cca-4812-8696-2effd3e50ffa.roa
File: ce476c79-1cca-4812-8696-2effd3e50ffa.roa (raw, json)
Hash identifier: jROVch1QTdfhCUCdFAxrFLRl2iSZEv6TmX2WtydHPC0=
Subject key identifier: AF:AA:92:0D:90:DF:36:4E:0D:D3:17:96:03:B7:69:A9:DF:6C:B0:87
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1DF2AAC10E2C79524BAC3C8CD422ED1743232FBB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce476c79-1cca-4812-8696-2effd3e50ffa.roa
Signing time: Mon 08 Jul 2024 00:00:00 +0000
ROA not before: Mon 08 Jul 2024 00:00:00 +0000
ROA not after: Mon 12 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f2:aa:c1:0e:2c:79:52:4b:ac:3c:8c:d4:22:ed:17:43:23:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 8 00:00:00 2024 GMT
Not After : Aug 12 23:59:59 2024 GMT
Subject: serialNumber=eaab75ac63fe844c83c0bb77700c42e4bc67df331459a8894ae3ba28da8e4a42, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b1:14:33:c7:87:18:f0:e2:f2:ae:2c:7a:ed:
be:3b:fc:22:8f:4d:7a:6e:11:3e:5f:cc:56:30:f1:
fb:b0:0b:0f:69:9f:45:6f:87:06:06:85:82:61:c6:
f6:29:65:07:89:0b:b0:82:9d:07:45:5e:c8:b2:44:
0a:23:b4:4d:df:4f:cb:0f:81:71:b0:43:26:f8:db:
ad:d0:8a:5e:ab:2a:e2:bb:4e:6e:1e:eb:66:ba:ff:
39:df:de:c3:8b:e1:37:0d:6c:4d:be:41:73:bc:6c:
f5:23:7c:c4:04:95:c9:a2:ac:0e:c5:1e:a1:f1:5e:
3b:b6:de:e5:4c:c0:d0:c3:be:32:20:37:90:07:1b:
a2:19:55:34:b0:20:3a:d4:e2:3e:2c:d0:f8:fe:07:
c7:6f:7a:1e:49:32:78:98:98:a0:fc:ac:bb:6e:fc:
43:89:b8:d5:77:81:2c:e3:51:8f:8c:ac:b7:71:fe:
17:81:fc:34:2d:63:ef:6a:23:7a:ab:e2:e8:8b:ed:
60:f0:77:6f:a1:26:6d:c7:0f:38:64:32:64:71:ad:
12:86:b9:29:0e:40:a3:74:84:eb:99:c2:03:af:23:
dc:9a:21:f5:49:8f:e2:5c:bd:41:db:9d:09:99:0e:
27:0a:e2:05:4b:74:c6:d4:df:7d:31:6d:ec:d4:b4:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:92:0D:90:DF:36:4E:0D:D3:17:96:03:B7:69:A9:DF:6C:B0:87
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ce476c79-1cca-4812-8696-2effd3e50ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5a:20:db:ac:ed:e6:24:fb:12:c3:87:bc:4f:76:3f:c7:52:
29:91:b5:45:f6:fb:dc:e9:9e:d1:97:4f:74:55:06:10:ea:9a:
17:06:35:4f:05:a3:b0:a9:c7:7f:64:dc:c9:11:bd:6a:3f:5c:
ab:4f:b3:31:2c:94:57:9f:5d:89:d7:ee:09:90:60:e6:e4:aa:
71:29:85:58:87:5e:4e:0b:43:25:10:99:4a:bc:dc:5a:bc:9b:
f5:2d:80:71:f3:cd:b8:b9:fa:75:71:46:68:05:1c:ab:ee:26:
cf:77:1a:63:ba:f1:09:ae:21:16:b2:8a:3d:2a:96:85:c0:25:
0c:12:ca:df:34:e3:6e:68:ee:e9:5f:e6:86:e9:ad:a6:4a:0b:
ff:23:6a:80:c0:08:3d:ae:70:77:47:b0:c8:b8:29:70:2d:07:
5f:8c:85:ab:27:74:a1:ff:fa:bc:97:68:8f:51:bb:d8:cb:cc:
95:2b:33:ca:12:51:f6:e4:7c:c8:3c:68:f1:be:05:70:88:bc:
f6:4d:6d:64:7a:66:86:4d:d0:c1:f1:c0:b6:f0:9b:7b:9c:fe:
62:4d:a5:9e:cf:0c:bd:38:b4:69:2b:f3:91:ab:33:40:d8:ce:
e3:6d:19:d1:df:c1:d5:79:1a:90:76:8a:76:a9:ba:6d:10:93:
e6:16:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:09 2025 by rpki-client