Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf112c5c-8c5a-43e0-8d4f-6f0cd32f6bef.roa
File: cf112c5c-8c5a-43e0-8d4f-6f0cd32f6bef.roa (raw, json)
Hash identifier: a6z1Dcr8ExRqlFvTpv2oKBOtzLa9h+EH3X3gUxNHRzI=
Subject key identifier: E1:F3:00:A9:D8:60:CF:76:8E:B9:07:4C:8C:EA:4B:72:9A:65:AF:1E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E91FB2F3D7F461AC18C3FE1A06FBEAA9D43F633
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf112c5c-8c5a-43e0-8d4f-6f0cd32f6bef.roa
Signing time: Sun 11 Aug 2024 00:00:00 +0000
ROA not before: Sun 11 Aug 2024 00:00:00 +0000
ROA not after: Sun 15 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:91:fb:2f:3d:7f:46:1a:c1:8c:3f:e1:a0:6f:be:aa:9d:43:f6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 11 00:00:00 2024 GMT
Not After : Sep 15 23:59:59 2024 GMT
Subject: serialNumber=19b30b7dcc218abb9bfc647f93c29f0c510cf3eb0326800290b20ea01e51bd46, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:9a:a4:89:32:e7:51:20:2e:82:26:39:40:
06:df:64:9c:b5:00:49:7a:d8:77:fa:f1:4d:5e:cb:
29:0a:f7:36:33:6c:26:2e:ef:35:c0:31:e5:c9:fc:
71:21:81:10:34:0a:6c:0a:3b:88:ff:8c:31:2c:d0:
3b:34:98:99:fb:dc:32:b0:f0:f1:7a:5a:a3:61:dc:
6f:02:f6:47:94:4b:e2:a0:7d:3d:a8:2c:85:bb:66:
6e:c7:fa:f3:16:8f:08:7f:40:88:ad:d4:2e:3c:ae:
e6:89:77:65:ca:85:52:3e:21:94:dd:cd:a7:e7:21:
9f:d1:9f:82:9a:50:ee:f8:27:03:58:68:1b:f5:88:
20:dc:6b:b7:8a:3c:a7:bb:73:ee:b7:e8:1d:be:87:
e6:ea:f8:65:35:81:84:80:12:3c:95:c4:cc:85:18:
6b:14:de:f4:4e:c1:05:cd:56:7a:27:3d:56:95:b7:
0b:7b:27:ad:bc:67:b3:22:b5:6a:82:12:d4:e2:3c:
91:3e:57:18:c8:70:81:ab:5d:8b:c3:aa:7d:92:87:
cb:29:83:9e:09:09:43:52:e1:c5:88:33:e6:0c:9f:
82:2b:62:ce:be:85:3b:99:1c:af:d9:b4:71:e4:8b:
5a:4a:cc:3c:af:d0:48:3e:e9:61:b7:16:b7:40:56:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:00:A9:D8:60:CF:76:8E:B9:07:4C:8C:EA:4B:72:9A:65:AF:1E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf112c5c-8c5a-43e0-8d4f-6f0cd32f6bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:15:42:62:4c:c2:e5:84:d5:3f:aa:d9:d8:5c:63:c5:3e:9a:
22:a0:57:30:01:e8:97:cb:57:91:00:b6:e5:aa:c9:03:49:e5:
c5:5a:32:fe:9d:98:0f:95:5d:63:40:d8:cf:e2:c6:1c:6d:29:
03:43:53:0d:9d:7b:40:ff:8b:9e:c6:80:cb:8d:0c:80:89:8d:
57:15:6c:15:b5:6a:aa:9f:fa:18:a0:59:20:50:8e:e7:48:95:
3c:40:4e:52:e5:2a:42:47:a2:51:3a:95:8f:5e:c3:91:18:94:
3e:b4:42:a7:4f:ad:8c:99:00:63:18:5a:a9:99:b6:95:a7:74:
f0:e8:94:32:61:c6:de:cf:82:99:21:c9:27:42:97:54:f2:69:
c6:21:9f:ad:5f:72:b6:0c:22:09:9e:db:38:43:d5:c4:1c:9b:
85:16:f9:71:00:c8:6b:34:04:f6:7c:17:6f:6c:e3:d0:5e:30:
48:00:34:e3:f1:43:b7:65:4d:17:69:11:4e:fa:9f:2d:7a:7f:
7a:d9:98:7f:e1:c2:de:5f:82:70:f2:56:12:5a:fa:e8:d3:90:
1f:1e:45:ea:e9:10:04:7b:68:57:0f:a7:6c:d3:aa:bd:0f:89:
31:8a:38:80:6f:47:7f:2e:1c:aa:1d:54:3f:c7:9e:70:2d:f3:
63:02:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:56:34 2025 by rpki-client