Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d14a877d-ba01-4b48-88b5-6c1984fba4ae.roa
File: d14a877d-ba01-4b48-88b5-6c1984fba4ae.roa (raw, json)
Hash identifier: LHug/07WLJBG4kfevd3/UyKbd5rx3vvV1AB6w1VzSwA=
Subject key identifier: F0:0D:28:5D:7D:C6:D0:AE:82:54:B0:C8:AE:B9:ED:D7:30:15:BF:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 01E02C32587FC80D6F5EFD4A2ECAFA22FB5F1207
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d14a877d-ba01-4b48-88b5-6c1984fba4ae.roa
Signing time: Thu 30 Nov 2023 00:00:00 +0000
ROA not before: Thu 30 Nov 2023 00:00:00 +0000
ROA not after: Thu 04 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e0:2c:32:58:7f:c8:0d:6f:5e:fd:4a:2e:ca:fa:22:fb:5f:12:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2023 GMT
Not After : Jan 4 23:59:59 2024 GMT
Subject: serialNumber=ac7878de7b4ac6f99c7caf2a4d1b02ba525cc1b98e71d0464e60522be6201315, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:40:28:67:25:2b:50:7c:16:b3:87:ea:4e:
41:1a:54:f4:e6:c2:bd:f1:72:96:3b:b2:fd:b3:b0:
08:1a:bb:cf:86:ba:9c:6c:22:32:fc:b2:1e:21:aa:
6b:be:db:bc:20:9a:2a:da:ab:46:23:7c:63:c6:ba:
44:80:59:bb:56:3e:81:30:ff:ba:d6:0a:5c:86:71:
25:9e:83:de:89:04:b0:c4:c4:38:a5:d1:bd:a1:ce:
aa:2b:34:53:14:b4:ac:fa:14:15:52:59:dd:7d:11:
ac:c6:29:6d:4a:dd:73:00:4d:15:b9:4b:47:7f:29:
1e:09:54:15:38:db:bc:c1:e1:7e:bf:6d:c5:1f:43:
ed:5f:ee:e9:90:3d:d9:88:24:67:1c:82:12:43:f3:
38:ef:07:c0:e6:47:13:dc:ee:e5:57:04:72:1d:d7:
d0:e7:99:bd:7a:61:be:b6:23:20:45:01:93:75:20:
cb:2f:64:b6:bf:a8:e9:f9:b2:28:f1:8b:07:aa:4c:
2e:4b:e0:7d:14:02:e1:6e:ab:e1:82:32:37:e6:5a:
d0:e9:ae:4d:bb:f4:a4:05:0c:bc:d1:5b:7e:1e:92:
9c:5a:18:a9:b9:ad:a2:db:67:2f:f8:60:f1:6a:8b:
cb:ee:ea:d5:52:10:9e:55:34:74:37:22:46:35:83:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:28:5D:7D:C6:D0:AE:82:54:B0:C8:AE:B9:ED:D7:30:15:BF:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d14a877d-ba01-4b48-88b5-6c1984fba4ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:55:2f:b4:96:f8:15:59:bb:00:ba:48:6e:3a:e5:2e:2b:1c:
e4:b0:e0:d1:86:1c:9e:c6:cd:66:19:68:52:6b:76:18:00:9f:
76:3b:17:19:f0:e7:97:f8:4c:6c:c4:05:a3:43:70:df:93:4d:
73:f6:e5:59:ec:d5:be:eb:43:6b:4d:f0:af:bc:da:6a:ba:23:
5d:b0:31:06:f6:50:d6:26:75:73:59:22:bd:dc:1a:d6:f3:76:
4f:93:8d:fc:d4:5e:33:35:71:73:74:ab:da:fa:7c:3a:85:cc:
5d:33:cb:20:df:67:14:2e:22:67:44:9f:f5:52:0f:0f:96:e9:
63:33:9e:e2:97:c2:b7:d4:d7:3f:a4:8a:73:13:83:33:75:5e:
64:82:c5:2c:e6:26:52:22:e1:b3:42:e1:a0:75:e5:02:af:ef:
4d:1c:30:58:0d:ff:39:95:fe:f9:ab:cd:aa:f8:8b:96:a8:e4:
ae:e8:93:d3:d7:6e:b1:69:6e:ee:27:da:26:0f:e1:cd:df:da:
e4:a4:32:41:16:1a:49:4d:e3:a9:7f:2e:1e:de:7d:eb:33:7b:
ca:1c:55:77:8e:d3:ba:e6:89:2f:3f:e8:91:09:ec:f0:bf:03:
b6:e4:e1:c5:30:b5:9b:26:bb:09:64:3f:e8:0a:75:4c:cb:f7:
65:33:d2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:05:31 2025 by rpki-client