Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d63f7c5c-380c-43da-88df-7fd824db73f9.roa
File: d63f7c5c-380c-43da-88df-7fd824db73f9.roa (raw, json)
Hash identifier: 5nwPRKV7MBHRdxrtNyy37ASWGZfTQAdv1MNLwLJQTNw=
Subject key identifier: 35:F2:03:36:B4:88:50:E3:7B:94:37:4A:FE:C7:A7:5B:F3:9A:24:72
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 05708C8D602CC2958ECFBBA55BCF29F1B1248914
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d63f7c5c-380c-43da-88df-7fd824db73f9.roa
Signing time: Wed 08 Nov 2023 00:00:00 +0000
ROA not before: Wed 08 Nov 2023 00:00:00 +0000
ROA not after: Wed 13 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:70:8c:8d:60:2c:c2:95:8e:cf:bb:a5:5b:cf:29:f1:b1:24:89:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 8 00:00:00 2023 GMT
Not After : Dec 13 23:59:59 2023 GMT
Subject: serialNumber=ce16db06b37f8e64b41041f79a82b906b40311ab54eff7d73ca22f78ad790cac, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:6b:95:2d:64:e3:15:a9:f3:cb:04:cf:14:
73:08:64:01:f6:de:6d:df:08:d6:12:97:b4:f0:b1:
b9:3b:3b:51:98:45:d2:9a:5d:66:70:06:1a:cb:64:
27:1c:d3:67:0f:c9:84:25:5f:08:46:37:39:d8:ec:
70:fd:27:0f:da:2e:de:7b:f5:83:d2:15:d9:88:2e:
0d:99:d4:32:83:2b:b8:ea:39:5a:5e:27:67:d0:c0:
72:1a:d6:ca:a5:4d:4a:8e:0d:fe:2c:bf:a7:3e:cf:
23:a9:1d:86:49:79:63:dd:13:13:36:17:9a:3d:a2:
9c:a3:93:3e:8f:57:96:da:1f:e1:97:02:a9:dd:7d:
3a:5b:e8:f1:e6:df:0d:41:da:e5:a5:95:99:ce:c6:
f2:48:e0:63:c3:ee:f0:b7:99:21:b3:ea:d4:c7:92:
c2:91:0d:18:98:53:91:10:aa:81:d6:f5:8a:99:e7:
1a:0f:cd:61:9f:b3:d3:9c:02:7e:83:72:55:9c:74:
5d:41:0d:20:e0:7b:90:79:8f:fa:bd:db:e0:da:b6:
b3:58:09:33:2b:ff:b2:cc:33:b7:bc:0b:b0:19:6d:
50:92:1e:ef:62:98:60:37:c4:92:a0:67:df:ee:5f:
18:1d:68:51:99:a0:cc:8c:f4:aa:e4:33:69:c2:72:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F2:03:36:B4:88:50:E3:7B:94:37:4A:FE:C7:A7:5B:F3:9A:24:72
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d63f7c5c-380c-43da-88df-7fd824db73f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:bc:12:04:6d:9a:d7:00:c9:db:12:80:1d:eb:80:c6:2f:c3:
bc:e1:aa:1c:b9:ab:20:04:c7:c8:cf:99:b2:e5:0f:19:32:fa:
15:56:60:6a:2a:8c:e6:bd:c4:ac:16:0b:21:dd:1c:c1:3a:e8:
39:79:a9:92:b3:e5:37:c5:bb:cc:75:e2:50:6c:86:66:27:19:
4e:2d:91:a8:32:0b:c6:10:ac:00:76:dc:f2:c2:c9:31:b2:7a:
98:2b:4a:0b:5d:ac:3b:b6:c3:90:f7:09:77:ad:cc:07:c1:c9:
72:47:2c:f1:d8:0f:f0:01:3b:3a:86:59:a8:82:1d:88:a3:ba:
73:8a:d7:62:a1:a8:7e:ac:10:0d:48:f6:94:d4:27:0b:02:ed:
4a:69:4c:5f:ac:ac:e4:b9:51:7f:36:dc:6f:13:b4:18:16:ce:
8e:c0:1d:74:3e:6c:22:25:0d:c3:3b:3b:be:8e:b7:41:59:68:
f1:80:9f:4f:bd:00:a2:61:c9:a6:a3:60:9e:af:75:1f:eb:23:
66:00:be:b0:c2:c2:7f:44:b9:e9:08:20:ce:64:33:83:92:d3:
d2:eb:af:c8:71:b1:c6:24:f9:24:f3:8b:ef:6e:99:7f:7d:60:
46:17:3c:f6:01:55:a7:1a:f7:8d:1a:7d:7e:89:26:10:f9:a8:
a1:9f:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:37 2025 by rpki-client