Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d69fef3b-f56f-43f2-8d55-65e34424de27.roa
File: d69fef3b-f56f-43f2-8d55-65e34424de27.roa (raw, json)
Hash identifier: dRZaiEjLBda6sq0mn5ZGLcHi5ghflFJQogtrRM7pA80=
Subject key identifier: FE:7B:8E:1C:73:09:ED:78:50:07:5F:0A:2A:66:65:1E:76:54:0A:43
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 60BA2C76C644B01B1DD1E6D3F189668F5B426143
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d69fef3b-f56f-43f2-8d55-65e34424de27.roa
Signing time: Sun 27 Oct 2024 00:00:00 +0000
ROA not before: Sun 27 Oct 2024 00:00:00 +0000
ROA not after: Sun 01 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ba:2c:76:c6:44:b0:1b:1d:d1:e6:d3:f1:89:66:8f:5b:42:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 27 00:00:00 2024 GMT
Not After : Dec 1 23:59:59 2024 GMT
Subject: serialNumber=7d2cb657a802515a2ef509b7ad3d2dad8a98a4a5248714e355aa73ad5ef8f380, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:f3:6d:06:5e:f9:21:4b:a6:3c:22:15:26:
a1:f6:5f:8a:a0:18:a0:7c:ff:bf:55:dd:d3:37:27:
c5:a8:bd:eb:85:9a:ce:7a:13:1a:06:89:8f:2e:ae:
89:05:e0:44:80:eb:b9:25:bc:0d:c8:18:8d:e2:01:
9a:68:39:4c:96:af:a0:0b:0a:f5:92:ea:a1:98:68:
5e:10:4c:59:5a:0a:26:58:89:40:8b:03:9e:d5:ea:
0d:3a:2d:1a:c7:10:e9:ae:b1:a1:6f:53:6b:91:58:
b4:4d:59:13:4b:d4:c2:99:c7:c1:e2:3d:88:8c:ad:
7f:d0:15:3c:53:8a:68:5d:85:5d:af:ea:ff:55:9c:
aa:6c:b6:b6:36:da:be:97:37:65:75:ad:7a:ac:81:
a1:1c:0b:14:b8:03:89:5a:c6:a1:40:2a:5c:f9:91:
43:5b:c4:7c:56:e7:89:36:69:d9:8c:ae:fb:a8:1a:
09:7c:c7:69:d7:8b:20:16:ab:39:b9:39:5f:54:7b:
28:86:9f:ab:59:9a:b1:11:f6:06:43:68:08:20:ca:
54:41:ed:a0:ff:c9:8d:d8:5a:a3:00:41:15:89:3d:
d7:0b:c6:e4:1e:b5:3f:25:f6:cc:84:a8:7e:aa:a7:
ae:af:90:c1:46:36:7f:8b:44:bf:5d:86:8f:80:62:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:8E:1C:73:09:ED:78:50:07:5F:0A:2A:66:65:1E:76:54:0A:43
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d69fef3b-f56f-43f2-8d55-65e34424de27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:39:b0:8b:29:42:4c:4a:5e:bc:5a:9c:dd:78:41:f5:88:9d:
62:61:f6:1b:77:cc:ab:a6:24:6d:e9:30:53:eb:09:43:82:62:
53:5b:47:c6:ac:7e:cd:02:4a:6a:58:84:b1:dd:7b:03:8c:0f:
4e:f2:43:52:08:92:0a:67:5a:b2:36:65:36:a0:a8:fa:22:d8:
c6:f6:50:f3:13:84:bb:79:5a:dc:db:26:1b:5a:d6:33:00:93:
55:82:d2:6c:13:78:94:9c:83:c5:ea:b7:3c:95:1c:7e:d4:5d:
cd:cf:cd:b7:57:6c:83:54:a5:6d:3e:3d:5d:6a:a2:39:9e:24:
4a:02:ae:c4:28:2b:bc:9a:10:bb:b1:3b:7c:46:96:c0:ef:74:
ce:12:59:9a:af:4f:f3:2b:12:fe:3b:ef:49:24:7c:9d:62:08:
4f:77:06:98:66:2b:cf:d5:0d:da:28:98:0f:54:fd:e9:9c:ed:
32:7f:d9:3e:07:f8:34:c1:98:5f:0c:55:ea:6c:8c:02:07:21:
14:81:07:a6:9c:f2:a2:21:40:19:24:58:1e:42:7d:a6:03:5c:
3e:89:bb:4d:1b:b9:b9:14:09:65:c8:37:d2:01:5f:f7:d3:ea:
e5:48:91:c8:6b:16:e3:e3:2f:5d:9d:b1:bb:c2:f8:1a:4a:22:
9e:75:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:17:28 2025 by rpki-client