Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6a50f0b-a1ec-407c-bbf1-38f3b670d3a9.roa
File: d6a50f0b-a1ec-407c-bbf1-38f3b670d3a9.roa (raw, json)
Hash identifier: 6tLFCsaoOgDd46Ny5LH+OQyQm5j1t0nOgWeEsdggt8Q=
Subject key identifier: F3:8F:4B:FD:0B:56:82:F1:54:96:2E:39:AB:4C:80:D8:1F:94:79:05
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 187568F2A044497AE88AA9E28FEC7F8F1EC0BF33
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6a50f0b-a1ec-407c-bbf1-38f3b670d3a9.roa
Signing time: Sat 21 Dec 2024 00:00:00 +0000
ROA not before: Sat 21 Dec 2024 00:00:00 +0000
ROA not after: Sat 25 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:75:68:f2:a0:44:49:7a:e8:8a:a9:e2:8f:ec:7f:8f:1e:c0:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 21 00:00:00 2024 GMT
Not After : Jan 25 23:59:59 2025 GMT
Subject: serialNumber=0a0ffed3162a305aa60cd7e832e08522c737627b7561281d9d74f939fb7adcfd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:83:06:82:d2:03:3a:b8:0e:ed:a9:dd:96:08:
53:e9:90:46:16:2a:a1:5b:45:1a:f9:09:80:45:19:
e1:3c:0c:c4:8b:10:23:f9:f5:5a:51:02:7a:23:36:
a8:62:bd:3e:92:5e:ec:71:71:86:db:5b:49:f9:50:
b2:36:b1:33:39:59:74:8d:48:0b:63:5a:2b:b4:5f:
b5:af:67:c7:3a:2f:79:b5:95:5d:a9:bb:5f:57:b8:
ab:23:d3:20:4a:8e:83:86:68:27:95:50:e2:46:a3:
9f:07:0a:3a:83:36:9f:ed:c5:cb:fd:a1:0d:bb:d1:
67:79:0a:8f:84:b8:4f:e7:90:71:29:05:9c:ea:5b:
2d:aa:9f:a2:fa:ac:26:87:62:1f:c5:80:2a:7e:3b:
da:04:fc:e4:2a:75:da:5c:a9:62:e2:16:ef:c7:84:
4c:43:37:40:1c:88:de:36:ef:2d:56:9b:a8:d0:3c:
ed:ff:49:17:b6:2a:4f:17:e8:38:06:c2:7f:a2:2a:
77:71:52:f8:6c:c6:d9:df:b4:9a:44:99:0b:68:20:
97:3d:70:0e:a6:9e:ae:46:e5:c0:0e:3d:31:71:df:
73:fb:bd:47:e0:1f:a6:31:2e:e7:ef:8a:95:00:19:
fc:b1:1b:48:a8:b9:34:63:c0:e8:cf:7c:f3:42:9b:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:4B:FD:0B:56:82:F1:54:96:2E:39:AB:4C:80:D8:1F:94:79:05
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6a50f0b-a1ec-407c-bbf1-38f3b670d3a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
30:00:48:a0:8b:e8:41:ed:b9:85:6c:4e:d3:ef:cb:cc:c8:d6:
fa:2c:48:7a:23:11:33:b5:b4:e3:e6:9d:e0:4b:8d:58:81:01:
2d:2f:9b:4b:da:80:31:8a:a6:f6:a4:1d:78:91:03:cd:24:7f:
b5:c3:4a:e6:52:37:45:c5:81:8c:cc:1e:aa:cd:12:d8:64:2a:
f6:12:b7:cb:ca:8f:2c:5f:8a:2f:88:c7:57:7c:ad:c9:d7:d4:
c6:dc:97:5d:76:de:1c:a3:a1:56:98:ec:79:a7:e2:b4:89:96:
36:0a:6b:24:5e:70:52:1d:f5:2d:6a:d0:55:c1:be:d2:08:9e:
80:14:a9:03:93:1f:1a:e0:a1:6c:2f:af:7f:69:10:02:3a:9c:
96:6f:30:59:42:27:14:41:e7:67:38:86:97:65:e2:45:26:de:
1f:26:41:a8:13:86:02:7e:f7:52:3f:08:cb:a6:16:28:82:03:
be:29:5e:5c:76:a7:05:f2:2b:f5:84:fc:d8:e9:1e:b7:3b:df:
7d:3e:cc:bb:b0:eb:5c:48:e7:9b:79:99:c1:bf:2d:03:bd:fa:
3f:32:95:b0:8c:35:1d:a7:ce:00:23:d4:71:56:1e:cb:e9:cf:
ef:d0:1a:3f:f2:a7:c6:52:9a:ca:93:40:93:80:31:e7:c6:65:
0c:1a:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:25 2025 by rpki-client