Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d834e0ef-770e-4ac0-b8f0-364d6481b40a.roa
File: d834e0ef-770e-4ac0-b8f0-364d6481b40a.roa (raw, json)
Hash identifier: +1T9REzxOE728I3TR1Pj+TOlWc2VWawsqZGYDE98VHA=
Subject key identifier: 79:63:49:95:5E:7A:75:95:8F:CF:C2:09:86:94:55:31:28:B7:8D:FD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 46EC5B7815423F0E31B50063BEEAC9AF6029E376
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d834e0ef-770e-4ac0-b8f0-364d6481b40a.roa
Signing time: Tue 23 Jul 2024 00:00:00 +0000
ROA not before: Tue 23 Jul 2024 00:00:00 +0000
ROA not after: Tue 27 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ec:5b:78:15:42:3f:0e:31:b5:00:63:be:ea:c9:af:60:29:e3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 23 00:00:00 2024 GMT
Not After : Aug 27 23:59:59 2024 GMT
Subject: serialNumber=b1b21a379a09545a8b254aee496a9cebcece05317a2c94bca34217d93cb41891, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:a4:2c:34:6b:c4:a7:27:8e:f8:bf:f2:cd:
ec:e4:b6:d2:7b:cc:c5:cb:3e:f8:f0:33:c8:01:42:
08:ce:f0:39:5d:a7:53:ae:65:89:59:b6:0d:5c:15:
1b:db:0f:11:dc:a7:62:22:82:76:35:1f:2b:58:5a:
99:30:26:48:91:ff:75:95:6e:05:07:09:74:66:36:
2e:e9:85:2f:0e:77:be:e4:4d:e0:1e:93:4b:01:06:
b2:25:c4:90:cd:54:66:8d:51:75:2d:5c:5c:70:93:
28:a8:00:e2:75:13:38:2c:2e:bc:81:2c:d7:fd:52:
18:fa:a1:6b:6d:31:ff:52:29:a0:79:cc:a7:5d:56:
8c:7d:b9:68:5d:80:ee:ba:42:cc:3d:6a:34:a5:c1:
75:91:6e:fd:e0:01:aa:3f:69:3a:5e:d0:d2:9c:ce:
12:20:27:ad:53:cc:a8:72:2c:28:d1:a4:a9:64:9a:
d2:e1:73:1e:bb:24:c0:ed:3c:f9:6e:c2:c6:ea:66:
5a:f5:28:96:66:e3:e4:79:dc:9d:35:c0:e5:0a:b1:
94:30:cc:08:4f:57:5c:e7:50:98:32:16:67:cf:18:
f4:fd:36:ef:c1:f3:2e:89:61:7d:0e:ee:f8:b4:4d:
70:db:20:47:0d:f3:dc:9c:7a:5f:10:c5:ca:5a:1a:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:49:95:5E:7A:75:95:8F:CF:C2:09:86:94:55:31:28:B7:8D:FD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d834e0ef-770e-4ac0-b8f0-364d6481b40a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:32:71:32:89:91:38:fa:73:2d:02:dc:84:81:59:32:8c:24:
72:d4:d5:34:ae:fa:17:c7:49:85:4f:bf:2a:f9:6d:3f:3a:7d:
72:d3:b1:02:58:b9:fe:e9:cc:a8:6d:43:32:63:c9:c0:e8:df:
91:e6:f6:64:36:7a:f6:59:f3:e5:2f:f9:be:37:fe:89:93:61:
f3:a1:80:c7:e1:9e:dd:f9:ca:d1:2b:5a:3d:1b:15:5a:27:45:
3a:fc:7c:82:f8:b1:61:5e:ce:3f:1d:d7:f4:29:dd:b1:17:5d:
1b:92:dd:a4:18:09:83:54:7f:2e:95:3b:3a:67:c6:fb:ec:b4:
31:18:be:29:1f:4f:ff:94:de:0b:22:01:98:05:5c:cf:bf:87:
56:75:fa:fe:e8:6a:20:4c:f2:70:2c:2d:a0:a5:26:5a:40:d9:
5a:65:23:eb:36:87:f9:5b:8b:0e:6e:f8:ac:a8:0b:71:f7:6d:
cc:b8:7c:c2:31:56:71:c6:6d:e5:57:d9:81:72:0e:65:a2:43:
49:a8:d2:7e:38:a9:af:cf:8e:b7:48:db:62:a7:17:da:6b:45:
6d:26:20:d8:2a:88:c4:56:50:8a:c0:93:2b:73:1b:54:65:9c:
97:1f:f6:e8:6f:75:0c:fd:db:09:78:d1:6f:97:c8:e4:22:52:
5a:2e:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:10 2025 by rpki-client