Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ddeedb0d-9305-4ed5-9341-71ac515fa4e4.roa
File: ddeedb0d-9305-4ed5-9341-71ac515fa4e4.roa (raw, json)
Hash identifier: UKkn1XWySPmXdc4172dRZYY2QAN9GovNK88rPt/ZpcI=
Subject key identifier: 4D:58:5C:10:E9:13:F0:09:C7:A1:21:18:C1:28:E8:44:DE:6C:00:AC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0F88DDAC82BA73BBE68DF19C9119AAC15A7B41EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ddeedb0d-9305-4ed5-9341-71ac515fa4e4.roa
Signing time: Sun 17 Mar 2024 00:00:00 +0000
ROA not before: Sun 17 Mar 2024 00:00:00 +0000
ROA not after: Sun 21 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:88:dd:ac:82:ba:73:bb:e6:8d:f1:9c:91:19:aa:c1:5a:7b:41:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 17 00:00:00 2024 GMT
Not After : Apr 21 23:59:59 2024 GMT
Subject: serialNumber=6b6c6af13f5463120c47dd2faa64802a86fbbb1ee6dfbf5e30e386b954c305be, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:84:97:3b:f2:86:99:00:07:fc:ba:2a:88:
e8:9d:9c:ef:4f:6c:54:99:dd:6c:93:02:d6:f7:ef:
f1:63:7a:e4:53:0d:ad:33:99:ad:65:98:bf:f7:30:
94:6f:dc:a6:5d:51:57:26:89:41:22:e1:8d:eb:fa:
65:45:f6:1c:f5:38:da:77:1c:2a:67:3f:27:d9:96:
c5:76:c1:08:38:5c:eb:de:5d:1c:89:03:70:80:c2:
38:98:ac:dc:0b:96:e4:da:56:e3:34:a9:ab:d3:d6:
74:ba:58:d3:d8:9e:fe:0c:4c:0f:fe:17:fa:f7:ac:
85:85:97:1a:5d:10:00:88:dc:89:42:a4:60:ad:f0:
37:c3:8a:29:0c:c9:07:8f:20:42:42:f0:0e:bf:6f:
22:36:63:c7:dd:bf:57:02:e8:ff:2d:58:a4:ed:fe:
1d:cc:d5:ba:2d:a4:a4:aa:ab:be:bb:cf:b7:41:d8:
e3:70:15:b5:86:c2:d5:f9:5a:42:96:70:be:0d:f8:
5f:cc:6c:4b:be:ed:a2:95:38:24:c1:4b:27:aa:bf:
5c:13:ab:a0:20:14:7b:9d:c0:33:68:33:cb:f9:af:
0a:20:63:c1:43:b8:f5:8e:fb:1f:bd:62:18:8f:af:
37:18:5d:98:a1:bb:07:40:fb:2f:22:6a:4b:75:cb:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:58:5C:10:E9:13:F0:09:C7:A1:21:18:C1:28:E8:44:DE:6C:00:AC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ddeedb0d-9305-4ed5-9341-71ac515fa4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:68:88:7d:25:42:2f:19:fb:71:bb:da:0d:d4:cf:6a:20:1e:
26:35:a4:38:7e:1d:2a:75:9d:52:84:0d:e9:64:46:8e:fc:08:
a6:d3:47:de:f0:3e:40:88:51:56:43:99:cd:2c:26:5a:d0:82:
b7:8d:3a:1e:26:b0:76:80:e2:0b:80:70:30:3c:f2:57:43:b7:
6b:04:97:2c:9c:17:90:06:35:f6:de:85:76:2b:76:2a:c5:89:
dd:3a:bc:f6:9e:c6:30:59:07:17:9f:0f:16:81:7e:86:10:7c:
a3:ea:66:25:fc:d9:25:34:a8:d2:03:76:3c:0b:8b:5b:12:44:
72:39:3e:5b:d8:f9:e3:2b:dd:31:e1:73:42:99:31:4d:49:bb:
20:ef:73:cc:6e:24:bf:b4:43:2f:11:f7:f9:44:83:41:fb:5c:
11:39:7a:a3:ea:37:75:6c:a5:fd:af:e5:98:8c:1c:af:3f:82:
07:0c:92:77:ac:2f:1d:9f:06:37:8d:9f:12:b6:6e:0a:92:b7:
5c:44:ff:fe:d9:ca:ca:69:b1:99:bf:0f:af:e0:ec:2f:06:53:
23:9e:9b:cb:ef:2e:35:61:b1:9d:1d:c3:e2:fc:ca:63:be:d2:
28:11:90:21:44:02:56:74:87:9b:34:e5:de:a9:4e:15:23:e6:
06:26:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:24 2025 by rpki-client