Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e088a3be-e766-4a16-91fb-4b0b8aa46843.roa
File: e088a3be-e766-4a16-91fb-4b0b8aa46843.roa (raw, json)
Hash identifier: Zzs5CYoB2RduwruZXMYDzJF03AfMyP7fPNfzSBMbo2Y=
Subject key identifier: 9B:F0:05:CC:02:F9:42:A3:0F:66:72:36:F1:B7:65:C7:6B:A0:DD:74
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08460D5E58AC70A07BA389D60C67C9CE8F39BB46
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e088a3be-e766-4a16-91fb-4b0b8aa46843.roa
Signing time: Sun 08 Sep 2024 00:00:00 +0000
ROA not before: Sun 08 Sep 2024 00:00:00 +0000
ROA not after: Sun 13 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:46:0d:5e:58:ac:70:a0:7b:a3:89:d6:0c:67:c9:ce:8f:39:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2024 GMT
Not After : Oct 13 23:59:59 2024 GMT
Subject: serialNumber=b935007096bb7aa5a5f60330dd9cada76c94ba3fb33f1b9dd0e9a3810d3b0409, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:c1:59:3a:fb:75:5a:3a:ef:bd:82:ca:2f:
49:69:2c:2d:36:6e:10:81:67:9e:ae:4c:67:eb:02:
db:e7:a5:6b:85:7e:ac:22:50:98:3a:4d:dd:81:75:
01:c8:c5:c5:64:40:af:bc:7a:fe:0e:84:be:02:33:
7e:09:92:f8:aa:9a:d4:92:7b:b3:fe:d1:dc:5f:d9:
01:9d:9c:be:fe:9d:df:df:42:c2:e6:a5:6d:48:83:
e1:7e:8b:33:41:11:ec:a8:27:55:6f:8d:3e:40:9e:
fa:83:a2:45:cb:a9:3b:a9:d5:d4:d0:39:2f:5a:a4:
6a:c3:eb:3d:48:69:4e:9b:2f:c1:47:d8:82:31:02:
8b:92:17:ec:d9:1d:96:4a:88:29:69:f9:95:71:df:
6f:91:4e:08:c4:82:92:7a:73:35:7b:40:0f:f0:1e:
c6:0d:31:60:f0:38:04:e7:a5:83:a7:9d:85:cc:04:
a6:1c:c2:05:e8:20:8b:66:e3:7f:43:33:1b:ba:bd:
11:88:e5:5c:71:6b:cb:72:8c:91:ab:7f:28:f6:25:
ba:eb:d9:df:eb:de:0d:76:8f:68:88:9a:a1:a8:87:
33:53:66:86:aa:4a:1b:f6:db:d4:3a:e9:dd:4e:d8:
58:f9:93:fd:cd:fc:d3:44:ac:b2:8e:af:a8:da:9a:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:05:CC:02:F9:42:A3:0F:66:72:36:F1:B7:65:C7:6B:A0:DD:74
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e088a3be-e766-4a16-91fb-4b0b8aa46843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:99:a7:3d:38:32:35:8b:e3:2b:48:16:97:ba:41:74:15:bf:
0f:61:41:e5:2b:63:b1:60:b5:08:5e:99:71:61:bc:6b:57:82:
0a:36:2e:fa:78:c6:c1:60:15:9d:89:5b:7d:e1:59:1a:67:b7:
04:98:82:21:7b:e7:f2:e7:e3:f0:9d:39:3c:d5:de:76:bd:45:
a3:c6:b9:e8:dc:00:05:f4:d1:9d:61:4b:bb:55:23:12:f4:9a:
c0:29:1f:f5:66:ad:1c:8f:67:db:2f:92:0f:b8:b0:39:8c:89:
ba:b3:93:5d:ad:b3:84:08:87:24:32:69:0b:ab:85:b4:77:c0:
95:6d:6d:bf:af:a9:41:48:7a:6d:09:9d:38:8f:8e:e9:78:3c:
9e:2f:4e:6d:b7:6c:6e:db:09:ca:b2:94:97:8c:bf:d4:4e:f7:
59:37:a5:d8:71:ec:64:46:5d:da:e6:d2:a2:1a:a8:6b:cb:c0:
02:5b:08:00:90:28:ad:c0:e2:59:dc:c5:2d:df:65:83:b7:4f:
e6:c0:8d:b7:54:bf:e7:b3:ba:e0:1f:84:56:3a:24:01:93:fc:
48:bb:e1:14:02:15:53:27:16:a5:c3:79:74:52:89:69:d9:bf:
30:16:63:26:15:c8:ee:49:eb:4a:fe:3a:71:62:61:87:13:bc:
d0:42:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:36:31 2025 by rpki-client