Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e18b040b-a70b-4d6c-8f3c-271981fd55ec.roa
File: e18b040b-a70b-4d6c-8f3c-271981fd55ec.roa (raw, json)
Hash identifier: PUW/gwYb6l+nuNM4yB8ttq1NEnl91yh+CLDZY1mdmCA=
Subject key identifier: D6:C3:87:64:4F:24:B8:DB:86:07:A9:EF:79:77:B9:41:80:54:82:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4D5D5B30E7DE15D5BD46DD015F3FCBAA3E264B83
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e18b040b-a70b-4d6c-8f3c-271981fd55ec.roa
Signing time: Fri 19 Jan 2024 00:00:00 +0000
ROA not before: Fri 19 Jan 2024 00:00:00 +0000
ROA not after: Fri 23 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5d:5b:30:e7:de:15:d5:bd:46:dd:01:5f:3f:cb:aa:3e:26:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 19 00:00:00 2024 GMT
Not After : Feb 23 23:59:59 2024 GMT
Subject: serialNumber=78fe5f917b65d5b7e41cc85fd7d67b9d76656c301665d666a4310243e7346b12, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:e9:9e:91:b2:55:b9:fd:d6:4b:c5:54:35:
a0:ee:85:d5:d3:53:24:2d:85:72:28:82:40:2f:d9:
36:75:2a:3b:57:7d:41:25:bf:de:47:d8:e1:b6:c1:
9a:40:53:37:a4:bc:f3:0f:df:9c:82:90:c0:47:5c:
89:8c:18:3d:7e:8d:43:1b:e2:9a:06:03:37:d1:19:
e6:e8:8e:8c:e8:69:94:cf:76:69:4a:44:0f:a0:bc:
c3:8d:17:3b:e2:9d:ca:03:d5:71:96:c6:a7:f3:5e:
a1:c2:f7:ed:21:22:d3:32:55:49:20:f3:ad:50:51:
ae:7f:47:bf:3d:1c:b0:a0:44:ee:bb:77:24:72:f3:
aa:b6:b2:df:6e:dc:e5:88:e3:11:4d:17:d2:a3:e8:
96:ff:7e:cc:e3:3f:ee:7d:59:ac:5f:f6:71:99:a3:
cd:20:f6:fc:cb:2f:ef:c5:4c:19:03:1f:66:58:c5:
a6:52:6d:a1:91:d7:ab:b8:a6:e8:f2:3f:2b:bb:69:
b2:d6:5c:c7:e0:95:00:e9:99:c3:ca:fb:7e:3c:43:
c4:d1:4a:d3:72:62:60:b8:f5:54:62:f6:30:50:b9:
73:bd:7e:6f:7f:fe:d8:ce:88:d7:fc:45:af:26:a0:
b6:35:eb:33:a8:fd:18:dc:ee:bc:45:0c:d0:51:51:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:87:64:4F:24:B8:DB:86:07:A9:EF:79:77:B9:41:80:54:82:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e18b040b-a70b-4d6c-8f3c-271981fd55ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:87:a3:41:25:2e:88:fb:18:9d:85:e9:72:e5:a9:31:dc:84:
cb:bb:b3:13:92:b3:05:3f:f0:c1:3b:18:16:e7:62:12:8c:76:
4b:cd:58:53:c9:48:cb:bb:96:c1:a8:e5:69:bf:94:6b:17:cd:
9c:c5:fc:d6:45:46:1a:c7:07:ce:f8:07:ea:a5:72:60:8f:c5:
34:b3:80:ac:3f:ac:7f:db:ca:1c:73:c8:87:f8:dc:a8:13:8d:
36:76:0a:95:e5:53:93:95:69:4a:40:35:39:5e:ed:21:70:30:
fd:24:9c:a3:86:2d:6e:1d:2d:cc:64:7b:8c:4a:f3:95:72:15:
2e:94:65:59:b7:15:dc:22:f9:48:08:f2:3b:f8:54:0a:e6:65:
93:0a:13:ad:9c:ba:7e:d8:9d:d9:c4:6d:8e:a2:20:3e:ff:e0:
2d:95:7b:5c:f1:21:e2:da:fc:60:54:38:9c:8c:67:0d:48:11:
d7:bc:ca:ff:c0:98:78:7f:27:3e:c9:d0:3c:1c:ff:62:24:66:
c6:f2:d9:e9:e8:91:88:8d:ad:2c:87:9a:58:61:f0:38:4e:58:
79:68:e7:c8:06:a3:e5:2c:79:f9:c2:ca:52:62:9c:f8:8c:7f:
e2:07:6a:be:67:fe:10:17:38:95:57:36:8a:89:eb:bf:77:6e:
8f:23:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:24 2025 by rpki-client