Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1b057e6-fa12-40af-8174-98bc931dcf5b.roa
File: e1b057e6-fa12-40af-8174-98bc931dcf5b.roa (raw, json)
Hash identifier: 7y5GR76d8Jos55pEuxmDCmbKn5S8BffLsF8YzvRWE/s=
Subject key identifier: DE:4D:0B:7F:D7:81:F9:0D:F7:DA:24:86:43:40:DA:0F:3A:51:BF:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 11B9E650A083CC1165EA2FBADA6A6A6DA0BE0B45
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1b057e6-fa12-40af-8174-98bc931dcf5b.roa
Signing time: Sat 29 Jun 2024 00:00:00 +0000
ROA not before: Sat 29 Jun 2024 00:00:00 +0000
ROA not after: Sat 03 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b9:e6:50:a0:83:cc:11:65:ea:2f:ba:da:6a:6a:6d:a0:be:0b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 29 00:00:00 2024 GMT
Not After : Aug 3 23:59:59 2024 GMT
Subject: serialNumber=ad1c5de9fda5552cced3b1c4689d25844a70f64824e995ebd17a79a0f5e97c3f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:b9:27:19:e2:4b:ac:5e:99:6a:17:ac:27:
af:02:e1:55:70:b9:a8:2d:b0:fd:9c:71:64:9b:1a:
3b:95:dd:50:25:8b:9f:e7:a8:cf:e1:4b:a0:a8:5f:
9b:0b:1e:df:8d:33:90:f4:8e:62:57:04:98:99:b1:
18:5c:27:eb:df:61:32:3a:ea:60:1e:3f:3e:85:a6:
2a:aa:3a:a9:ac:a1:e2:b2:b9:b8:76:ae:c0:7b:3f:
98:68:5e:8e:f2:05:e9:83:f7:46:34:fb:92:ac:3c:
a6:16:c1:6f:80:3b:89:59:ae:7a:cf:f4:99:2e:01:
0d:b2:b0:ea:c3:0d:f1:07:48:63:fd:8d:2c:86:c2:
53:60:83:52:57:51:03:84:53:f5:d4:1d:47:82:3f:
fb:97:6d:03:f0:00:a0:53:89:b7:dd:41:b4:05:b4:
be:00:3f:69:a8:e6:cd:05:b4:21:cc:1e:df:96:53:
90:4d:1b:8a:ef:55:a3:52:1e:54:02:ec:cc:4e:27:
10:00:0c:91:da:fa:89:c8:81:e5:ff:21:6f:75:f2:
dd:3e:1e:b8:8d:2f:ba:d4:6b:95:dd:79:80:a5:9d:
2e:73:82:34:a8:7e:d6:64:a1:57:01:c9:73:03:eb:
0a:e8:d8:f6:f8:bd:2d:d6:39:f4:fe:20:62:5d:1c:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:0B:7F:D7:81:F9:0D:F7:DA:24:86:43:40:DA:0F:3A:51:BF:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1b057e6-fa12-40af-8174-98bc931dcf5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:76:4f:43:40:d4:a0:c1:b0:26:e5:e8:98:97:f0:16:d4:e3:
97:fb:cd:9e:98:27:35:b8:45:da:79:71:2d:70:63:2e:92:8a:
d7:33:61:96:bc:01:b9:77:c1:54:dc:6c:68:73:15:8d:82:07:
89:ed:9d:68:53:e7:0d:f0:f6:09:64:b7:3a:c2:73:7d:f1:8b:
16:d1:cc:9c:a5:13:7e:dc:b9:f6:12:f0:4a:60:76:fa:31:27:
20:be:65:dd:ce:a7:08:15:c1:17:3c:66:99:1f:1f:e9:77:e9:
be:0c:43:48:e2:90:0f:f4:4a:a6:c5:df:2a:36:fb:21:4a:54:
da:04:32:d6:fd:98:d1:a6:26:d5:c6:cf:f7:b8:d2:19:36:3c:
e4:4b:ad:fd:ed:39:4a:12:8f:fd:ab:fe:49:bb:38:55:7e:81:
14:dd:e9:ba:72:78:69:9b:fd:48:17:59:86:67:0d:2f:21:0e:
e5:a7:1f:77:f1:00:02:9a:15:fb:d5:1d:d9:22:30:9d:3b:40:
10:12:e1:68:41:90:a4:4e:d3:06:6e:6a:c6:a5:fe:3f:d7:d6:
35:82:a1:a0:ba:b5:6c:16:e9:90:5f:52:ad:4e:b0:72:e6:cf:
d0:38:e2:29:23:0a:ae:89:cd:05:ed:b2:75:51:bd:5e:29:17:
21:10:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:17:44 2025 by rpki-client