Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4c7f53d-1657-45e5-a42a-279e2f6a4f1f.roa
File: e4c7f53d-1657-45e5-a42a-279e2f6a4f1f.roa (raw, json)
Hash identifier: oTkwWKDBsL0uaM51u9ak5py6Qd5QKJeQvLdBlrzZqpQ=
Subject key identifier: 79:36:B6:31:2A:08:AE:6F:F9:D4:5C:0B:22:2B:DA:5B:CF:10:28:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74A9BA96D5E5DC7B55B39E0817F09A8CC0E41326
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4c7f53d-1657-45e5-a42a-279e2f6a4f1f.roa
Signing time: Sat 11 Nov 2023 00:00:00 +0000
ROA not before: Sat 11 Nov 2023 00:00:00 +0000
ROA not after: Sat 16 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a9:ba:96:d5:e5:dc:7b:55:b3:9e:08:17:f0:9a:8c:c0:e4:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 11 00:00:00 2023 GMT
Not After : Dec 16 23:59:59 2023 GMT
Subject: serialNumber=6d43e9a83cde0ee51c7805c04e7bac779a5c17010b280cd02b538416203e7ff1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b5:9f:96:de:8d:59:56:f7:d8:eb:a7:dd:b3:
70:b0:e2:1c:2c:0a:25:f6:fa:eb:8e:7e:dc:cd:d7:
9a:e5:9a:99:92:47:ed:3a:c2:2e:bb:ae:9c:ad:0d:
77:73:85:0c:f2:c7:65:c8:2e:45:5d:e5:18:3b:47:
f7:75:f2:4b:00:b6:79:56:eb:c4:30:4f:7b:3c:a0:
ca:d6:d7:0c:e8:8c:91:db:17:9a:b5:20:83:cb:b8:
f1:81:a2:fe:0b:0b:6e:08:5f:e5:79:1d:41:cc:05:
2e:41:18:2c:2d:63:b0:11:26:05:7a:0b:18:21:6a:
66:d0:80:9c:3c:48:c3:53:f5:9b:62:03:62:30:8d:
d7:e2:ec:b7:66:24:6e:2c:0c:e4:3e:87:e7:44:ed:
95:ce:62:6b:ba:3b:00:2b:b9:83:13:fc:28:ef:dd:
76:14:c3:7c:f6:99:8c:e9:4a:be:6b:a1:de:47:b0:
de:34:a8:1f:aa:72:61:b1:44:9a:7e:f2:f8:46:71:
90:bd:00:a3:c6:05:47:76:5f:f6:c8:a9:d9:8d:4e:
e1:7b:85:69:86:a3:01:7f:e5:ff:30:37:d1:8d:34:
ef:e7:f2:01:09:67:6a:3f:ae:45:4f:38:de:d5:07:
c0:37:e1:aa:28:4b:77:1f:d4:49:2b:53:73:b6:0b:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:B6:31:2A:08:AE:6F:F9:D4:5C:0B:22:2B:DA:5B:CF:10:28:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4c7f53d-1657-45e5-a42a-279e2f6a4f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5c:0a:c4:6e:4e:48:b2:bc:e2:15:83:f4:f7:db:6a:af:2d:
c4:a1:e3:09:c0:12:04:8c:4e:85:bc:10:d3:f9:43:5b:35:90:
5b:52:16:34:4e:01:7b:23:f8:9d:fa:ba:8c:e5:1e:19:9b:26:
29:39:c7:b4:98:7c:3e:e3:3a:f3:9b:96:92:f8:22:6e:28:dd:
ce:1a:de:8b:33:f0:37:ab:26:1d:93:c4:b4:8f:2b:d4:bb:dc:
2f:61:15:0f:4c:df:fe:35:db:82:fe:2c:f8:fc:85:b5:3c:65:
06:3d:15:4c:e1:fc:ba:a4:bd:f0:47:f2:5d:2b:be:54:a1:d0:
44:fc:e7:bf:22:ca:47:52:d9:43:08:d7:cc:62:e6:12:c5:8b:
86:80:d8:ad:a5:36:fc:3c:68:8a:d2:10:ff:6d:7d:6c:07:18:
0f:bb:e8:ac:76:80:59:9b:6d:75:23:5f:bf:60:36:42:5e:c8:
ed:f7:17:4e:75:fe:31:6f:47:f4:f0:8d:f9:d1:69:cd:3c:3d:
04:24:2e:e1:bd:78:c1:1c:c4:37:ea:0b:7b:81:c9:f0:7f:05:
3c:a6:5f:08:37:2f:13:72:58:2a:1a:fc:d2:13:b6:cb:28:78:
09:6c:b4:ea:8a:1e:4b:67:fe:d4:3b:75:a1:dd:29:c0:f9:f9:
0d:63:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:23 2025 by rpki-client