Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e513a7f4-d0c7-48a5-9b3f-582d9309fb57.roa
File: e513a7f4-d0c7-48a5-9b3f-582d9309fb57.roa (raw, json)
Hash identifier: mncSWeytK7a9784eoUtVQSeW0YlmS2JC3F/Hdn5vq9A=
Subject key identifier: E4:68:2C:1C:4D:81:CF:D5:C7:7A:C0:B1:C7:C8:12:70:36:A8:67:BF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2EA01B732492B901E2256081A1B44CC40EAD69EB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e513a7f4-d0c7-48a5-9b3f-582d9309fb57.roa
Signing time: Thu 23 Jan 2025 00:00:00 +0000
ROA not before: Thu 23 Jan 2025 00:00:00 +0000
ROA not after: Thu 27 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a0:1b:73:24:92:b9:01:e2:25:60:81:a1:b4:4c:c4:0e:ad:69:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 23 00:00:00 2025 GMT
Not After : Feb 27 23:59:59 2025 GMT
Subject: serialNumber=b25a089e91a38b7e0f0b1200d71be551b334ed0abdc7c5ebf1ee53e400ae6d5a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:39:01:f8:d2:34:e9:29:2a:e1:48:c9:7c:c6:
b2:cf:e7:6f:f3:ed:b6:cc:d1:d9:ea:2e:37:63:5f:
82:27:8c:51:ea:7c:32:fc:d6:3a:b9:56:22:76:b3:
ba:dc:9c:23:5c:81:58:ba:7e:0d:7d:68:4e:b7:b4:
7e:8e:5a:21:22:e7:19:28:07:98:da:77:d2:42:bb:
a2:d1:a1:f5:41:b7:dd:89:3d:9d:cd:05:0f:13:c3:
bb:4c:1d:b3:3d:ac:47:68:8d:31:15:2b:89:f6:ae:
5f:94:f0:e9:7f:45:97:e1:1c:d3:69:5d:59:7c:58:
03:60:0d:fb:93:f9:c4:4b:78:84:59:44:b6:f5:0a:
51:e6:d4:6b:60:44:31:38:55:49:fd:2a:d0:db:b5:
db:eb:ba:47:6b:60:fd:ce:e5:1d:27:6d:57:17:3c:
c1:fa:27:6d:f2:93:65:18:b8:f8:10:fd:97:62:71:
ec:66:38:6b:61:09:c6:34:6e:75:be:1d:ec:7c:92:
35:32:a6:18:b1:a8:e9:5e:1f:87:d8:e1:22:28:b2:
29:db:c2:e1:e8:96:db:d5:95:44:cd:36:94:13:be:
00:d9:a4:d6:74:8d:ec:7c:ff:9c:5f:8b:10:e0:6f:
5d:a9:cd:29:56:a1:d9:95:3d:58:9f:cc:32:7b:8e:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:2C:1C:4D:81:CF:D5:C7:7A:C0:B1:C7:C8:12:70:36:A8:67:BF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e513a7f4-d0c7-48a5-9b3f-582d9309fb57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a5:35:1b:f6:7a:67:9d:2a:ab:5d:f9:b5:39:8f:98:69:4c:
05:27:2b:ab:71:be:b4:a8:37:a0:f9:be:4b:0a:61:5d:95:d4:
2d:25:45:5c:f3:ae:02:2f:66:30:40:a5:cd:58:fc:1c:1a:b7:
1f:f3:93:66:1b:95:9f:7e:be:09:c0:63:a8:af:53:4c:af:90:
dd:70:5d:84:0b:a9:8d:57:9e:29:2d:24:1e:19:67:39:f1:68:
b5:d6:3b:a1:9b:4e:01:44:0e:f8:17:1d:ce:f5:aa:65:75:5c:
15:69:9c:29:2f:c7:99:9b:fc:a0:f3:17:1b:d3:b1:e0:50:94:
e0:34:ad:0c:1a:b5:7e:3e:65:c3:97:18:c9:d8:79:40:dc:e4:
d1:ad:f3:d9:e3:b5:01:9a:fe:f4:1a:f1:e5:c6:4d:b1:31:39:
7e:3f:3c:12:88:c7:b8:d0:e1:d2:7c:0f:da:63:bb:f9:e2:5f:
79:51:19:ed:46:71:4e:a2:63:aa:45:56:50:50:18:4a:11:37:
66:ca:30:41:56:94:95:c6:6f:1f:69:8c:6b:52:90:2e:d9:a0:
fb:6c:81:d8:4f:d5:c9:d9:18:fa:ae:84:ca:53:d8:47:88:40:
84:2f:4e:e7:12:50:a9:e1:09:c8:67:37:18:b5:de:ce:bb:82:
4e:0d:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:01 2025 by rpki-client