Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e77f8d23-712d-40a2-bcc7-f86a6f4f5279.roa
File: e77f8d23-712d-40a2-bcc7-f86a6f4f5279.roa (raw, json)
Hash identifier: RjtFQRIRZ7lXLyGqZ6432ze+dk0pb2frXgaHCXZtfUA=
Subject key identifier: 13:C3:5F:64:A7:FF:56:CC:67:7F:B9:D2:45:D1:F7:19:26:37:E8:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7550950CFF690E4CC48D8695B38592ADEBE3C2A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e77f8d23-712d-40a2-bcc7-f86a6f4f5279.roa
Signing time: Tue 05 Nov 2024 00:00:00 +0000
ROA not before: Tue 05 Nov 2024 00:00:00 +0000
ROA not after: Tue 10 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:50:95:0c:ff:69:0e:4c:c4:8d:86:95:b3:85:92:ad:eb:e3:c2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 5 00:00:00 2024 GMT
Not After : Dec 10 23:59:59 2024 GMT
Subject: serialNumber=b74d7e5ca9f580881876de4c1e2890eeae8ee2bbaf9c986ba001ecb59f7271b9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:e8:dd:fa:a8:d9:ea:f9:af:49:ff:b0:bc:
81:72:89:a2:99:d8:b3:d2:de:a6:aa:32:76:aa:4f:
bd:14:55:f1:b2:8c:a4:65:0e:9f:bb:54:96:33:02:
1e:e6:7b:7a:0b:3a:f4:73:06:c3:ca:45:24:c2:3d:
9d:7f:a9:12:68:ce:d6:7e:5f:02:3e:dd:62:b2:4e:
ee:b9:de:1a:19:ef:d6:c5:d2:ff:8e:10:2a:1d:36:
4c:fb:ef:19:d6:d8:e9:28:4e:4e:b8:fc:8d:9a:f8:
ab:3d:c6:da:63:28:1b:d6:4e:0f:6e:28:fd:20:93:
85:e8:49:51:d7:64:1f:cf:de:bb:9b:df:57:74:76:
22:eb:ea:4a:83:9f:3f:bf:0d:6f:61:b7:6a:af:8f:
ce:1d:a6:72:57:d5:5b:61:3f:a0:da:03:d8:8c:14:
39:a3:32:4c:70:8b:15:3d:65:7c:e2:ae:59:8b:de:
c8:57:98:47:89:ef:c6:40:1b:fb:24:ad:5f:36:45:
82:63:40:39:05:97:7f:52:68:07:2d:d4:f0:f6:9c:
02:f9:b8:07:2c:3f:90:15:3a:f1:aa:99:7c:db:86:
1d:f2:7a:c5:5c:56:8d:ed:98:e3:b7:16:55:84:ae:
a6:00:ea:4c:b0:50:32:d6:2e:2f:65:ee:fd:96:ba:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:5F:64:A7:FF:56:CC:67:7F:B9:D2:45:D1:F7:19:26:37:E8:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e77f8d23-712d-40a2-bcc7-f86a6f4f5279.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b9:3e:79:c5:47:89:75:45:c1:18:ac:e0:2a:11:43:7c:c6:
9a:9c:98:76:01:b4:77:6f:f2:02:cf:58:8e:b8:0e:bc:ee:16:
b6:63:ab:69:86:fc:8e:f6:b9:cd:9a:27:84:99:99:67:d0:62:
9b:a8:48:ba:d2:1b:77:7f:6b:39:03:c5:29:60:ee:78:9b:3e:
37:ac:06:a8:e5:b2:be:af:c1:cf:bc:b0:56:79:88:ea:e0:25:
03:00:2b:e7:d0:ab:1a:ad:74:37:70:05:d3:4d:39:2c:62:03:
c9:dc:2d:b0:b3:4e:0a:bf:7c:38:e0:05:08:72:07:4d:9c:07:
81:a5:2d:79:00:31:20:74:98:c1:1a:c4:2b:c2:23:58:96:f5:
5e:84:2f:ea:59:99:ab:5c:02:0d:ba:2b:90:6e:19:af:f1:36:
57:c1:8a:b6:58:3a:e3:8f:9c:08:5f:ca:e5:eb:df:4b:6f:98:
d0:db:9b:7b:6f:81:92:c8:d7:b4:62:56:91:82:6b:ee:9a:3e:
0a:fd:15:d1:1f:77:6a:7b:a1:c0:eb:47:0e:80:be:37:31:5b:
39:82:21:83:9a:8c:13:57:ae:d9:43:4a:94:46:fb:3f:ea:00:
95:90:cb:f4:25:36:30:f7:1d:f9:59:7d:81:30:fa:7e:c2:ed:
b4:64:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:58 2025 by rpki-client