Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e994742c-a75b-4875-94c9-518613f18049.roa
File: e994742c-a75b-4875-94c9-518613f18049.roa (raw, json)
Hash identifier: 7SoIYigjvdIdyFqTtTR4omCuRWh8byNL7PjEyczC7Mc=
Subject key identifier: B9:D5:F9:16:37:95:A9:BA:CC:D8:41:5C:1E:31:8E:AB:7B:0B:CF:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5B955107DF15D589D45C5BC0075835418F4086B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e994742c-a75b-4875-94c9-518613f18049.roa
Signing time: Sun 28 Jul 2024 00:00:00 +0000
ROA not before: Sun 28 Jul 2024 00:00:00 +0000
ROA not after: Sun 01 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:95:51:07:df:15:d5:89:d4:5c:5b:c0:07:58:35:41:8f:40:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 28 00:00:00 2024 GMT
Not After : Sep 1 23:59:59 2024 GMT
Subject: serialNumber=17d50e046399b779347dff743bd2adced33077585f7271e0e2b4d9ebedf9a6ba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:e2:55:58:77:6d:e1:e4:d7:82:0d:b3:cd:
33:39:00:aa:84:8b:4a:a1:9e:12:5f:6f:28:07:3b:
28:93:4e:db:23:b5:4e:b2:0f:ea:8e:53:4d:11:5e:
7b:45:fd:d8:69:d0:84:6e:17:28:3b:bf:bd:ea:4a:
ec:39:52:7b:c5:af:11:5e:5e:e8:62:52:2b:74:1b:
77:b1:ab:c2:5b:ce:39:c6:4e:0f:ee:00:71:8d:a8:
83:40:fc:ec:54:aa:7b:b5:03:20:84:a9:04:e0:6b:
1a:de:a6:5e:0c:ee:6c:d3:2f:7f:f6:4c:8d:82:84:
42:06:c6:f6:b5:5e:92:f8:ed:49:e1:68:fa:64:87:
be:0e:d4:98:fa:47:7f:fd:e6:b5:98:53:6e:09:88:
a9:f5:b5:14:6c:f1:42:b5:7f:47:ff:31:94:13:b3:
40:fa:93:47:52:75:e5:68:f3:2c:eb:c6:16:55:23:
63:25:8a:fd:4f:ed:45:f7:87:21:c1:88:ca:06:01:
03:47:86:2d:95:c6:ff:5b:48:c4:1d:e0:13:fb:27:
ca:0d:66:65:d7:9e:26:f9:cb:cf:43:17:a9:75:57:
ea:a9:51:96:aa:ea:fd:42:3b:4b:7a:8c:3c:a3:31:
4c:0c:95:19:ae:46:79:94:f7:0e:ea:c2:de:08:fe:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:F9:16:37:95:A9:BA:CC:D8:41:5C:1E:31:8E:AB:7B:0B:CF:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e994742c-a75b-4875-94c9-518613f18049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b1:23:aa:cc:6f:dd:7c:11:01:47:3b:94:12:9a:cf:ab:93:
84:96:f5:39:1c:9a:b0:8c:b7:d2:37:76:57:7d:73:16:83:45:
ee:f7:af:ff:b8:d7:91:8f:d2:3e:70:b8:70:5d:0f:bf:98:3b:
33:33:3f:f9:4d:1e:aa:3e:0b:7f:ea:ab:14:51:b7:19:83:c5:
73:78:f3:b9:46:38:64:fa:3e:63:c3:50:bf:06:b0:02:2f:2d:
6d:29:fd:91:74:79:fc:79:62:9d:58:5d:59:58:7b:9a:2e:54:
f3:74:62:4c:cd:93:15:c6:9a:45:e8:3c:41:6c:79:4b:1e:ba:
f7:fe:f1:81:83:13:a9:4e:b9:e8:55:b1:77:c1:ee:bf:ec:42:
95:39:74:6e:05:ad:c3:1d:de:01:15:09:11:4f:76:e7:a9:97:
3d:15:e6:bb:b3:02:04:ba:0a:d2:20:63:0e:1c:18:19:c9:a5:
b1:01:98:1d:14:68:34:54:de:81:d6:5a:c2:fd:71:ea:9e:a1:
29:17:85:11:50:cb:d5:05:f1:cb:e7:d1:bb:2a:04:a2:41:84:
64:73:5f:75:15:e4:42:30:db:27:2f:f8:50:f4:f6:0b:45:e7:
07:50:42:9f:c9:a3:0a:5a:ed:8b:61:c9:11:3a:bb:d2:08:35:
7e:a8:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:36 2025 by rpki-client