Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea2437f3-aed2-412e-ad46-178923c528d5.roa
File: ea2437f3-aed2-412e-ad46-178923c528d5.roa (raw, json)
Hash identifier: eUSxuotZThzAmuPfY6v2g4zW6T1SPBO9OZ3GqPe+Khc=
Subject key identifier: 52:E4:EE:20:86:A4:16:34:31:B3:FC:DF:03:CA:20:26:45:75:20:32
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CED183648309BA9BA405ECB33697801945E0C64
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea2437f3-aed2-412e-ad46-178923c528d5.roa
Signing time: Sat 20 Jul 2024 00:00:00 +0000
ROA not before: Sat 20 Jul 2024 00:00:00 +0000
ROA not after: Sat 24 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ed:18:36:48:30:9b:a9:ba:40:5e:cb:33:69:78:01:94:5e:0c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 20 00:00:00 2024 GMT
Not After : Aug 24 23:59:59 2024 GMT
Subject: serialNumber=41705b092019d9c1ed0fab1a9d66d6f7847a5ecdec6656e5b27828a355512a5a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:c2:7e:12:7a:49:a6:2d:98:60:fb:2a:79:
50:84:81:16:a8:7f:80:30:52:e7:c1:98:da:ea:e1:
74:cb:60:77:1e:07:10:33:95:40:ef:73:14:a4:0a:
ff:97:0c:63:22:38:b4:24:3a:6d:68:bb:52:66:6f:
85:3c:b6:43:ca:fd:54:aa:43:54:2e:91:de:4a:c0:
66:30:68:b4:8a:88:38:c4:8d:e9:66:9f:e3:fd:e7:
b4:7a:83:e6:ef:cc:5f:e1:be:63:a8:38:84:de:02:
d4:a6:da:d4:3d:7e:22:36:75:44:d3:b0:61:3e:fa:
b3:32:cc:bb:56:e5:1e:0b:77:e9:4e:13:dd:74:33:
74:43:b8:c1:1b:97:60:2d:1e:bf:b0:eb:2f:ed:4f:
a7:df:f8:1a:34:90:6d:89:bb:cc:56:b0:ac:5b:c2:
d0:14:b5:6f:ab:de:ba:54:59:86:93:03:71:ce:11:
fe:df:42:77:81:71:e1:2c:39:bb:38:70:ef:6b:c9:
fc:b2:a4:0c:c9:dd:ab:57:b0:3e:5b:26:03:be:62:
03:6b:59:53:04:86:7f:37:fe:60:25:28:e1:85:78:
bf:3c:88:cc:46:1b:52:a5:8b:c6:a1:da:eb:49:16:
69:3d:38:aa:e4:0c:09:5d:68:ca:a2:04:44:d9:4e:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:EE:20:86:A4:16:34:31:B3:FC:DF:03:CA:20:26:45:75:20:32
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ea2437f3-aed2-412e-ad46-178923c528d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9a:6d:8d:fe:e8:37:6e:a8:ff:7b:04:c8:2d:92:9a:3c:af:
a2:f4:b6:13:51:21:e9:4e:81:d5:93:9e:cd:cd:b0:c5:71:6c:
ca:03:92:f0:d6:ee:99:3e:ec:1e:e4:22:10:be:75:57:c4:09:
85:b0:0b:87:36:86:16:dd:39:49:c5:8c:a0:da:51:b4:56:74:
ba:77:80:59:49:fa:13:16:79:94:ee:09:b5:63:73:76:ae:9c:
a0:fb:a5:90:76:e0:ab:f7:86:7e:de:80:9c:b1:ea:78:f8:50:
57:18:a7:1b:f2:99:8b:f1:58:76:11:16:f4:db:58:46:05:2d:
75:fb:7e:d6:33:db:2b:df:86:f2:d5:ca:3a:22:93:70:08:d9:
3c:97:f8:89:a3:b9:61:1c:b1:41:55:d9:41:fa:c6:ff:40:1e:
22:ad:92:2f:9d:74:59:e1:7b:97:1c:80:d6:5c:2f:28:1a:13:
7b:74:e3:8f:ea:5f:2b:0b:4a:0d:37:cd:bc:95:78:8f:8d:3f:
cb:7d:00:95:d5:5c:4f:e9:0c:03:63:d2:6f:36:64:33:48:ef:
0d:4c:24:6c:57:02:48:41:3d:b1:ca:c6:0f:ba:33:d3:be:b5:
fb:4e:fd:d4:f4:6c:2f:76:54:38:15:02:af:fc:8d:b5:5d:89:
f7:ea:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:27 2025 by rpki-client