Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb7e6bfd-50df-4361-b329-90ebdd3a1a7e.roa
File: eb7e6bfd-50df-4361-b329-90ebdd3a1a7e.roa (raw, json)
Hash identifier: dfTc2ugnFQ2fsL5IGjZrUcan5S42LHoXAioRdT4YclI=
Subject key identifier: 4D:55:8A:1C:86:F8:50:4B:35:FE:A8:E8:77:6C:71:39:99:21:5E:C9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 23633882DF5FA6AD3F6C9AAA4816983BE8DB146E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb7e6bfd-50df-4361-b329-90ebdd3a1a7e.roa
Signing time: Sat 30 Dec 2023 00:00:00 +0000
ROA not before: Sat 30 Dec 2023 00:00:00 +0000
ROA not after: Sat 03 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:63:38:82:df:5f:a6:ad:3f:6c:9a:aa:48:16:98:3b:e8:db:14:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 30 00:00:00 2023 GMT
Not After : Feb 3 23:59:59 2024 GMT
Subject: serialNumber=45f604ede8741f6a1a4c98d7cf2fe1e9858f6e7140481b8ea577d430fe49875a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:b9:55:2b:30:91:b3:0a:9c:06:02:01:0a:
e1:7d:52:87:e7:96:19:2b:15:92:0e:76:2b:12:b6:
10:8d:db:b6:8a:fe:fb:c1:ae:13:b4:de:95:e0:99:
e2:fb:a9:3a:70:35:ba:f8:21:da:85:18:4c:2e:7e:
5a:61:4e:3c:d3:20:7c:61:02:c3:5a:1c:3b:df:cf:
7a:72:ea:82:a5:eb:66:cc:b5:12:4f:f7:2b:4a:f4:
7f:72:14:5b:af:43:d8:91:d3:e0:df:6d:83:7b:fd:
e8:fc:cb:82:f7:93:91:93:19:7d:21:0c:50:9d:a4:
61:46:a2:38:b5:4d:44:24:3b:2f:e8:65:a5:04:ed:
a0:2c:c8:ff:ae:9d:fd:a5:6a:3a:55:67:2f:1a:4e:
45:39:26:4d:d8:b6:db:b8:0a:bd:a7:55:a3:b4:71:
50:01:32:e5:b1:59:ec:c2:9e:84:47:ff:b1:bb:7f:
c1:37:ae:3b:7d:6a:40:a9:b1:2c:b4:ce:99:5d:af:
c8:72:36:df:3a:c7:b7:ac:e2:4b:75:52:6a:89:fb:
75:32:7c:9c:ff:99:ff:90:e1:9c:a8:d2:84:db:21:
73:62:de:96:19:2d:2a:11:4c:39:47:85:b2:49:6b:
14:1e:6c:fe:19:3b:13:d6:04:4f:fa:31:e2:9a:1f:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:8A:1C:86:F8:50:4B:35:FE:A8:E8:77:6C:71:39:99:21:5E:C9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb7e6bfd-50df-4361-b329-90ebdd3a1a7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:16:5b:13:ff:51:7f:52:e4:22:30:79:49:de:23:14:88:f0:
cc:35:e1:cd:ee:29:cc:ee:fa:1f:23:33:4d:5c:db:39:af:4f:
ca:96:38:b6:7c:f8:7b:23:18:e1:7c:3d:84:0f:14:36:a5:be:
1d:45:a0:4d:8a:eb:9d:f0:09:35:d7:8b:c5:2c:28:a1:19:ef:
38:be:52:93:e5:29:27:5d:e0:3e:08:40:a1:ee:38:8e:e5:2b:
4d:b4:15:a7:f0:ca:e1:80:c2:ba:10:a4:43:55:e6:40:34:e2:
7f:45:e8:8f:24:ee:99:60:2a:77:59:fd:43:7d:8a:44:fe:02:
b8:94:7b:cb:60:2c:04:b9:c6:aa:17:d1:26:67:57:c2:bf:87:
1c:64:d4:9f:78:18:a9:42:8e:cb:07:d3:ca:0c:74:81:54:11:
9a:96:42:08:16:1d:1a:d3:ea:58:7c:9c:83:2e:73:fc:3d:bf:
62:c1:5b:43:89:8d:c4:a7:9c:bd:53:53:7c:4c:14:d5:20:15:
2a:dc:d2:01:7a:2e:dc:a6:1c:ab:95:bd:a9:c9:13:8b:44:4e:
9e:55:36:f2:e0:e7:0c:15:17:67:65:71:5d:6a:db:81:6e:6b:
bb:8f:10:63:c7:35:8d:e4:c3:74:f7:70:b3:81:7a:96:90:49:
a3:5f:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:06 2025 by rpki-client