Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec62aebb-1534-4460-be96-872bb4b94040.roa
File: ec62aebb-1534-4460-be96-872bb4b94040.roa (raw, json)
Hash identifier: zwejEMuG6FkR3TWan7bvJ2ZHdJ4tVajWaYBfzv3Vj0I=
Subject key identifier: 5F:3F:70:4A:13:FB:11:8F:79:AC:30:3D:9B:91:17:5F:95:D4:9E:32
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 40C65B18ED11774BA07EAF7D1275CF43C27F9E5A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec62aebb-1534-4460-be96-872bb4b94040.roa
Signing time: Tue 20 Aug 2024 00:00:00 +0000
ROA not before: Tue 20 Aug 2024 00:00:00 +0000
ROA not after: Tue 24 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c6:5b:18:ed:11:77:4b:a0:7e:af:7d:12:75:cf:43:c2:7f:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 20 00:00:00 2024 GMT
Not After : Sep 24 23:59:59 2024 GMT
Subject: serialNumber=2f519f9e647a78730669dadedf857c719a2f94ee7398326819abdc6d4b070040, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:e6:e7:ab:6f:21:b1:d4:f4:75:cd:4d:87:
a8:b2:3f:6c:38:af:9b:64:23:1d:51:81:95:85:fe:
2c:32:e6:32:d1:a8:51:80:2d:98:5c:90:5e:82:ae:
41:13:90:4c:95:24:30:71:d3:c6:d7:54:b6:f6:ab:
af:47:9c:f1:39:04:3d:74:54:76:45:2b:a3:8a:00:
2d:4b:5f:39:f4:52:36:e5:2b:25:b9:84:5d:ce:85:
d2:e5:cd:ed:14:15:e3:2d:14:5a:11:cf:60:1d:7d:
43:71:ef:b1:1a:91:0b:7a:56:2c:a6:b2:c8:7b:ae:
b1:f8:16:14:bc:c5:b8:d7:99:52:64:18:2c:08:87:
fe:7e:dc:95:58:3d:a7:cc:b0:04:41:83:59:b3:a2:
96:a3:40:69:60:bb:32:7d:d9:49:f0:11:f6:7b:56:
01:2c:20:1f:f6:e8:63:e9:18:c6:7b:35:81:09:0c:
88:81:79:b0:4a:3f:e6:89:7e:33:8b:86:34:9a:1f:
37:88:81:b9:8a:cd:ae:fd:c8:c1:1f:ea:17:b7:eb:
d8:4b:4f:25:aa:1d:99:e4:b0:33:66:82:b2:a3:dc:
e9:f6:48:8f:af:70:58:ed:23:1a:cc:60:a7:a8:c0:
1d:30:c5:ec:58:88:2b:ff:87:fb:5a:95:b7:fa:c3:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:70:4A:13:FB:11:8F:79:AC:30:3D:9B:91:17:5F:95:D4:9E:32
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec62aebb-1534-4460-be96-872bb4b94040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fc:e6:8c:25:75:c2:99:27:1b:70:02:2e:15:49:5c:55:f6:
a5:0c:97:3b:64:83:50:5c:43:a5:57:7a:dc:60:4d:c0:47:c0:
8b:2f:eb:73:7f:73:4a:fe:a8:e7:1d:cf:10:cc:2d:2b:00:1b:
88:76:0b:42:26:36:b5:7d:85:dd:92:33:8d:a2:14:e4:17:3d:
b9:dd:33:f7:3d:bd:0b:02:15:d2:ad:f2:09:c2:02:c3:3b:93:
20:c3:25:55:5f:33:2e:7c:10:ea:96:74:2c:b2:0f:89:21:b3:
33:10:3b:dd:08:b1:2e:8a:b9:6c:f3:12:2e:82:9b:e4:d3:5f:
21:db:cd:1a:17:c7:80:c3:61:99:6e:a7:1b:d1:71:ff:0d:ad:
c7:98:dc:9e:9f:3a:81:bd:63:ce:2a:11:9d:2f:b4:7e:48:65:
34:16:70:50:f8:fa:f4:e2:55:6c:c3:37:38:70:02:cf:2a:2e:
a8:eb:0d:5b:e3:b4:e9:3a:e3:10:97:bf:c2:1f:a1:a4:83:99:
a9:19:f8:34:9f:b3:bd:12:fb:f4:61:4a:a1:0b:5f:94:2f:ef:
f4:7c:13:4d:7c:a3:f6:75:6f:bc:ef:8e:cc:bf:b1:9f:5e:c4:
7c:64:3c:08:24:d2:01:94:31:f8:23:52:65:bc:c6:cb:23:e8:
ef:6c:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:18:26 2025 by rpki-client