Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eee70792-680b-4279-827b-77b99c613ac5.roa
File: eee70792-680b-4279-827b-77b99c613ac5.roa (raw, json)
Hash identifier: g8u1Du7s3/THoWrX2P+0kCFATe3HGdLzYVTAd5jAQAo=
Subject key identifier: C0:A7:0C:5C:D1:10:AD:8C:11:0E:33:BB:FC:69:8A:6D:CF:22:2E:98
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 09D5B3F5DB11CE14E3E3FA8E8C668B6C2A1C5DA3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eee70792-680b-4279-827b-77b99c613ac5.roa
Signing time: Sun 29 Dec 2024 00:00:00 +0000
ROA not before: Sun 29 Dec 2024 00:00:00 +0000
ROA not after: Sun 02 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d5:b3:f5:db:11:ce:14:e3:e3:fa:8e:8c:66:8b:6c:2a:1c:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 29 00:00:00 2024 GMT
Not After : Feb 2 23:59:59 2025 GMT
Subject: serialNumber=2cb1d87283a202f30d60d1e009ed9f85145f6da65d27617ad05bc24b2982f83f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:dd:b6:5b:1c:0d:0d:99:93:7c:0a:94:87:
5d:c0:5b:57:b7:ea:2d:b7:ff:11:aa:fb:cf:7c:bf:
25:d7:3e:5d:53:a4:1c:15:51:1c:1b:2e:28:db:df:
4c:0e:47:3e:93:85:d6:38:6f:63:1e:4a:85:a4:13:
4a:67:e6:2b:59:48:e4:11:cb:47:29:f1:4d:bd:81:
2c:a4:c9:1d:a7:ad:a0:38:d3:a2:4a:9f:f8:a1:eb:
43:97:6d:0d:d1:36:a8:46:84:a4:e5:5a:d8:e1:df:
16:f4:e7:6d:d4:e2:db:44:45:1f:39:3e:ec:57:7f:
25:79:d8:03:bf:40:4d:dd:12:3c:92:ed:b5:c1:bf:
e6:a9:59:8c:c5:7b:58:9b:23:6b:42:be:b6:66:38:
06:c9:42:8c:a7:6b:95:76:aa:e6:c9:53:2b:96:b9:
c9:96:fc:e6:86:51:58:58:de:23:87:a5:72:54:28:
3b:41:6c:af:59:fa:e2:b4:ac:66:85:95:39:63:e4:
0e:47:4e:c9:64:ec:c3:86:09:66:fd:a8:66:72:fa:
56:c0:a2:66:1d:a9:68:04:59:78:63:10:ae:1c:5a:
b3:8c:67:25:1a:e2:2d:f9:3e:d6:61:a6:a9:99:e9:
b7:49:d6:29:7d:e7:94:e3:60:7c:a7:ad:e7:05:5a:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A7:0C:5C:D1:10:AD:8C:11:0E:33:BB:FC:69:8A:6D:CF:22:2E:98
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eee70792-680b-4279-827b-77b99c613ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:de:d2:d0:53:fc:8b:a2:8d:8c:61:7e:4f:b8:2e:92:e2:33:
66:38:dd:11:0f:73:f7:0e:a7:db:36:c1:d5:07:c2:b4:45:00:
49:71:f6:85:16:0e:18:26:4b:b4:a2:53:b2:b3:da:5a:5b:d3:
7f:ba:7a:8c:97:4d:d6:e9:57:b9:a8:51:81:45:43:1b:1d:1c:
b8:8d:74:51:78:00:6f:3c:9d:b1:97:0a:eb:91:68:65:df:5e:
db:8c:b8:88:cf:1a:32:0b:66:98:d1:00:26:9f:fb:1b:4d:10:
15:fb:6e:d5:3b:5d:84:ce:a7:bc:38:bf:50:6d:73:c7:3a:92:
3f:4d:ec:08:03:04:d3:74:5b:eb:91:eb:d3:17:18:0b:f0:8a:
b5:2c:63:c7:35:0a:76:93:a0:10:64:90:1d:84:ca:49:bd:e1:
62:be:0f:02:4b:ec:c7:da:67:dc:5f:0b:e1:46:95:2b:56:8b:
d4:42:c4:3f:d4:d0:26:8e:81:7b:3a:d8:a9:4e:c0:3a:60:04:
03:c5:81:5e:d9:c1:7f:ac:ab:26:f2:45:b1:a0:d8:08:b6:5d:
1a:32:bc:93:1a:8e:32:66:96:6e:47:7a:5a:2e:cc:5f:a1:ce:
5d:eb:bf:08:e6:92:f7:37:1a:b6:75:42:e2:4b:c1:23:f2:8e:
f6:53:3b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:55 2025 by rpki-client