Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef862cbe-ccac-482e-a7d5-643c3bb64d2b.roa
File: ef862cbe-ccac-482e-a7d5-643c3bb64d2b.roa (raw, json)
Hash identifier: NbqBK1s+dJOIIsmAec5LVqQp64QI84Da/Qsy8FBktAc=
Subject key identifier: 00:03:DF:18:C3:98:6C:18:01:EB:BE:9B:D3:50:BC:B1:65:95:F3:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 01F0F9F65082BC92D33ADD1C36F5C6E7C52976BF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef862cbe-ccac-482e-a7d5-643c3bb64d2b.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f0:f9:f6:50:82:bc:92:d3:3a:dd:1c:36:f5:c6:e7:c5:29:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: serialNumber=0d935e5d4179c84635f3892e8265735cc2e36c7c12b91c59dd64357e3c885236, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:1a:77:b3:10:b7:97:ac:9b:b2:4f:50:95:
7a:a9:c8:23:e5:d8:8f:2a:99:0e:e7:c9:62:43:ea:
5d:3f:11:3a:31:dd:9d:45:4a:f3:15:06:f7:a1:ed:
21:d7:ba:6b:96:5e:f2:5d:d6:2e:b4:42:97:06:13:
a7:4c:91:26:40:f8:cd:81:80:26:e6:c5:9d:33:dc:
f5:76:85:6e:8d:eb:02:35:5b:85:a2:47:68:35:e8:
38:cc:59:7d:fa:b1:eb:a8:41:43:2e:a2:f5:2e:5b:
dc:4d:89:de:eb:9d:b3:0e:eb:41:4e:50:79:48:db:
7c:f5:15:2e:96:48:b9:96:85:aa:71:66:7f:ed:3c:
d8:1e:e9:7e:78:aa:8c:7f:05:6f:53:91:ca:7b:42:
1a:78:5b:6e:ca:ed:63:81:87:11:67:10:06:30:cf:
7a:05:0d:78:47:c0:36:1d:90:40:2d:1f:ef:72:b4:
02:10:e2:8b:a8:cc:9f:04:5c:49:ce:df:d8:ca:1f:
8d:3a:5a:5a:98:a4:24:89:e6:9f:2e:81:e9:f3:16:
43:fc:a2:e0:bc:d6:fb:30:26:a0:c8:3f:78:04:03:
8f:b6:1d:99:d5:a2:a0:4b:68:64:7b:8d:65:11:2e:
d4:a7:48:04:67:e4:12:7c:56:08:00:8e:9a:3a:f4:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:DF:18:C3:98:6C:18:01:EB:BE:9B:D3:50:BC:B1:65:95:F3:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef862cbe-ccac-482e-a7d5-643c3bb64d2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4d:c4:59:38:d6:f1:33:fa:25:32:e1:f7:9b:c4:94:9e:fc:
bf:83:2e:a5:fe:87:6c:15:6a:b8:b9:4b:bc:bd:e9:62:af:66:
61:59:10:e7:c6:34:b2:99:ff:24:e4:e8:ac:a1:86:41:40:e3:
92:4e:e6:b7:1e:2f:a5:30:a1:65:c9:89:3f:2d:b8:98:18:a3:
74:0e:ae:9e:6d:60:53:69:b1:16:2a:73:93:48:cb:50:55:ee:
f3:dd:32:f8:6e:ba:e9:41:e8:4f:4a:74:64:ea:77:fc:a5:d4:
fe:bc:29:72:fc:79:2e:f8:b5:34:ff:e7:b2:20:58:ae:9d:ea:
78:9c:10:1e:d2:0d:59:ae:0a:aa:54:16:2b:b9:61:74:f6:b3:
93:21:f3:23:98:f8:ce:d5:0f:98:32:2c:27:6b:2c:a8:58:11:
c4:3a:5e:14:ed:7a:6d:7c:5e:7f:d1:b1:e7:d0:bf:af:df:0b:
a2:e8:70:cf:0c:ff:17:03:b4:f7:d5:97:8d:cb:11:a2:fa:6c:
38:a7:29:d0:87:97:f5:b3:c3:5a:05:c0:29:ae:93:5d:52:dd:
64:ed:16:a9:62:9f:6a:de:f9:df:85:c5:98:22:2b:f8:93:f7:
20:4b:e6:89:1b:57:d4:ef:5c:85:41:58:79:8e:3e:bb:f6:b1:
39:c5:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:11 2025 by rpki-client