Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f98c177c-9158-4598-a15b-43a0cbacc5aa.roa
File: f98c177c-9158-4598-a15b-43a0cbacc5aa.roa (raw, json)
Hash identifier: MPqePV6GeUSh45FdFF2fcoRqbfgCf4qxdIezvo2lDfA=
Subject key identifier: 2A:50:30:21:BA:1E:F7:F6:24:C6:13:64:C9:A8:E0:12:66:FB:75:53
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4858D2A71CE5DCE69926FBAA256F6C5BAE8A8EC3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f98c177c-9158-4598-a15b-43a0cbacc5aa.roa
Signing time: Mon 16 Sep 2024 00:00:00 +0000
ROA not before: Mon 16 Sep 2024 00:00:00 +0000
ROA not after: Mon 21 Oct 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:58:d2:a7:1c:e5:dc:e6:99:26:fb:aa:25:6f:6c:5b:ae:8a:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 16 00:00:00 2024 GMT
Not After : Oct 21 23:59:59 2024 GMT
Subject: serialNumber=09f5f14dead6e851b6266224dcb21a4e1e5803b908b816434314e818d9cb74ef, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:7b:1c:c5:3b:e4:fb:45:93:8f:89:e4:ba:
17:e9:b6:60:56:9d:80:70:76:05:0e:4d:cc:e7:4e:
c6:66:02:5a:2f:d8:a1:87:6d:d2:40:20:bd:db:90:
e0:fc:bd:50:da:ee:fe:34:2f:0c:dd:2e:d9:61:a9:
15:71:43:48:4c:0a:96:7e:c4:e0:82:b3:b0:c1:41:
d6:41:3b:40:7f:93:ca:3f:c0:ab:5d:dc:63:b0:b4:
c7:aa:cb:52:12:2d:68:6c:79:48:3f:82:be:9e:4c:
bb:58:cb:36:e8:ed:0a:7c:b2:2b:7e:12:fa:e9:10:
ed:29:16:99:c1:ad:9c:6a:08:92:13:b0:ee:47:e9:
29:d7:a4:ed:5f:5b:a5:00:22:c8:35:a6:7a:ec:79:
f0:e4:79:81:3f:de:9d:27:39:66:0f:65:ae:1d:be:
e2:09:9d:14:4e:73:d5:62:b9:a6:d6:a2:b2:be:b0:
2d:a1:bf:cf:80:7a:83:12:98:30:09:9b:a3:60:84:
e8:fb:7c:a0:95:cb:04:ff:34:f7:08:65:09:c3:95:
5f:45:ce:2c:f9:76:f0:2a:b8:03:36:67:82:9a:78:
db:f1:46:89:37:a1:c8:1f:5c:bd:1e:75:c1:5a:b3:
c0:80:9f:35:f4:8e:37:5e:f1:50:44:3a:0f:7e:96:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:50:30:21:BA:1E:F7:F6:24:C6:13:64:C9:A8:E0:12:66:FB:75:53
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f98c177c-9158-4598-a15b-43a0cbacc5aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:77:bd:b1:ed:41:1a:f8:5d:a4:ba:c3:8e:27:a6:67:51:ee:
26:c3:d7:35:ac:e8:32:83:ea:f6:43:27:d4:fb:80:9d:fc:a4:
50:ad:44:b9:0d:73:3f:99:af:28:03:3d:b7:78:5b:5b:4e:3b:
63:78:f8:0d:2e:fe:01:08:76:22:6a:e4:d3:c2:40:67:c3:6c:
a6:fd:a8:e0:54:93:71:f0:26:0f:dd:12:30:8d:21:7c:1b:59:
af:b8:3f:d2:09:ae:fb:78:7c:2b:10:b0:49:e1:25:1e:52:f5:
97:9d:71:9f:10:0e:b8:c1:23:6c:c7:a1:a1:6b:be:72:61:0a:
b7:bb:ff:fa:40:72:16:3a:00:b8:e8:05:b1:dc:02:74:f6:8f:
71:ae:2f:b2:4a:4d:d7:85:4c:66:63:a3:e5:09:fc:b6:2d:78:
9d:60:a2:d9:5d:f6:bf:33:95:3d:fd:53:d5:21:89:47:e8:22:
e0:b3:d4:b7:24:aa:c4:5a:6c:a7:ca:20:c1:9b:f7:74:81:40:
f6:38:5b:91:77:76:90:b2:52:db:6d:50:f4:6e:06:65:6a:b4:
8c:59:62:09:26:c2:e3:29:64:c8:c2:f9:f5:a2:c3:f4:f7:0c:
87:a3:2b:f7:3a:8d:3b:8f:1f:f4:87:5a:11:43:62:65:e4:fc:
37:ea:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:08 2025 by rpki-client