Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fce6f8b6-b634-44ea-acd5-d0cb2bcfc1ef.roa
File: fce6f8b6-b634-44ea-acd5-d0cb2bcfc1ef.roa (raw, json)
Hash identifier: 0/MTmyO8EXTcczYYTXg7wW0hGfjkZathdjfG3hucmgQ=
Subject key identifier: BB:26:5B:E4:F6:36:A5:83:D2:F6:C0:CB:EB:97:F7:5F:D5:47:EE:90
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 30C5964DD4AA11995A74F6CC95141D14C60A715D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fce6f8b6-b634-44ea-acd5-d0cb2bcfc1ef.roa
Signing time: Sat 23 Sep 2023 00:00:00 +0000
ROA not before: Sat 23 Sep 2023 00:00:00 +0000
ROA not after: Sat 28 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c5:96:4d:d4:aa:11:99:5a:74:f6:cc:95:14:1d:14:c6:0a:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 23 00:00:00 2023 GMT
Not After : Oct 28 23:59:59 2023 GMT
Subject: serialNumber=f4464df6362edccd5f31affa8f036162e1380bf262d73e679bea11c3eaa21323, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:c4:04:73:79:97:ea:bb:d4:c6:da:e7:ce:
87:b8:1e:b8:d6:ac:5d:04:5a:d7:7c:98:3e:b3:c2:
ac:77:b1:8a:73:d3:d1:e6:31:ae:7a:18:19:a8:c4:
b9:52:36:23:d9:b8:af:80:83:2e:04:29:7b:f7:d5:
af:ab:dd:ae:6e:48:e0:12:6c:17:ff:73:70:ee:10:
98:6b:87:d4:f4:bf:91:1d:90:47:af:61:db:60:27:
89:7a:b8:ea:3f:24:8b:34:1f:fb:fa:bd:db:1b:12:
25:f0:03:04:40:38:ba:61:c0:21:f0:21:90:37:39:
e9:66:a6:34:1e:cc:ff:71:24:51:18:bd:46:d1:55:
74:1a:e4:54:0b:67:2d:86:dc:af:5c:b0:09:52:c2:
02:ef:b5:f1:88:12:8b:51:ee:13:83:c2:51:03:bd:
5b:38:fd:d4:1c:8b:8f:51:53:31:7c:c8:d1:bc:f2:
19:18:82:04:13:d2:57:42:17:e0:d4:0c:76:36:76:
08:01:11:ce:b3:11:54:e7:09:8a:13:cb:ef:6a:0d:
25:f1:f7:ec:2f:b5:f0:7c:96:84:8b:b8:d4:05:1c:
f9:2c:07:93:92:bf:a8:28:6b:a4:91:b9:f6:ad:58:
51:27:04:6b:6e:32:20:3f:b9:f7:b8:16:9c:fe:a1:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:5B:E4:F6:36:A5:83:D2:F6:C0:CB:EB:97:F7:5F:D5:47:EE:90
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fce6f8b6-b634-44ea-acd5-d0cb2bcfc1ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c6:ec:35:fc:b6:d5:dd:92:a3:68:53:bd:be:38:71:a0:f0:
2f:a6:a7:9d:db:a5:6d:bd:66:6b:a5:87:1c:f9:ba:07:8f:1a:
43:87:7d:63:8d:87:db:57:c2:3e:35:7f:ab:a5:45:7b:13:a2:
f2:b1:7b:16:74:04:f1:7d:6e:c1:28:45:64:b3:9c:e5:e0:5a:
c1:20:15:a2:f5:4e:c6:1f:a5:7e:58:b9:6b:94:ed:9e:b2:4b:
e1:1e:cf:10:dc:b7:97:4a:53:20:05:15:49:4f:3b:47:0b:d3:
22:2f:e2:d7:8a:24:d4:66:68:4e:ef:0b:19:24:83:2f:6b:69:
61:07:3c:e0:19:6c:b6:31:16:9e:fc:9a:98:70:da:3c:b4:77:
1e:21:81:20:54:3f:cc:dd:0c:54:1e:ce:f1:46:b8:fb:d7:df:
22:f6:d6:ed:d5:c5:2b:c2:a2:86:51:0e:be:d9:a9:e8:66:a7:
ea:74:db:7d:bc:ec:35:2e:b1:0a:0c:4f:c9:77:8d:64:ec:0c:
e0:7f:8e:97:9a:05:2b:24:21:d9:64:e2:f4:e0:cb:fa:d4:ec:
08:0d:53:bb:67:ff:8b:74:4a:87:2c:ad:3b:57:d9:88:3b:a5:
47:46:b2:ff:d0:b5:be:35:42:ad:aa:d8:0d:2c:b2:d2:ea:1d:
c6:5e:34:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:58 2025 by rpki-client