Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd102b1e-767f-44fc-ba0a-c312d52131ba.roa
File: fd102b1e-767f-44fc-ba0a-c312d52131ba.roa (raw, json)
Hash identifier: mft1hjtZy/16fTovHdB/1g3tvIcLopblYmzCgxQco28=
Subject key identifier: 06:5D:5D:DA:E1:45:B6:67:9D:B7:FA:0B:61:1F:48:4A:54:16:9C:FA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 44B51621BBA3F0FF575F08A43D586A6E80AF1F04
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd102b1e-767f-44fc-ba0a-c312d52131ba.roa
Signing time: Thu 30 May 2024 00:00:00 +0000
ROA not before: Thu 30 May 2024 00:00:00 +0000
ROA not after: Thu 04 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b5:16:21:bb:a3:f0:ff:57:5f:08:a4:3d:58:6a:6e:80:af:1f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 30 00:00:00 2024 GMT
Not After : Jul 4 23:59:59 2024 GMT
Subject: serialNumber=6a823f0b1ac0f23c6fbcdd69c7d4f742e40ae9287e863230d80026c916d8d77e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:28:d5:3b:60:d3:30:09:a2:b5:22:61:80:
68:16:91:e7:c6:61:91:55:15:12:6a:34:9d:05:d2:
3e:57:37:e9:05:cb:15:28:5b:9b:3d:8e:e7:34:b7:
12:71:c1:9f:e6:50:3b:e0:ea:69:4d:6f:54:04:9d:
08:9b:f2:13:f0:ee:f4:9b:56:95:e8:0f:65:30:f7:
26:46:1f:71:49:dd:f3:13:9d:fc:c2:d6:35:78:37:
5b:b0:00:50:28:de:08:41:7b:f9:61:d5:aa:59:f6:
f3:c7:f7:15:14:b5:18:c4:59:7f:00:97:32:61:1c:
d5:91:64:0a:4f:5e:4f:e5:5a:4a:c8:4e:3e:f1:0b:
5d:26:64:53:1b:d7:b0:25:2f:41:fd:8f:47:f7:cf:
f0:e1:f3:58:2c:48:dc:0b:16:39:44:35:bc:63:7b:
f4:c9:e7:8f:6b:45:c3:18:de:11:1c:93:9a:55:33:
95:25:8b:5d:70:09:20:b6:80:d3:a7:b6:d7:a1:03:
f1:fc:80:06:fb:c4:93:a6:19:56:60:8f:d3:f3:5e:
d5:ce:9e:41:c7:78:13:bb:2a:54:13:67:bb:f9:ad:
db:08:a0:38:af:73:fb:22:8c:2a:cb:3f:73:44:98:
94:d3:31:ac:84:34:61:05:82:c1:f4:d9:ba:b8:e2:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:5D:DA:E1:45:B6:67:9D:B7:FA:0B:61:1F:48:4A:54:16:9C:FA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd102b1e-767f-44fc-ba0a-c312d52131ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7c:91:65:42:e6:dd:8d:3f:a9:cb:66:4c:b2:08:69:5d:e4:
56:6f:34:0c:e3:f2:25:4f:94:4e:a0:67:b3:05:83:b3:90:45:
3f:22:02:87:24:35:36:6d:ce:66:81:f6:99:21:34:93:83:cd:
c3:50:d6:19:37:1c:50:36:7d:a1:b3:b0:c1:ae:59:3b:e9:5c:
fe:67:fd:87:9a:a2:0d:80:9f:de:09:37:68:34:fb:4b:5f:10:
32:fc:6a:eb:28:59:cc:b1:55:43:1c:2c:27:ca:8c:e8:17:a6:
11:a3:fa:a3:62:52:0b:9e:f8:63:87:86:59:63:66:0d:a7:c5:
63:ed:ee:be:b4:87:1e:55:79:35:0a:71:47:0e:1a:eb:13:66:
9a:b2:75:32:a9:1a:17:41:30:ce:fe:2f:c9:75:3a:fa:57:e6:
3e:1d:fc:4f:14:cb:f5:97:59:6a:c5:1c:10:cd:b0:e7:ea:b8:
30:32:65:95:a6:37:45:2a:d0:db:5e:0c:e9:6e:9e:be:4f:9a:
82:ec:10:20:c2:ca:40:0e:b3:a2:4e:e8:90:72:09:c9:fb:08:
0c:db:1e:80:c1:db:55:8d:ff:0e:cf:1b:f8:2c:95:b0:a8:87:
63:f2:12:87:8f:37:fd:7e:0f:5c:24:a3:5e:8b:e2:64:e2:f7:
eb:1a:50:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:58 2025 by rpki-client