Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd51be28-a998-4208-bfda-d89c083cc018.roa
File: fd51be28-a998-4208-bfda-d89c083cc018.roa (raw, json)
Hash identifier: fbj7tQTFFU2ERgx/iz5VNQOI25TnH+9dKKinakT68kI=
Subject key identifier: 5B:4B:82:60:84:25:E8:07:83:7C:F6:D4:45:3E:E5:5F:34:13:D2:BF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2D202099C4ADB9AFD937DE3F9566C54713A0AE2C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd51be28-a998-4208-bfda-d89c083cc018.roa
Signing time: Wed 12 Jun 2024 00:00:00 +0000
ROA not before: Wed 12 Jun 2024 00:00:00 +0000
ROA not after: Wed 17 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:20:20:99:c4:ad:b9:af:d9:37:de:3f:95:66:c5:47:13:a0:ae:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 12 00:00:00 2024 GMT
Not After : Jul 17 23:59:59 2024 GMT
Subject: serialNumber=664fcd25826711903c55ee95bcc5755d9a2861e9199cee128d5adbb1c881725b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:b1:16:2c:c3:01:a2:81:92:1d:14:1c:6b:
59:c8:6f:0a:d7:53:f6:46:77:0f:85:9d:9d:46:90:
b6:f5:7e:c9:e8:59:4e:cd:9b:d2:67:88:43:e2:17:
2a:26:1e:06:8d:aa:fa:24:1b:9d:98:11:06:3c:15:
25:b2:df:70:f8:a1:68:76:54:9a:0f:6a:e2:c7:f9:
1a:17:bf:c9:25:6a:5d:46:b8:d3:55:50:fb:68:df:
24:bb:97:79:15:71:f5:04:c6:83:08:b5:ee:41:ae:
81:5c:32:c1:94:5a:66:bd:a8:65:0d:55:c7:20:2f:
8d:a3:8d:fa:8c:dc:bf:63:bf:01:e8:74:5a:f0:36:
71:9b:93:df:53:6a:7f:c5:8d:14:b3:1f:ab:32:35:
a4:f0:f1:68:ee:2e:db:d8:44:be:a7:46:a3:1b:e6:
cf:e4:ec:a1:bb:ea:5b:0e:53:66:40:e6:a4:ba:18:
cd:92:00:a8:a7:08:1e:6e:8a:aa:77:4d:39:b0:01:
1d:2c:6a:3d:c9:de:42:f8:e1:e6:ea:4c:de:b4:fa:
19:8d:0e:fb:a8:4e:d0:c6:76:cb:a9:fc:7a:ae:e2:
f1:25:44:8d:4c:1a:62:e7:41:21:92:43:14:3b:d7:
ee:96:aa:9d:96:64:2e:c6:3e:8a:d8:ad:5b:94:ee:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:82:60:84:25:E8:07:83:7C:F6:D4:45:3E:E5:5F:34:13:D2:BF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd51be28-a998-4208-bfda-d89c083cc018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ad:da:6f:09:4c:79:b6:eb:d0:fc:d6:e3:f7:ff:6a:95:88:
4d:de:35:4d:d3:02:3d:fe:73:07:af:da:f6:cb:d9:70:34:1d:
38:30:c6:38:ca:08:ca:56:e8:88:5a:e8:88:f2:3b:22:c1:d3:
33:2f:36:e6:64:00:54:78:f5:84:53:0d:b5:43:66:03:db:14:
16:41:a5:91:d6:ec:4d:57:85:4b:68:3c:0c:5e:12:e4:7b:0f:
01:a2:8e:fe:65:61:88:e3:a5:69:54:c5:d3:30:80:56:d1:c9:
1f:eb:4c:2c:27:17:7a:ab:85:6e:c4:7c:58:3c:d0:98:48:76:
04:01:3a:03:08:fb:d1:e2:a2:65:fc:9a:3f:01:4b:e7:78:79:
7a:1b:d3:f5:07:a3:a1:bc:d7:45:42:68:dd:ef:f9:f5:00:92:
a0:8a:79:15:06:50:c4:3a:82:e3:0f:d7:14:b2:3e:3d:8a:52:
e0:ea:07:c1:4d:86:12:6e:df:7a:d1:fb:73:38:eb:96:c8:44:
de:dd:c3:8d:e8:9d:90:1e:03:7f:a3:37:01:a6:9f:8e:a8:cc:
9e:ac:32:da:d6:75:b1:18:cb:d8:48:60:fa:2e:94:f7:db:2a:
e8:f5:29:ec:58:b9:22:b9:06:51:70:04:31:9b:45:f1:ba:75:
a8:98:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:01 2025 by rpki-client