Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe241b6c-d797-47a9-bb8b-24ba98a05849.roa
File: fe241b6c-d797-47a9-bb8b-24ba98a05849.roa (raw, json)
Hash identifier: kyY5PtM3XmSokDSzMMhNXXjGvhbmh1qMGP/0FEdMu2Y=
Subject key identifier: E8:C8:49:D3:2C:A7:1B:4A:0B:F0:BB:33:85:9A:E9:C1:E3:15:EF:99
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 31C845AA8CA39878D6F313D438151710027E0879
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe241b6c-d797-47a9-bb8b-24ba98a05849.roa
Signing time: Thu 23 May 2024 00:00:00 +0000
ROA not before: Thu 23 May 2024 00:00:00 +0000
ROA not after: Thu 27 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c8:45:aa:8c:a3:98:78:d6:f3:13:d4:38:15:17:10:02:7e:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 00:00:00 2024 GMT
Not After : Jun 27 23:59:59 2024 GMT
Subject: serialNumber=fa58eb5f325165c1f030125412a1a3f221a3c1fc9718c0357d7f125d6a883fc2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:7c:f5:ec:60:65:3a:32:39:02:6f:83:ea:
8a:b1:91:90:8b:ed:23:e7:28:8d:30:f9:ea:c8:4a:
f6:13:f5:e4:0a:0e:d9:b6:d5:ab:a5:0f:6b:f1:ea:
9b:98:02:ce:cb:71:f4:cb:84:29:b5:c0:55:20:97:
3b:4e:d8:7c:93:9a:77:dd:f6:35:c0:c2:08:2a:6c:
84:b1:dd:68:70:3e:39:f1:d8:c8:a3:64:c3:40:3c:
f1:7d:c5:e0:bc:7a:b9:39:61:89:e5:e8:8c:6d:08:
6d:38:38:5b:df:0b:bb:6c:53:08:1d:90:c9:73:bd:
18:9b:43:77:98:59:a2:2c:c0:b7:94:75:ff:62:46:
51:f8:22:fd:29:45:66:16:1d:6b:c8:1f:42:0c:4c:
b7:61:dd:28:ae:2e:d4:9a:48:82:c3:2f:d5:63:73:
84:04:fd:43:2a:fd:c0:0b:47:ca:86:0f:c9:37:eb:
ba:f3:3c:e1:78:6b:3b:96:15:9a:31:04:2b:3d:03:
cb:0f:8e:c1:28:7d:55:65:0f:71:6c:8e:7d:50:3a:
0f:d5:3c:6e:b1:78:43:d6:7b:1c:bc:65:89:2e:7f:
85:9d:a9:12:db:a7:0a:94:c5:8d:be:4e:3e:50:07:
a8:78:3b:58:a9:fd:f7:9f:ac:e2:ae:e0:d4:80:f2:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:49:D3:2C:A7:1B:4A:0B:F0:BB:33:85:9A:E9:C1:E3:15:EF:99
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe241b6c-d797-47a9-bb8b-24ba98a05849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:59:b0:e2:2f:37:22:05:fd:c8:40:16:8a:74:90:eb:e4:65:
5d:87:83:68:1d:b0:45:18:20:bb:36:9c:70:b9:3f:8c:9a:b1:
1d:ff:f5:2f:3b:21:60:7f:a9:00:fd:a2:f2:93:f0:a6:6d:70:
04:e2:56:0d:da:9b:eb:05:12:ab:09:54:9c:86:cc:3c:18:a1:
d8:8d:1a:84:13:ab:c1:46:bc:f8:1a:a8:ad:b2:c2:2e:03:6f:
5e:f4:81:22:90:bb:28:32:96:15:5b:a4:b5:7b:be:2f:45:b6:
5d:e3:e7:a4:be:af:c9:df:fd:95:fb:3b:ee:40:59:bc:12:f3:
e6:9e:36:07:9a:bc:47:70:77:a3:8b:a3:8f:54:91:63:3b:b0:
f3:2c:88:23:bc:32:f4:9c:18:f1:95:8e:7e:97:c0:3e:75:21:
12:48:ab:3a:ba:71:cf:b8:90:23:c2:9b:7a:bb:c9:51:0c:89:
3d:45:b3:67:e2:11:69:ec:42:17:be:7f:94:af:1e:4e:ba:ac:
d9:c5:24:47:10:2b:a9:f1:b6:d0:3e:60:eb:e5:5e:7f:d8:48:
a6:1f:ef:63:0e:35:0e:fc:96:c5:aa:05:f0:58:f0:08:5d:84:
2c:47:ea:bb:2a:3a:6b:bb:59:8f:06:a5:a5:eb:a0:f9:74:51:
02:7e:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:09:28 2025 by rpki-client