Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21aceefd-3beb-447e-bd98-31c4e8de7d52.roa
File: 21aceefd-3beb-447e-bd98-31c4e8de7d52.roa (raw, json)
Hash identifier: IRIpxKJC/EOA5UFu/qUaNfl5s7iSw8NEou889gAXrgI=
Subject key identifier: 3D:F2:B6:4D:86:DD:15:0D:03:50:C3:28:9E:C3:91:5E:E8:6A:C5:3E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6C7CC6D338169A51A492EB55B7BAC5EFC1B121F1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21aceefd-3beb-447e-bd98-31c4e8de7d52.roa
Signing time: Fri 17 Jan 2025 00:00:00 +0000
ROA not before: Fri 17 Jan 2025 00:00:00 +0000
ROA not after: Fri 21 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7c:c6:d3:38:16:9a:51:a4:92:eb:55:b7:ba:c5:ef:c1:b1:21:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 17 00:00:00 2025 GMT
Not After : Feb 21 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:2e:1f:8c:e6:9c:25:00:f9:17:8c:53:19:
29:7c:bc:bb:d6:9e:68:5f:85:e9:61:77:19:50:8e:
44:5c:d3:5b:29:5b:2b:46:41:86:62:fb:e9:ce:09:
b6:02:a7:d4:b5:43:cf:81:13:77:50:87:35:61:c3:
10:85:4e:4f:48:4a:15:1b:ff:c7:26:38:01:97:1e:
c7:3d:dd:c4:b5:7c:df:bb:4b:12:11:ee:1f:de:6f:
2f:e9:f9:ac:7e:89:96:40:02:74:3f:39:c5:46:d6:
3f:de:5f:36:e9:c6:ac:32:5b:fc:84:2c:ff:e1:92:
73:8e:33:bf:f1:2a:d0:ef:98:d5:b0:07:9e:a5:c2:
13:50:25:39:e0:12:08:3f:ba:58:01:67:59:ef:9b:
f7:77:e4:80:3a:3a:95:f2:81:4b:3a:c9:4a:12:af:
20:4e:fe:0c:5a:00:7f:bf:10:cc:b5:5f:d2:78:97:
30:03:fd:02:a7:ee:3b:f1:33:7d:7e:9d:a2:1c:36:
80:61:63:50:ce:8c:c0:ee:ac:73:cf:36:ca:da:e5:
e5:d7:ad:5a:fa:3c:1e:d6:83:db:a4:63:57:f7:4f:
0d:a2:21:97:68:4b:11:b8:06:ad:0c:2c:f3:9d:a4:
a1:0d:57:ac:eb:c2:5a:16:3d:f0:b9:ef:c5:11:1e:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:B6:4D:86:DD:15:0D:03:50:C3:28:9E:C3:91:5E:E8:6A:C5:3E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21aceefd-3beb-447e-bd98-31c4e8de7d52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:39:35:ac:bb:46:0f:c3:f7:d7:e2:05:96:6f:89:9e:ac:a8:
84:f5:ec:8d:af:da:a3:b6:61:0d:dd:e9:8e:6d:b7:c7:7f:17:
37:38:01:03:45:37:c6:a1:77:eb:5a:f7:39:d6:a2:af:9e:27:
39:6e:57:e7:15:66:cc:29:80:26:67:45:a7:51:60:6d:79:28:
f8:8d:71:e6:86:49:60:df:1a:4b:fa:3c:9a:22:b1:7b:bd:d7:
35:7c:1a:7f:7f:4e:be:ee:ab:ad:c8:2a:64:7c:a2:75:6e:e8:
60:89:69:7c:bf:e1:95:94:00:66:a8:34:c6:c2:79:0f:1c:16:
7e:b1:82:ac:44:c1:5b:17:07:a5:85:e3:1d:51:3d:66:ac:dd:
47:fd:2b:9b:2a:13:1f:e9:aa:0a:25:6d:93:8f:c5:0f:3d:b3:
eb:e3:a2:ac:d9:b2:b5:91:58:bd:16:cd:df:4b:dd:df:f3:eb:
af:75:0a:d1:30:96:dd:21:65:76:ec:7c:c2:02:ca:74:6b:6a:
93:ac:f5:5a:94:53:be:ab:83:d7:66:3b:cf:9c:d2:26:a1:a3:
91:b4:9a:9d:ed:e8:ba:06:5b:26:06:bb:39:73:7d:ed:cd:b0:
19:5e:44:5c:ab:87:08:6f:6f:38:8d:11:8b:b3:67:2c:a8:22:
2c:86:b9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:19:11 2025 by rpki-client