Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4903e6d6-9db6-4c05-a74c-ee6dba47c611.roa
File: 4903e6d6-9db6-4c05-a74c-ee6dba47c611.roa (raw, json)
Hash identifier: Gs/QKzJQY+xV4Tf0qxOeVa4Tvr3+NPYnnVyn8v5UGLU=
Subject key identifier: 49:03:61:CD:83:C9:05:5E:D5:44:63:D4:2C:CD:A3:C5:8C:A2:18:B3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43CC3C25D7CF32FC2A06928938BBD3850CF999D7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4903e6d6-9db6-4c05-a74c-ee6dba47c611.roa
Signing time: Tue 31 Dec 2024 00:00:00 +0000
ROA not before: Tue 31 Dec 2024 00:00:00 +0000
ROA not after: Tue 04 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cc:3c:25:d7:cf:32:fc:2a:06:92:89:38:bb:d3:85:0c:f9:99:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 31 00:00:00 2024 GMT
Not After : Feb 4 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:ce:2f:7c:84:38:21:58:f5:78:06:09:49:
b9:a2:46:e4:1d:a2:7e:0b:56:07:3f:02:85:ee:ad:
2b:78:21:fb:64:61:c0:9d:ed:6d:e1:72:dc:be:9d:
af:ed:a7:a7:1b:64:95:49:8e:05:10:65:e3:86:28:
46:b1:ac:89:fb:dd:0f:69:e4:3f:ea:5d:47:97:14:
be:34:6d:4f:55:a3:27:61:d2:8b:93:ee:5e:77:39:
b0:24:01:7e:8c:53:bc:60:08:92:14:a5:b6:75:55:
bf:6a:b8:09:f9:f6:ce:91:bf:e3:4d:e6:87:db:c4:
f1:34:6d:3e:e7:c4:8e:74:a7:49:ef:8d:cd:6d:3c:
b6:ec:d9:5e:3e:3a:d7:8f:c7:28:be:37:0e:ff:4e:
5a:b1:28:79:33:ee:06:f2:48:46:8c:40:b2:d5:61:
cb:60:41:89:4f:75:bf:78:d3:4c:f8:f1:43:53:f6:
c7:3a:9d:9f:e8:47:76:47:72:5a:89:6d:bd:19:8d:
e8:d1:06:32:c6:8e:80:d5:f8:99:78:7f:9d:35:2f:
c1:a2:3c:67:50:a8:8e:18:d7:d2:9d:b8:1e:28:c7:
7d:3b:48:0f:eb:7c:a3:d6:62:c3:c9:90:40:80:9b:
18:c4:4e:5f:a8:e6:39:8f:bc:84:2d:b8:c1:76:5a:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:61:CD:83:C9:05:5E:D5:44:63:D4:2C:CD:A3:C5:8C:A2:18:B3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4903e6d6-9db6-4c05-a74c-ee6dba47c611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:46:ad:39:e9:13:3c:eb:ec:1f:37:f1:47:ef:30:e0:80:de:
0a:6e:49:39:1b:77:c0:e8:fa:45:3f:30:75:4a:54:4e:76:bc:
93:e6:fa:0a:79:83:55:36:90:35:e6:cb:07:c8:3a:19:28:12:
09:d0:40:0e:14:c8:52:12:ba:5a:1a:1f:0e:1e:6c:11:31:d3:
70:4e:af:b1:e0:df:1a:e6:6f:c2:c0:48:b6:b4:89:c0:61:5b:
ab:c7:d6:65:a0:6b:d4:2a:ec:2e:01:01:4e:0b:78:26:b2:c8:
9e:a4:bd:e9:8a:ef:ff:64:f7:53:dc:7a:15:90:49:f2:ec:0f:
ce:af:69:8c:27:fa:f2:ca:09:60:4a:ec:34:76:78:c2:a4:ab:
79:df:12:d4:1c:32:68:5f:87:cc:e9:30:05:27:29:c8:70:0c:
45:e5:22:da:76:fe:c6:66:44:62:da:4e:b4:f8:b3:54:44:15:
49:88:9b:79:4e:02:a3:89:ba:25:b9:3c:2d:16:6e:7d:e6:a1:
9f:3b:d9:8c:8c:d8:81:d5:ab:3c:98:40:0c:b1:2a:92:59:71:
25:77:2d:5a:b3:86:25:b1:26:44:2f:23:1b:b9:45:56:b8:98:
31:6d:ec:62:3a:21:4a:c4:b5:76:b6:d0:86:4d:bb:f4:5a:2d:
8b:72:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:00:36 2025 by rpki-client