Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04685483-6560-482c-9478-f949c7a2c927.roa
File: 04685483-6560-482c-9478-f949c7a2c927.roa (raw, json)
Hash identifier: HWDpwmrPE0R088CgxRNW/u8D+Q/rjpwVc93cZnfy480=
Subject key identifier: 05:0D:10:0A:46:B6:8A:06:C1:55:1B:A6:A7:67:A3:8E:03:53:8D:6C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21430B276B7C4881182D6E62204B08CFF37275FC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04685483-6560-482c-9478-f949c7a2c927.roa
Signing time: Wed 05 Jul 2023 00:00:00 +0000
ROA not before: Wed 05 Jul 2023 00:00:00 +0000
ROA not after: Wed 09 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:43:0b:27:6b:7c:48:81:18:2d:6e:62:20:4b:08:cf:f3:72:75:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 5 00:00:00 2023 GMT
Not After : Aug 9 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:6d:90:86:1d:11:2e:69:92:bb:38:0e:b6:
99:fd:81:46:b8:55:7b:ae:dd:24:16:8b:19:79:6a:
d5:3f:7e:72:d2:1a:4c:19:cf:d2:7b:0d:8b:9d:06:
59:ba:5d:02:4d:24:77:97:20:08:59:dd:35:78:51:
fe:aa:f5:d3:12:0d:90:1e:15:b2:c2:08:96:62:cb:
38:59:6b:31:71:98:3a:df:dd:6a:a3:b1:17:df:f5:
d4:f4:dd:61:f0:62:7d:22:d7:a8:3c:80:fc:f7:dd:
6f:00:ae:d2:85:74:d5:65:c3:f7:51:0b:d2:db:b8:
90:40:b6:a3:c4:ac:30:07:0b:1d:36:05:20:1a:74:
cd:5c:94:18:40:e0:84:b3:00:95:43:32:38:96:5d:
ed:3f:d3:b1:aa:58:26:a7:eb:a6:f2:0a:cb:ba:54:
7e:74:af:67:20:5b:e9:a1:e8:1e:78:ba:91:ee:8c:
a9:e5:01:9e:48:2c:81:a7:3a:80:d7:26:81:8c:2b:
59:0a:cb:04:7e:62:ce:0d:db:51:ca:67:5a:ff:e2:
de:73:24:e1:3b:8d:12:2b:3b:26:61:ab:fc:44:45:
24:7d:7b:81:d1:9e:fc:4f:74:af:7a:62:80:39:5e:
56:91:39:93:f7:fd:0f:d8:80:da:3f:2a:a5:b7:b3:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:10:0A:46:B6:8A:06:C1:55:1B:A6:A7:67:A3:8E:03:53:8D:6C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04685483-6560-482c-9478-f949c7a2c927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:be:aa:4a:a6:c2:65:f9:ea:83:1a:e6:66:a2:d6:48:bc:89:
95:96:87:d4:7b:91:ec:a0:4d:75:d9:04:71:2e:e9:6b:4d:25:
a8:0f:12:fb:cb:fe:2e:4f:29:89:20:af:4a:8d:3a:29:a5:63:
a6:01:58:4b:54:65:83:44:cf:16:a8:ec:45:54:5a:f0:32:cc:
20:c5:5c:93:7c:1b:55:6a:9e:30:f0:cf:8c:46:fa:a1:7d:b1:
17:05:e9:f8:f1:d2:fe:d2:30:72:14:52:e2:44:90:23:f6:b1:
c7:7d:03:6f:a3:cb:e6:44:d9:9a:6b:19:86:f0:0b:9e:24:fb:
4f:e2:37:de:a6:ae:01:76:65:1c:0c:1c:a5:59:a6:2b:21:15:
09:56:84:6b:73:00:30:42:a1:10:79:a4:03:58:b7:0e:08:8f:
94:2c:dc:c4:a4:69:41:0c:d8:10:44:4a:0b:73:08:25:14:00:
5e:80:02:e1:bf:36:f6:d5:79:92:27:a3:2b:1f:62:52:13:a2:
d0:89:07:49:c5:cc:70:83:dc:7d:b7:80:ae:eb:26:61:26:a8:
76:4f:97:21:73:a4:ea:1c:02:0d:d0:71:0e:7e:01:35:1f:d9:
65:c3:94:4a:92:c6:34:8f:47:ad:a9:0b:52:06:1d:dc:08:5b:
b2:16:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:58:40 2025 by rpki-client