Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1385eefc-22e6-4025-bfbf-374bc62746f2.roa
File: 1385eefc-22e6-4025-bfbf-374bc62746f2.roa (raw, json)
Hash identifier: LmsE2vUZVLPTZXz5WcTDNEHBLKa3LAGEpMpD38vZrVY=
Subject key identifier: 30:20:31:BA:46:0E:8A:05:B6:BD:2A:09:49:E5:52:EF:F0:15:91:0F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43FFA445D747FDA342E782989091FC6FF192B438
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1385eefc-22e6-4025-bfbf-374bc62746f2.roa
Signing time: Fri 12 Apr 2024 00:00:00 +0000
ROA not before: Fri 12 Apr 2024 00:00:00 +0000
ROA not after: Fri 17 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ff:a4:45:d7:47:fd:a3:42:e7:82:98:90:91:fc:6f:f1:92:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 12 00:00:00 2024 GMT
Not After : May 17 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:67:2d:e7:b5:ff:3e:51:40:6e:37:12:9f:
70:cc:96:e5:bc:15:e2:3c:52:f0:07:80:44:cd:1e:
b7:d7:61:1b:d5:b7:b9:ee:9f:8d:34:fe:8b:4e:11:
a2:4b:71:56:a6:c4:b3:fa:e1:33:cf:03:40:cd:87:
3c:6c:29:7e:60:78:42:8e:42:ab:ff:0f:42:b8:99:
f5:6c:e8:85:4d:8e:1c:36:84:9c:0c:db:ba:c6:5a:
e1:d4:68:be:30:61:42:8b:c8:63:99:ec:f5:99:f4:
57:a7:c3:69:e4:f2:62:ad:11:f1:06:23:0c:88:94:
69:13:5f:ff:9c:cd:83:b6:0c:ab:ed:8d:76:91:97:
5f:ca:f1:ee:db:a4:04:a4:bb:0e:49:a1:87:4b:f8:
fe:7a:e4:b2:ee:49:b2:aa:d5:57:46:d6:88:47:18:
2a:33:fc:11:9d:9f:19:63:0e:bf:95:ad:57:61:af:
af:b3:7b:3a:bf:73:ea:10:12:c8:d1:4a:24:b2:23:
3d:5e:a4:3d:8e:22:29:3e:ab:d8:bb:63:f0:88:ab:
f1:c5:c7:ef:d0:1b:1c:d0:a8:a8:60:f1:dc:6a:de:
0b:8d:0b:50:4f:94:1b:9b:c3:0b:f3:cf:48:c0:3b:
3c:b1:28:be:d5:6c:52:30:60:4d:e1:14:8f:26:1d:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:31:BA:46:0E:8A:05:B6:BD:2A:09:49:E5:52:EF:F0:15:91:0F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1385eefc-22e6-4025-bfbf-374bc62746f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:56:3a:b5:22:51:33:de:ff:eb:b3:79:0e:84:1b:b4:c2:85:
95:51:03:5a:85:c9:71:ff:cb:b3:80:29:a7:3e:5a:46:6a:36:
f8:1e:8e:44:20:5d:ed:99:7c:b5:1c:c8:ac:22:38:cf:03:e7:
9c:33:f2:10:b2:95:7f:64:dd:ab:46:97:c0:8b:66:f0:bb:4f:
06:20:59:a9:e9:d1:78:54:6b:b5:6b:d9:27:10:30:34:7f:bb:
d4:e1:fe:ae:51:69:0a:01:17:8b:5e:90:a4:8c:8e:cd:ec:e0:
11:2a:a5:2f:72:37:28:19:31:0b:a9:66:1f:d6:42:c5:e7:3a:
c1:41:bb:3f:f6:de:05:9f:2c:8b:58:7c:fb:34:c1:ad:3f:f6:
a2:77:f3:3f:53:13:ef:91:a6:cf:e8:11:6f:75:0d:a0:1b:75:
a0:6e:14:34:f0:a8:fc:4d:0c:fa:5c:ac:9c:62:b1:55:9e:03:
5c:31:c1:90:f6:73:c4:ad:41:7c:7d:13:92:01:47:86:9b:e3:
16:b2:a5:51:78:7c:28:c2:fb:6f:01:65:8b:81:44:cd:f0:44:
bb:61:b2:76:c2:c0:d5:59:b3:6d:b5:27:ad:07:42:2a:7b:a9:
41:27:17:c5:1f:53:b5:68:79:e4:40:3a:78:32:a3:44:21:b4:
24:45:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:01:29 2025 by rpki-client