Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22942c06-c9d3-4e6d-979d-d14c5ece7b99.roa
File: 22942c06-c9d3-4e6d-979d-d14c5ece7b99.roa (raw, json)
Hash identifier: uIBYQJXcLGuNqG7U35uPF6To1fGHq2FiVkQw+QmnSgE=
Subject key identifier: 2F:9F:32:7D:6C:1D:96:B1:0B:B2:EB:E7:67:2A:CD:50:A7:63:CA:1D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 603B6137FD8214C1FF5B8490D164E7CB1CF41755
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22942c06-c9d3-4e6d-979d-d14c5ece7b99.roa
Signing time: Sun 27 Aug 2023 00:00:00 +0000
ROA not before: Sun 27 Aug 2023 00:00:00 +0000
ROA not after: Sun 01 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3b:61:37:fd:82:14:c1:ff:5b:84:90:d1:64:e7:cb:1c:f4:17:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2023 GMT
Not After : Oct 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:76:05:f3:e8:1c:d7:c5:84:ee:73:ff:c0:
82:b4:8f:86:be:9f:9d:b7:9b:69:87:54:f3:87:af:
d2:5d:c9:0f:e5:d4:4b:8a:78:f3:35:e1:38:60:4d:
65:03:60:07:89:f8:bf:aa:93:76:08:29:33:5b:00:
2c:4a:ed:af:3c:f1:77:1d:3d:d2:ff:ce:29:7f:ce:
e8:ec:7a:4b:d0:55:a8:4e:3e:79:54:7b:9d:7b:ba:
27:26:d5:b7:d2:94:55:74:7c:0e:61:01:6f:64:d8:
c5:ed:42:79:1e:7d:74:a1:1c:31:ec:c1:be:be:99:
de:60:42:9f:6b:ec:ec:80:35:42:eb:49:8b:30:b2:
0f:88:06:69:d1:f7:3d:62:fc:1a:2e:f4:fd:68:a4:
7f:b7:a5:aa:aa:1c:59:27:0f:d9:b4:89:8a:fa:48:
8d:ab:2f:2e:6d:45:f0:42:52:53:28:bc:6a:ca:34:
f8:77:46:af:f8:70:da:97:c2:ab:40:a1:11:db:99:
77:ae:b7:6f:64:85:c4:fd:7e:a1:6f:b7:66:87:37:
b2:e3:f2:cf:0c:20:1f:63:77:4f:88:d3:40:fb:b8:
79:16:9d:f6:6a:54:3e:96:4c:c2:00:5e:6e:e1:b5:
9c:27:c7:5b:4c:24:d4:4e:d8:95:c0:7d:c9:2f:91:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9F:32:7D:6C:1D:96:B1:0B:B2:EB:E7:67:2A:CD:50:A7:63:CA:1D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22942c06-c9d3-4e6d-979d-d14c5ece7b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8e:45:ea:bc:c8:e2:e2:86:c9:69:77:aa:35:df:1f:09:45:
d1:c9:e6:34:74:bc:17:c1:6f:02:f0:42:7f:f9:04:1a:7a:0f:
32:a7:fc:86:db:f1:d0:8a:b3:5d:23:89:ba:09:ca:07:54:84:
dc:36:7e:0c:b3:d4:6b:c4:e4:96:66:0c:58:d0:e1:03:d8:9d:
9b:bf:83:2f:30:c6:af:f8:f1:a9:35:64:eb:33:1c:b2:bc:b4:
e2:b0:49:28:a2:ce:a8:76:6e:2c:80:d2:0c:5a:2e:23:56:97:
48:d4:8c:c3:9f:73:54:de:81:8b:ff:59:37:58:92:d1:48:48:
ca:c8:e2:f5:e8:bf:f2:53:09:7e:78:7f:c8:94:2e:78:93:e1:
c8:db:dc:d4:3e:a5:22:43:da:eb:f6:39:77:ae:73:a4:0c:5e:
1a:ac:ac:cf:65:31:ef:12:3b:b9:bf:18:8d:e7:fd:0f:fc:76:
62:74:4c:e3:98:1c:44:09:86:72:6b:60:51:9e:73:ee:6f:af:
13:a4:53:ba:25:57:8c:9b:84:66:70:32:fc:62:0b:69:77:cb:
7f:10:6d:f2:a4:2a:69:1d:d3:fa:77:a7:27:df:c4:c2:dc:e6:
7e:12:b0:cb:0d:2e:a9:a1:5d:02:8f:a9:a2:ad:6a:1a:46:7a:
c3:44:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:07:56 2025 by rpki-client