Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2efde187-9981-4271-9348-a69e547a1559.roa
File: 2efde187-9981-4271-9348-a69e547a1559.roa (raw, json)
Hash identifier: 7xwXysuc0VMeLeZDV94ury641gOjoqJgJ5Eyhf8vT9A=
Subject key identifier: 9D:A6:7D:40:55:D2:62:08:B4:59:76:40:B3:D6:D1:C2:7D:EB:B6:47
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4FA667089B865A19DFF0BFF94F5D6BEDB1F1E5AB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2efde187-9981-4271-9348-a69e547a1559.roa
Signing time: Sun 25 Aug 2024 00:00:00 +0000
ROA not before: Sun 25 Aug 2024 00:00:00 +0000
ROA not after: Sun 29 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a6:67:08:9b:86:5a:19:df:f0:bf:f9:4f:5d:6b:ed:b1:f1:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 25 00:00:00 2024 GMT
Not After : Sep 29 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:8b:23:ff:bf:fc:96:2c:51:5e:17:c3:d7:
0a:73:80:dd:41:b3:2f:dd:c9:e1:5e:05:77:d0:90:
05:f6:64:b4:c9:90:fe:aa:a9:db:95:46:c4:b3:d0:
e0:b9:b1:cb:bd:04:b5:ad:66:1d:27:52:2f:d9:ec:
01:79:51:7b:ca:6a:da:9e:a3:e7:54:99:2a:9d:b3:
30:c8:7e:60:fb:80:c4:2b:55:b9:a0:03:dd:03:70:
53:b4:7a:d0:33:62:8f:f0:ca:9b:8f:8b:f2:02:86:
e6:e1:0f:cf:8a:5d:a8:13:17:79:0c:09:da:c9:30:
f1:0a:dc:d2:02:3e:1b:71:68:2d:98:23:7f:cf:f1:
3c:f6:b7:ed:70:6d:89:be:aa:89:40:bd:de:26:db:
f7:a8:58:4a:bb:fc:55:e2:0c:de:5d:bd:1b:bf:0e:
62:9e:5d:17:84:99:77:5f:cf:30:52:60:75:12:81:
fc:4d:6b:39:81:e4:d4:67:c4:e8:9d:2d:16:92:ba:
2f:e9:01:f5:46:7f:9d:f1:2b:5c:6d:4f:3b:2f:d2:
b7:44:83:09:09:6b:98:5f:e6:1d:98:04:64:f6:39:
40:30:4d:d1:76:6b:e9:6d:44:fb:05:42:f4:69:e1:
9c:1a:39:be:f0:30:b9:5b:49:e1:8b:97:74:24:7b:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:7D:40:55:D2:62:08:B4:59:76:40:B3:D6:D1:C2:7D:EB:B6:47
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2efde187-9981-4271-9348-a69e547a1559.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0b:bc:30:aa:a3:19:5f:68:23:33:e9:86:53:c3:71:7a:fc:
2e:e4:36:7a:50:5f:d2:91:01:9b:6e:57:20:b4:f7:b7:35:03:
ad:69:a1:55:3e:79:83:8e:6c:6e:72:73:3a:cc:85:b5:2f:52:
71:7e:b7:7e:c8:a1:35:52:1b:52:84:e8:18:c1:2c:31:52:16:
77:d4:78:18:cb:b5:e1:fd:e1:73:54:98:8b:7a:bf:a5:68:aa:
cb:69:75:b3:b7:50:42:f7:80:30:e8:be:35:80:90:7f:59:ce:
e9:0b:bc:cb:b6:89:bd:f7:6f:cb:cd:33:23:59:c5:21:92:4c:
96:c6:d0:c0:90:66:69:7a:f6:53:40:48:21:e2:5e:3c:f0:fe:
5f:9b:72:e7:db:94:2d:e9:af:5b:22:8d:4e:91:28:f8:9b:7e:
4d:ec:82:b5:8d:a6:fc:8d:d4:b7:e5:dc:d6:e7:eb:a0:bc:87:
99:6b:b9:c6:02:20:ab:c3:f4:96:7d:19:95:50:d5:8c:a0:4e:
52:0e:19:41:c7:04:45:68:52:76:23:9a:d7:e8:48:4e:92:47:
33:f4:d7:d3:ba:34:cc:63:df:e0:11:13:da:23:af:86:b9:19:
20:b5:16:b3:80:f4:48:91:38:c3:c0:fc:b0:f4:b7:be:50:cd:
31:c8:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:59:39 2025 by rpki-client