Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fd26efb-e33d-4a94-93e9-53eae84b6255.roa
File: 2fd26efb-e33d-4a94-93e9-53eae84b6255.roa (raw, json)
Hash identifier: AeuyktwWuhOUqpSgGfmAUXNhfwzqJ1//75ZK2maXufY=
Subject key identifier: 7A:BC:F6:61:A8:4A:BB:57:9C:D1:93:42:5C:31:9C:18:D4:D6:4E:55
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1BFF9816B85878FBBB504C23B2B94992B17C3195
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fd26efb-e33d-4a94-93e9-53eae84b6255.roa
Signing time: Sun 17 Sep 2023 00:00:00 +0000
ROA not before: Sun 17 Sep 2023 00:00:00 +0000
ROA not after: Sun 22 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ff:98:16:b8:58:78:fb:bb:50:4c:23:b2:b9:49:92:b1:7c:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 17 00:00:00 2023 GMT
Not After : Oct 22 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:cd:a2:e2:6a:c4:50:3c:3f:cc:07:ae:10:
93:a2:b0:e1:f2:d4:58:b2:cd:a2:98:66:01:bf:0e:
e1:ba:e2:fa:84:7c:7c:15:69:8c:fa:66:7d:6d:f3:
78:9a:94:63:e9:17:02:16:71:6c:84:91:a7:b1:f9:
c6:9a:9b:92:b4:d1:4b:95:eb:12:be:2a:3b:65:56:
48:8e:ce:b5:5f:f0:12:cc:a3:6b:79:6d:a6:27:46:
4e:ab:7c:f5:be:20:87:d4:d3:01:30:c6:22:5d:28:
19:d4:40:be:18:2d:2d:c0:76:7f:53:26:2a:d9:8b:
04:e3:8d:29:7c:18:1a:67:21:7c:fc:d9:da:39:1e:
06:eb:37:40:37:63:a0:db:69:26:8e:ea:e0:6f:d4:
25:d7:4e:f8:25:52:83:66:4c:c1:47:75:5f:eb:a3:
0e:fa:1f:c0:e6:24:7c:3c:78:04:94:c2:c1:18:b5:
06:86:d4:f8:90:cb:bc:3e:bb:30:10:23:a1:2f:8d:
45:61:87:52:57:8c:ce:a2:3e:06:f2:b3:01:b7:66:
4b:fa:60:43:20:d9:5d:88:d7:44:b4:35:61:84:6b:
ba:e0:06:53:3c:cf:5b:e9:c7:08:28:57:59:0a:eb:
0a:d6:12:3d:b4:77:55:61:ed:ab:1a:95:8e:f1:68:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:F6:61:A8:4A:BB:57:9C:D1:93:42:5C:31:9C:18:D4:D6:4E:55
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2fd26efb-e33d-4a94-93e9-53eae84b6255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:07:1d:2e:36:1d:ce:ed:04:6c:72:4d:f0:2e:df:ff:f7:6e:
55:01:cd:e6:4c:e6:e4:98:b4:29:ce:11:c9:2a:41:91:ea:f4:
3d:d9:5e:5e:13:64:77:de:52:6e:75:99:69:9b:1a:5c:b7:4a:
5b:fa:89:55:ec:61:e7:15:1a:88:0f:92:ed:7f:5d:ed:bd:18:
31:d1:4a:84:a6:e1:19:ad:f5:5a:57:ee:1b:b5:15:85:c0:36:
6a:41:52:aa:16:59:bd:4d:76:e6:52:04:36:e0:01:11:35:e7:
e6:34:b4:23:c6:9e:d8:fd:51:1d:ad:98:7a:cc:e9:24:92:f6:
4f:44:81:20:81:c7:b5:a5:29:44:98:8c:cd:c7:be:d4:80:2d:
e8:78:f2:1d:b6:a1:a5:77:0a:32:19:34:45:68:26:ff:c3:24:
85:25:d4:4f:6f:22:b5:d6:40:7d:d7:88:02:2c:ad:ce:9c:c3:
6f:94:13:96:55:f3:80:24:46:00:40:05:b7:bd:6b:50:b3:2c:
f3:61:d0:b3:26:a2:3d:ef:7d:9c:30:57:64:86:3d:ed:eb:f1:
f9:3e:a5:e2:bb:e0:a8:06:95:b0:22:f6:ac:d3:a7:62:18:e0:
6d:ed:87:ee:29:8a:76:42:10:ec:45:59:83:77:9d:c8:23:22:
e4:a4:f0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:57 2025 by rpki-client