Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35384642-43bd-45ae-83c5-ef5b7dda587d.roa
File: 35384642-43bd-45ae-83c5-ef5b7dda587d.roa (raw, json)
Hash identifier: kJqP7rnGcSpPpTpiW7RbeJxRwELj3tgNdElzttN7QI0=
Subject key identifier: 6A:94:55:7D:85:A5:A5:9B:18:28:07:EF:61:5B:90:10:7C:A9:74:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 368EAE9579F19D4E553241AE7153A680DDB4B9DD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35384642-43bd-45ae-83c5-ef5b7dda587d.roa
Signing time: Thu 12 Oct 2023 00:00:00 +0000
ROA not before: Thu 12 Oct 2023 00:00:00 +0000
ROA not after: Thu 16 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8e:ae:95:79:f1:9d:4e:55:32:41:ae:71:53:a6:80:dd:b4:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 12 00:00:00 2023 GMT
Not After : Nov 16 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:5e:7a:6c:fc:80:2f:af:cd:f6:4e:1f:49:
86:47:95:f6:96:0b:f4:4a:f4:ca:e0:fc:29:69:55:
55:05:31:66:f2:d1:98:2c:43:9a:cc:13:10:02:00:
39:91:eb:1c:f2:90:78:bf:bb:ac:de:0d:91:46:c8:
78:f5:6c:85:14:09:36:1b:b0:00:68:bd:e7:f3:27:
fd:56:aa:b4:91:56:d5:33:df:3a:36:a9:4a:b0:e8:
02:3e:ae:54:b4:45:b0:9c:4f:6b:07:76:ca:7c:63:
57:35:c7:83:05:f9:8d:85:60:84:2e:6d:46:d5:aa:
e3:df:ff:37:09:12:55:65:aa:c3:01:0d:a8:7b:4d:
5e:90:5c:d5:29:26:cc:d1:bd:a5:14:17:ee:38:d5:
f5:81:1d:7a:8c:6d:a4:bd:5f:92:19:b3:4e:32:c0:
3a:8c:bf:35:e8:e1:ad:81:48:be:fb:99:9e:ba:15:
4c:cc:8f:3c:43:11:3c:0f:f3:bc:cb:7d:b3:e9:f1:
48:87:e2:df:67:e4:a0:da:49:11:df:4e:7e:09:b3:
81:26:c2:b1:c6:fc:25:dc:fb:c5:72:55:dc:02:ae:
99:54:54:d2:a6:0a:c8:76:f5:a7:f7:51:e0:4f:22:
b5:1e:73:1d:d5:1a:82:12:89:54:9f:7d:04:45:31:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:55:7D:85:A5:A5:9B:18:28:07:EF:61:5B:90:10:7C:A9:74:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/35384642-43bd-45ae-83c5-ef5b7dda587d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4d:ff:dd:e3:1e:b9:e4:50:65:81:50:0d:4c:8c:57:b9:f9:
53:7a:1b:af:19:e9:e8:75:ec:88:64:27:ae:a9:4a:76:50:76:
4f:72:ef:ec:00:8c:7d:fd:84:e7:ec:b1:4b:96:96:c2:20:7e:
07:43:6e:ba:c0:fc:9f:f9:6d:78:fd:14:3b:db:e5:49:56:00:
19:20:da:1f:9f:b2:00:45:88:8f:0d:75:dc:88:6d:04:b9:6e:
09:9d:fd:e5:55:72:fb:bb:ae:a8:64:71:8d:81:ad:58:56:1d:
76:a8:f2:7f:ef:4b:55:8d:63:24:68:08:aa:eb:56:dd:90:5e:
ca:30:73:10:7d:e9:ff:6c:83:ef:a1:98:7f:a1:03:a6:e3:b1:
15:33:74:33:99:ac:8d:cb:d9:7f:1a:d8:16:45:a3:28:56:09:
34:e4:82:a4:f1:6e:a2:8d:83:e5:c8:fd:ee:94:33:4f:34:c4:
0c:11:de:7e:83:1a:88:34:61:92:3f:40:ed:24:87:b7:82:3e:
a4:9e:65:ed:34:e9:7e:2b:6b:ab:8f:6a:24:86:1b:74:45:ac:
ba:83:fe:07:0b:bd:d2:c9:ff:63:2d:c9:d6:d4:2c:0e:de:1a:
77:bb:2d:11:6c:96:d7:0c:e8:4c:80:09:c8:d6:c1:59:0f:0a:
25:6c:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:02:54 2025 by rpki-client