Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3fff333b-4acc-4369-b4e2-5a7503adba69.roa
File: 3fff333b-4acc-4369-b4e2-5a7503adba69.roa (raw, json)
Hash identifier: 4W0LlHXrQiYcwcaCvfzfIYFTCmEedTrGENuUlOAoTAw=
Subject key identifier: 3E:8A:47:9B:21:0C:F9:C1:91:A0:EB:38:4E:0E:91:F6:41:27:97:05
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 509D84F738A6BFCA906A2467CFFACBEACBAD5B16
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3fff333b-4acc-4369-b4e2-5a7503adba69.roa
Signing time: Sun 28 Apr 2024 00:00:00 +0000
ROA not before: Sun 28 Apr 2024 00:00:00 +0000
ROA not after: Sun 02 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9d:84:f7:38:a6:bf:ca:90:6a:24:67:cf:fa:cb:ea:cb:ad:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 00:00:00 2024 GMT
Not After : Jun 2 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:5e:29:14:29:e4:f1:d1:04:4d:bc:39:85:
09:12:7a:e8:69:f2:83:1d:91:4a:a7:73:10:fe:54:
31:c7:2c:da:95:e5:24:b9:54:39:df:6e:09:66:65:
a5:06:33:23:11:6b:a5:4d:1e:5b:28:66:21:af:88:
43:d7:8f:21:9f:0e:51:46:36:e9:5a:13:4a:cb:ae:
eb:26:15:01:34:56:91:90:e0:f5:82:e4:19:6d:40:
77:a6:2d:38:fb:bb:b0:9c:d8:49:24:84:c0:0c:38:
fe:e4:bb:1d:45:20:6a:7a:8d:5a:f4:df:06:b5:0a:
8a:2d:20:17:3a:5e:b2:77:2a:4b:04:50:c6:7f:ef:
c5:6e:51:b6:82:81:33:83:b4:95:d8:86:c3:8b:14:
c3:26:51:a1:7d:87:c2:4f:94:4c:0a:f7:1b:23:b8:
4f:00:25:fc:12:36:ae:9f:d5:55:df:5d:67:9a:c0:
09:cc:b9:af:b1:c3:87:92:05:d9:70:0c:98:30:b2:
69:b5:ae:b9:ed:13:40:3a:fe:88:40:d1:e5:c5:7b:
e7:e1:98:46:c8:c6:e9:f9:e9:be:2a:74:53:9e:c3:
f7:aa:ac:e2:93:e4:5d:90:ea:7c:fe:99:4c:3b:c4:
1f:9f:49:e4:00:be:d7:12:34:df:eb:c5:e5:63:ce:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8A:47:9B:21:0C:F9:C1:91:A0:EB:38:4E:0E:91:F6:41:27:97:05
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3fff333b-4acc-4369-b4e2-5a7503adba69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1a:6e:db:3a:ec:8e:da:b8:48:54:bd:a2:f1:94:6d:56:51:
9d:02:f2:27:71:81:4f:00:37:ed:62:be:8e:fb:bb:94:df:d8:
75:4d:9a:5d:45:54:10:70:3e:c6:ec:a5:e8:d8:37:44:84:c2:
b1:bf:07:32:d6:49:eb:39:8e:30:49:09:47:ae:46:8e:09:08:
43:1b:cb:dc:24:d2:e8:8a:9f:ef:60:c8:1f:a9:8b:9d:f8:2c:
74:f7:27:1e:f1:68:ac:8f:78:f7:4d:f5:d9:0e:ce:8e:09:97:
41:3f:bd:91:bb:46:fc:c0:46:b8:f9:f4:94:d4:2d:ff:ef:af:
a8:5e:73:d9:f0:74:df:d4:b4:c1:d1:1f:07:7b:12:5d:93:97:
65:81:aa:24:6f:9c:3c:49:8c:00:f7:fb:7d:a5:ee:5b:97:f0:
0f:04:d1:ce:8b:7b:39:87:5d:e1:3f:99:4b:eb:c9:d6:30:e0:
d1:78:cf:6d:ef:04:e2:8e:05:cd:7c:90:bb:15:41:40:25:f9:
2e:21:a6:33:90:8b:cc:c2:21:ae:9d:76:26:ba:70:03:4d:30:
9b:dd:0b:bc:27:68:6b:47:69:95:31:c3:81:c6:df:cc:5f:5b:
99:82:cf:9d:1f:36:b8:5b:8c:b2:20:25:0e:d8:65:f2:34:b8:
3b:5c:8b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:04:25 2025 by rpki-client