Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48b30367-ff68-4f23-99fc-7d6bded87839.roa
File: 48b30367-ff68-4f23-99fc-7d6bded87839.roa (raw, json)
Hash identifier: niS7Go7whrYhdVwyTRlJo+/UIH3RaubjAabdrestHeM=
Subject key identifier: 46:A9:6C:7A:C5:E4:7E:AE:D2:79:B3:7A:AA:8F:CE:1A:52:FB:67:6C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1AEE062FD1A50DD65230AF95B08B7AF8BC28E372
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48b30367-ff68-4f23-99fc-7d6bded87839.roa
Signing time: Fri 10 Nov 2023 00:00:00 +0000
ROA not before: Fri 10 Nov 2023 00:00:00 +0000
ROA not after: Fri 15 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ee:06:2f:d1:a5:0d:d6:52:30:af:95:b0:8b:7a:f8:bc:28:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 10 00:00:00 2023 GMT
Not After : Dec 15 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:21:e3:68:c3:82:17:6e:54:09:b1:95:6d:
36:7b:a8:17:ad:fd:32:e6:60:b8:e7:e5:21:5e:01:
1b:b8:a2:6f:aa:e6:29:2f:0e:89:17:a0:de:13:96:
68:8c:a0:68:33:be:cf:7e:b7:8a:3f:97:fa:a7:a0:
b5:22:92:a4:dc:15:ca:2b:0b:26:82:4d:52:e7:24:
65:63:2f:85:07:cb:ca:ab:21:be:4b:2a:fb:a3:39:
9f:a7:95:95:d1:8d:fc:d3:c9:af:0c:d4:34:44:6a:
d9:0f:64:9a:c7:92:11:7b:bc:60:0d:cd:c5:37:a9:
06:c4:25:c4:8d:ef:f7:ad:fc:ba:92:2e:00:40:d8:
67:44:4e:96:66:98:c1:79:45:d2:d9:d2:eb:6e:ef:
dd:47:e2:ac:8a:9d:7d:7c:d7:f3:1a:74:62:24:16:
90:74:d6:e3:0d:25:11:dc:b8:f8:8f:67:fd:a5:d1:
fa:9d:c7:ea:fa:a1:c4:3e:6a:96:ae:1d:fe:58:9e:
e9:f3:a9:8e:29:a2:1b:5b:f9:28:9a:42:59:c9:c1:
52:07:60:78:65:1e:67:73:91:a1:8c:81:22:1c:e1:
72:e9:ce:51:40:ff:c9:1d:b7:49:e4:1b:1a:c0:94:
19:4e:0d:dd:f5:dc:b8:44:3d:78:29:03:76:d0:d1:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:6C:7A:C5:E4:7E:AE:D2:79:B3:7A:AA:8F:CE:1A:52:FB:67:6C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/48b30367-ff68-4f23-99fc-7d6bded87839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:78:4b:ac:18:b5:80:8c:79:5d:29:bd:0c:8a:e2:1b:54:c7:
ce:31:b7:e1:70:31:8c:f7:87:f7:f4:36:a5:eb:75:ca:e9:80:
11:9f:88:c1:0f:31:41:36:1e:4f:bf:67:dc:27:5c:d3:13:13:
e2:41:c2:5c:e9:3b:32:f9:f5:6f:21:ec:26:99:28:5f:3d:6e:
41:66:4b:f1:f4:de:0d:94:8e:2a:85:1b:fb:b2:c9:b9:5c:46:
93:a4:aa:6a:b1:c3:54:2b:cb:3e:96:5a:9a:ab:bc:db:05:90:
34:60:34:e1:4e:95:d2:4a:9c:d5:c2:57:20:9e:cd:1c:6c:db:
88:63:bf:5f:c8:e2:e2:12:5d:7d:37:e5:5d:f7:59:07:68:1a:
0f:96:08:4a:41:5b:14:d3:b1:67:f5:8b:d8:a0:bf:f8:2d:75:
75:aa:8d:33:d5:c4:74:31:f8:13:21:c5:a9:96:b3:bd:79:78:
b5:ef:7b:05:9b:c0:48:e5:3f:97:5c:7d:cf:43:8f:14:c6:82:
17:77:fc:dd:0a:22:be:90:e1:af:b6:7d:63:c0:27:e9:21:e7:
99:77:37:22:d1:6a:80:a3:48:f7:27:09:7f:a2:75:45:0d:ad:
5d:38:7b:b6:14:41:61:eb:c8:10:69:08:b5:69:21:9c:f7:94:
a9:85:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:37 2025 by rpki-client