Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/59a46534-9066-48db-975b-69c9c6bb0c56.roa
File: 59a46534-9066-48db-975b-69c9c6bb0c56.roa (raw, json)
Hash identifier: CeTDZcggdefy7WaNQdWoM3UiUAitZ9nsg+HJ48xNkF0=
Subject key identifier: E8:63:7C:D8:F6:8E:E9:20:F0:3F:DF:D4:3B:4C:DB:4C:70:AE:2F:9C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 221ABEB2B799D495E96AC25212C49B1182098BDF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/59a46534-9066-48db-975b-69c9c6bb0c56.roa
Signing time: Mon 08 Jul 2024 00:00:00 +0000
ROA not before: Mon 08 Jul 2024 00:00:00 +0000
ROA not after: Mon 12 Aug 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1a:be:b2:b7:99:d4:95:e9:6a:c2:52:12:c4:9b:11:82:09:8b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 8 00:00:00 2024 GMT
Not After : Aug 12 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:d6:a8:3e:09:c7:d6:58:56:25:af:c9:53:
34:4f:55:87:12:52:c4:95:35:a9:c1:a6:5c:51:2e:
2b:1d:93:f2:7d:05:25:4a:b4:c9:eb:21:ac:a2:62:
3a:41:2b:3e:bc:01:4b:51:02:58:df:19:bf:ab:50:
d5:03:5b:45:27:8e:09:02:81:3d:51:c2:28:d8:0a:
e4:c9:31:cf:81:eb:8d:33:17:c2:18:21:23:e8:6c:
c8:95:dd:18:57:52:5f:de:02:56:31:2c:5b:1d:71:
53:f0:e7:21:9e:5c:d9:70:24:68:f4:7a:aa:43:9a:
02:af:c2:ab:2d:02:46:c7:8a:13:66:17:b5:bd:65:
d2:9d:8a:51:99:d2:e8:b9:9e:60:ae:6e:94:b0:5f:
d2:1a:2f:9f:5c:99:5a:d7:f6:e5:f0:6b:28:39:3c:
88:5e:6a:71:38:b9:e1:5e:18:88:aa:c4:f4:d8:c5:
48:9b:74:e4:05:81:44:41:cb:1f:69:c5:e4:58:b4:
eb:f5:65:ca:cc:06:11:52:e6:ef:dc:b0:50:3c:be:
f3:55:2e:cb:6e:f1:cd:6f:bc:98:4d:b6:86:6a:25:
24:90:2b:10:1f:e1:81:23:6d:ab:64:d9:43:17:1f:
d8:cc:01:e5:8c:af:b6:89:4b:a9:75:85:63:0f:65:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:7C:D8:F6:8E:E9:20:F0:3F:DF:D4:3B:4C:DB:4C:70:AE:2F:9C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/59a46534-9066-48db-975b-69c9c6bb0c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ef:c1:c7:db:18:24:9a:78:bc:9c:2f:db:dc:06:fa:dd:4e:
df:00:7c:57:b0:15:01:14:b5:3e:ae:62:87:80:6d:4f:2e:41:
4f:ce:61:5b:2c:9f:6c:a6:81:82:94:c8:02:31:77:19:66:3a:
4a:a2:47:93:a8:36:2e:16:47:f0:dd:e3:d7:f6:1b:5a:7c:2f:
a6:dc:20:29:83:30:19:52:03:14:6c:8b:8b:e6:48:de:85:91:
02:51:1a:32:4d:d2:f1:71:fa:ee:ed:fe:fd:46:d8:e6:82:11:
c0:d0:89:99:48:d4:77:22:f1:63:17:c0:34:39:c5:67:f0:70:
29:52:06:c9:46:31:92:f5:e7:8f:e1:b2:37:f3:ac:ce:41:40:
d6:f6:fe:47:88:75:33:03:61:3c:f0:d9:e9:da:aa:fd:1a:58:
51:d3:34:88:61:98:50:dd:d2:47:ed:56:ef:f6:9f:a1:3f:e9:
1b:6d:e6:d2:17:01:1b:b6:0a:ce:c8:e4:e5:6f:aa:32:34:97:
da:ee:e2:a3:a5:0c:48:51:82:41:c7:9a:24:43:6a:5d:26:49:
7d:fa:8d:c4:76:19:1d:ad:0f:cb:cd:d4:80:7a:9b:e7:c0:59:
f9:e4:53:22:bb:36:c8:3e:6d:8d:8b:d3:f0:e3:44:a2:7b:11:
b1:5b:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:08:00 2025 by rpki-client