Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f232dee-dd67-4bf0-8800-dfe0a8c2ff73.roa
File: 5f232dee-dd67-4bf0-8800-dfe0a8c2ff73.roa (raw, json)
Hash identifier: iy8hhjp/tUsRvvZPxd3UI7YVOsDGRe9o1i6qBnOreWQ=
Subject key identifier: 81:09:A2:56:16:E2:B3:E1:16:6E:D9:25:70:21:61:A5:CE:72:CA:2A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5490D14BC3DB3973B8EAF78B2F91F25057B72A89
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f232dee-dd67-4bf0-8800-dfe0a8c2ff73.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:90:d1:4b:c3:db:39:73:b8:ea:f7:8b:2f:91:f2:50:57:b7:2a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:a0:2b:a4:dc:8e:b0:67:52:34:7b:46:86:
70:23:e5:73:eb:5a:f8:ff:19:af:84:4a:58:6b:ba:
8a:bf:90:be:f2:56:65:fe:6f:8e:80:6a:dc:36:dd:
68:9a:69:6a:c3:ec:c4:9d:f7:56:6e:ed:8d:63:d6:
65:3e:15:76:9f:44:e4:da:d9:af:a2:90:ae:de:ed:
14:3d:05:a6:83:46:37:9a:5e:41:0c:6e:ef:1a:2e:
d0:55:16:cb:c1:ec:fd:f3:87:08:f3:db:fa:61:90:
48:dc:e3:24:b3:ce:40:45:e9:98:40:41:29:4d:0d:
47:74:0d:2c:55:b3:2e:36:30:eb:f8:c7:b7:50:ff:
ca:ff:d4:1d:74:b1:cd:e5:7c:5c:57:f0:b7:ab:9d:
bc:1f:05:10:6b:e6:7f:10:45:bf:85:fb:99:90:af:
08:b5:b8:40:7e:6e:3e:43:6f:d5:e7:18:21:88:66:
d3:c2:b8:98:2a:fc:d3:22:ef:fa:8e:2d:d6:e3:6a:
60:0b:66:4c:0d:fb:ad:21:04:59:93:80:18:91:52:
57:dd:8f:4e:3e:c5:fc:5e:1c:8e:e2:00:4d:54:15:
e1:33:73:5a:29:36:2b:8b:bd:13:ad:be:55:23:74:
9c:c1:11:fa:ca:f4:8f:0f:22:0e:a5:97:70:31:e4:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:A2:56:16:E2:B3:E1:16:6E:D9:25:70:21:61:A5:CE:72:CA:2A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5f232dee-dd67-4bf0-8800-dfe0a8c2ff73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:96:4c:f3:ef:cc:00:17:f0:12:f0:38:a6:cf:be:f1:bf:c0:
7e:c7:31:31:68:b3:d3:c3:b4:b9:38:b4:b3:bb:13:d4:6d:aa:
38:11:b8:c7:c2:48:d4:2f:c9:5b:32:f5:8e:49:ef:3e:1e:b2:
12:55:0e:08:dc:2f:18:bf:b3:09:e0:3d:e7:c3:bb:8b:dd:30:
d7:80:9c:c5:21:de:63:66:6e:6f:9b:26:c7:d4:93:2b:0e:1a:
3a:52:42:03:e8:b5:26:ba:ec:85:c2:82:89:d9:3b:63:a5:73:
41:e5:17:48:64:32:1d:25:a3:3f:c5:9c:9b:cb:5d:15:d1:da:
a4:44:cf:95:a5:3d:80:f1:94:ea:49:c7:92:57:84:e4:ad:48:
aa:4e:b8:cf:dc:8b:26:d5:a8:45:5b:5e:ce:c4:a6:b9:ec:e3:
34:73:67:9d:ef:6e:ad:71:7f:f9:a8:43:9a:7f:b5:91:0a:72:
35:53:95:8d:49:90:a2:52:51:a5:dc:25:ad:e6:6e:d1:12:35:
18:ef:7a:04:bd:58:1c:10:75:9a:47:7d:ac:c3:6d:fb:96:ac:
48:fc:67:ba:5f:49:10:7b:91:ee:cb:c5:21:19:4e:43:26:3d:
8a:3b:19:73:2b:b4:75:8c:7f:21:c7:da:ec:f1:43:16:82:69:
89:4b:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:55:15 2025 by rpki-client