Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/600569c8-a1e5-46bf-b6e3-b3bd8e590d49.roa
File: 600569c8-a1e5-46bf-b6e3-b3bd8e590d49.roa (raw, json)
Hash identifier: iqse8OVxOtF3VNjYrmi9RsXzdg30XRbRIlgIq3Oo0fo=
Subject key identifier: 20:01:EE:CE:B2:47:3E:88:C0:01:40:97:65:FF:64:74:29:35:46:F0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1545842A0A2F871B007C34F08328AD9E88BFD0FD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/600569c8-a1e5-46bf-b6e3-b3bd8e590d49.roa
Signing time: Thu 14 Dec 2023 00:00:00 +0000
ROA not before: Thu 14 Dec 2023 00:00:00 +0000
ROA not after: Thu 18 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:45:84:2a:0a:2f:87:1b:00:7c:34:f0:83:28:ad:9e:88:bf:d0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 14 00:00:00 2023 GMT
Not After : Jan 18 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:a6:97:e1:9d:ab:40:be:01:86:56:82:7b:
5f:38:2b:af:de:48:55:94:72:1e:e0:fb:e5:7d:67:
ef:ec:e8:97:89:47:7d:3a:de:ae:94:f3:91:c5:e5:
4a:ec:e7:9b:89:76:9f:4a:2e:39:f4:b3:8d:00:d1:
2c:05:ab:07:52:7c:98:6e:f7:61:fd:f0:f9:ce:f5:
9f:c7:1e:f2:ba:1c:3f:79:3b:06:5f:2a:ff:14:cb:
c1:5e:62:60:c5:5c:14:cd:e9:23:d2:35:dc:d6:d7:
a8:0b:37:e5:f0:59:65:34:b9:5c:ed:a5:29:02:21:
ed:ca:5a:ed:7f:66:d3:d4:cb:0f:a5:be:94:2e:69:
0c:ab:07:ec:d2:0b:2a:3d:b2:2e:98:01:95:cf:f4:
1f:69:8c:8c:21:fc:71:46:28:50:f8:33:ea:ec:da:
16:f7:56:34:b8:7d:8b:8a:fe:ee:16:5a:2a:79:7b:
8e:bd:96:c2:02:b7:cb:6f:e9:9a:bc:f3:4b:2e:77:
ea:92:7d:88:d7:99:74:be:af:ab:45:1f:ea:68:9e:
fb:b0:95:3c:fa:54:20:51:10:1c:3a:1b:31:9a:cc:
ae:cb:0e:2b:aa:55:36:e1:cf:ea:fe:c2:7b:bc:9b:
65:27:01:ce:2b:42:89:b7:be:68:2a:59:2a:4d:c8:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:EE:CE:B2:47:3E:88:C0:01:40:97:65:FF:64:74:29:35:46:F0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/600569c8-a1e5-46bf-b6e3-b3bd8e590d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a9:dd:99:2e:f0:bb:24:14:34:83:51:ff:3a:91:d1:61:79:
4e:15:f4:c1:1a:5e:4a:2a:e7:a2:8a:dc:7c:49:df:6b:98:7a:
13:5f:49:c6:a2:a6:95:1c:44:5b:da:4c:b6:b5:8f:66:e7:92:
0c:cc:7b:47:4b:b2:04:2b:7f:da:c8:e0:e8:23:76:0c:1c:0b:
b5:0e:7a:71:c3:11:22:ff:c3:1a:d2:82:a2:ad:32:f2:00:48:
56:19:55:da:98:e9:a3:68:4a:ea:98:d0:25:9a:04:a3:8c:3c:
de:52:ad:f4:33:8e:cc:1b:0c:79:dc:1f:df:04:bb:f2:de:74:
e0:63:81:fb:68:a6:af:37:06:41:ba:7d:2e:bc:78:ee:b3:b1:
50:21:1b:05:85:19:a3:1d:a0:42:32:1b:f8:13:3d:78:d9:de:
fb:38:91:e3:1d:f5:45:f4:77:72:56:45:98:85:52:d8:fd:c7:
e2:b1:ca:90:e9:75:c0:73:66:62:2f:b4:ab:d0:54:ed:c0:e1:
f4:eb:30:08:fc:8f:99:01:5f:cc:f3:92:8d:1d:74:30:7e:e5:
fb:9e:6f:3a:f4:73:7a:b3:ed:6c:a6:3b:55:d5:4a:ee:22:fb:
5f:01:fa:cd:ec:9e:32:af:25:e2:7d:5c:99:ed:97:85:03:61:
b1:6e:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:50:34 2025 by rpki-client