Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/695c1969-bfec-4f52-9adb-1390d211ddfc.roa
File: 695c1969-bfec-4f52-9adb-1390d211ddfc.roa (raw, json)
Hash identifier: B86pOOBeWDMIn7mvFlJJvEjIOFYrjBZ2ZlY+3PZO2YY=
Subject key identifier: B9:36:B1:A5:DF:78:FE:9C:C8:6D:A6:25:19:AD:62:88:09:64:9E:38
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 54B918B6A8EBACF90120AC2E7C547057055C5428
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/695c1969-bfec-4f52-9adb-1390d211ddfc.roa
Signing time: Wed 30 Aug 2023 00:00:00 +0000
ROA not before: Wed 30 Aug 2023 00:00:00 +0000
ROA not after: Wed 04 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b9:18:b6:a8:eb:ac:f9:01:20:ac:2e:7c:54:70:57:05:5c:54:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 30 00:00:00 2023 GMT
Not After : Oct 4 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8f:c1:1f:10:28:9a:e9:ed:b9:27:d8:be:06:
6a:b4:27:7c:29:f7:4a:ce:75:00:fb:34:23:d6:44:
41:96:27:7e:3a:2c:49:5d:45:41:dc:f8:0b:c4:8a:
63:21:16:db:5d:e6:dd:29:59:1b:e4:fb:b7:bb:e7:
2d:ba:dc:9d:7e:18:8a:45:6e:e8:98:da:74:12:a0:
44:25:73:93:ab:85:ce:fb:77:89:0f:89:e3:e9:a9:
3e:ca:1a:fd:49:05:61:2c:2b:37:54:a8:d0:e4:d9:
0b:04:f5:86:82:bf:51:b7:92:6d:9a:9e:1c:68:f4:
14:15:ab:1d:f8:22:0c:92:49:ae:7d:8a:b8:75:86:
ce:0a:b7:42:95:79:73:be:4a:5e:b3:4e:f8:42:cf:
ac:fe:9f:9f:c3:42:ea:4f:43:1c:d3:72:0d:64:5f:
70:1a:65:7e:ad:5a:96:53:09:c3:fd:8a:17:54:8c:
bf:e8:f8:9d:15:0c:b1:85:b9:cd:43:7c:02:7f:b5:
f1:98:9e:62:3a:36:67:c4:97:3d:36:ee:e3:11:14:
78:fe:d0:1d:5f:2f:a0:55:ed:f9:c1:83:d6:5c:fc:
4e:5b:fc:a4:d3:ca:46:93:d8:3b:fd:74:ac:38:e2:
15:d4:7d:8b:f4:be:f8:44:f3:56:5b:f5:21:fb:d5:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:B1:A5:DF:78:FE:9C:C8:6D:A6:25:19:AD:62:88:09:64:9E:38
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/695c1969-bfec-4f52-9adb-1390d211ddfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2f:49:40:c5:d5:40:32:e7:d9:0d:c7:07:86:4d:40:06:b6:
e1:86:11:1b:cf:26:08:5e:53:83:c2:61:4a:7a:fd:81:6b:57:
98:16:d4:a1:ee:0d:c8:f5:84:d1:a4:25:01:52:37:a2:7c:99:
2f:0b:4e:51:57:5e:c7:a6:b5:a6:72:5a:cd:d1:51:50:3f:a0:
b3:1b:54:dd:6c:eb:92:a1:7b:a1:c3:11:d6:1b:00:ab:e9:61:
55:bb:58:2a:70:d6:ba:80:61:d3:a7:99:37:63:a2:50:56:bd:
c8:bf:9d:7b:c6:c7:51:a5:fa:9e:67:b9:d6:9d:12:cc:38:16:
79:a8:1e:a9:73:6e:6e:ea:1e:dd:a7:bd:8f:56:44:c0:f8:be:
a5:50:5c:1c:45:0c:ce:14:11:d4:7c:95:4e:a8:f1:2c:87:6c:
b2:4b:8b:d3:ff:ef:94:ee:a9:e5:ac:5f:38:40:a3:fb:6e:60:
86:3d:e1:be:c9:79:6d:96:16:ad:19:9e:1f:a3:ca:78:58:77:
e0:90:43:87:7d:7d:42:dc:a2:30:6c:bd:16:fe:42:41:ef:45:
59:1a:0b:42:86:4c:95:bf:a4:9d:6f:9c:b8:5c:30:6f:37:7a:
20:56:f7:c6:7f:2f:e4:ee:0e:09:4c:db:cd:00:15:54:fb:b4:
9e:19:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:00:35 2025 by rpki-client