Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69a2b81f-09a6-404a-8dc4-b72e9138f2bd.roa
File: 69a2b81f-09a6-404a-8dc4-b72e9138f2bd.roa (raw, json)
Hash identifier: +Hd3Eq3hfBAyBqzsDlVeXIyC9JW2Z8OCtDY++7QKiPc=
Subject key identifier: B5:21:A6:5D:65:99:F6:33:0B:F7:33:D7:9C:81:B3:58:B6:00:F4:40
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6EFE964471D07D69F6456526024F7551793F0758
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69a2b81f-09a6-404a-8dc4-b72e9138f2bd.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fe:96:44:71:d0:7d:69:f6:45:65:26:02:4f:75:51:79:3f:07:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1a:f3:46:43:08:f2:7d:9e:46:10:16:2a:25:
ae:22:09:22:6c:46:8b:f0:c8:fc:43:3a:d0:46:df:
f6:26:f5:d6:88:80:a1:da:23:5d:ac:5d:1e:43:3a:
e1:32:d9:5a:27:47:9a:bb:a7:13:be:15:c8:d7:11:
51:c5:22:b6:de:84:58:1f:8c:df:99:b8:da:18:5b:
69:42:52:32:1f:1d:9e:bc:4d:1f:e5:10:ec:1b:8d:
1e:bf:ef:41:04:bc:a8:35:f5:f9:87:47:d4:aa:c4:
dd:07:cb:99:d7:3f:9e:51:37:38:98:ce:ec:37:c8:
f0:04:ae:f8:98:89:34:6d:92:00:d1:8b:87:87:7c:
cb:d5:90:9d:aa:2e:ed:70:f4:87:80:77:f3:a6:4c:
91:5d:4a:07:8a:d2:68:cd:6b:40:48:3f:41:1d:3f:
6d:5c:31:fd:7a:41:cd:2e:46:71:57:e7:8d:c0:16:
4a:0c:19:d0:bd:0e:fd:63:4e:55:d3:2a:09:a4:db:
aa:c7:dc:ac:7f:bb:10:33:c5:87:ab:ca:b9:f9:14:
21:20:22:f3:94:30:4c:ba:c7:2f:5d:2d:ad:98:99:
48:ad:c5:d0:ac:e4:2f:2b:a3:4b:cd:10:2a:96:0d:
1f:89:65:fd:e1:a2:45:2c:36:3a:0c:89:b1:48:f0:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:A6:5D:65:99:F6:33:0B:F7:33:D7:9C:81:B3:58:B6:00:F4:40
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69a2b81f-09a6-404a-8dc4-b72e9138f2bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9a:07:49:b3:f6:82:53:4a:f7:5f:3e:65:80:d3:b0:86:c4:
f6:35:5a:27:95:af:2f:78:35:f9:04:1f:d3:56:02:fc:11:d4:
2a:bc:47:42:8b:e3:55:67:60:44:bb:b5:e0:bc:81:c7:ac:a9:
0d:d6:3e:17:d5:86:dc:db:ca:d8:91:5a:0d:05:44:f0:d7:9e:
9b:20:a2:2d:e4:a9:2f:f6:45:b6:17:bc:1a:80:28:72:52:47:
be:70:19:fc:43:5b:08:b0:b5:47:11:b6:27:be:71:63:d7:6f:
04:5c:16:cd:0f:a8:0c:1c:ce:20:a0:ab:11:e2:49:d1:37:59:
a7:e3:69:69:2c:9e:5d:71:b0:46:f2:90:b1:ad:2b:fc:a7:24:
64:e5:95:39:be:29:a8:8f:bc:1c:b8:4f:11:f7:cd:33:bf:5f:
b5:dd:b5:86:11:73:02:85:b1:ce:ab:fb:28:87:a0:f6:df:ce:
c6:38:03:96:8a:50:85:32:86:2c:2f:16:59:2f:60:da:84:9a:
7c:db:a7:41:28:6d:27:1e:ad:88:14:ed:78:92:c9:8a:eb:17:
72:ad:32:8c:88:e8:ff:11:bc:f2:10:c0:bd:d8:f0:db:94:46:
c3:03:03:2c:56:80:c6:1c:b5:d6:b4:16:2a:be:88:22:37:52:
6e:53:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:10:22 2025 by rpki-client