Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7777130c-2d20-4046-896d-d5310a8b726f.roa
File: 7777130c-2d20-4046-896d-d5310a8b726f.roa (raw, json)
Hash identifier: e54mDYPnXsFDnRVG3KPsSsnlT4GpJbBUvtoQXNgmy6w=
Subject key identifier: 03:FB:B8:57:9B:F8:14:E1:4F:DE:D3:F7:8D:91:BD:26:E1:55:7B:73
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06F0624B47B69D43ED2CB855F34470D81E78ABA5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7777130c-2d20-4046-896d-d5310a8b726f.roa
Signing time: Thu 02 Nov 2023 00:00:00 +0000
ROA not before: Thu 02 Nov 2023 00:00:00 +0000
ROA not after: Thu 07 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f0:62:4b:47:b6:9d:43:ed:2c:b8:55:f3:44:70:d8:1e:78:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2023 GMT
Not After : Dec 7 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:80:be:ba:a3:6a:36:36:d2:33:db:46:e4:
43:2a:22:34:4c:bb:96:39:7f:47:8e:d2:c0:e2:68:
5f:54:1d:e7:63:48:35:82:8a:c5:19:08:d0:1e:4d:
cd:70:50:08:fe:18:b0:24:cd:e7:48:23:df:81:6f:
5b:87:7b:46:f5:e6:ab:c5:a0:0a:41:c3:a5:6f:ac:
03:f7:46:17:7b:81:83:f5:26:7b:50:58:a0:a5:60:
02:cc:eb:75:7c:ac:95:34:94:96:7d:97:ea:e9:45:
7d:93:90:37:a7:35:ef:d4:6f:cd:07:b9:3c:31:88:
42:ba:2f:e8:f3:60:04:b5:f2:04:36:60:d6:11:62:
91:15:82:34:93:d9:b2:5d:ad:fe:f0:3e:bb:b2:be:
7e:b0:64:5d:84:c2:8f:74:8a:5d:d0:c4:38:d1:bc:
b1:3a:f8:1b:37:98:31:4b:94:86:ff:33:21:0a:da:
17:78:b8:5e:b0:7e:11:4c:99:9f:87:00:12:4d:9b:
57:f2:7c:71:17:84:69:38:79:e2:4e:4d:bf:51:e8:
64:60:ef:f4:d1:45:d1:ce:e3:8e:f4:00:7f:a2:dd:
35:df:32:d7:f2:f6:69:79:83:c7:e1:63:70:27:f7:
13:ba:7f:a6:08:5c:86:2a:16:82:99:63:46:aa:5d:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FB:B8:57:9B:F8:14:E1:4F:DE:D3:F7:8D:91:BD:26:E1:55:7B:73
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7777130c-2d20-4046-896d-d5310a8b726f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:50:04:fe:e3:64:a7:40:69:7c:fa:77:34:52:8b:07:8d:bf:
d3:72:9a:72:e7:e3:fe:c6:bc:60:9c:1c:ac:3d:c2:de:b1:ce:
b8:79:97:00:c5:c2:ad:d7:df:a6:64:65:ea:59:db:8d:8b:c0:
98:e5:e1:aa:b0:d7:3f:83:07:9e:1a:45:b7:c8:8c:03:83:83:
62:a1:55:46:92:4a:51:7b:94:53:c9:a9:1d:16:f6:56:e3:02:
f6:0b:27:eb:de:f2:bc:d6:9e:02:2f:ce:f7:fe:1b:3a:e9:23:
45:85:93:35:9c:1d:d9:43:35:10:da:02:bd:33:02:3b:5f:6a:
11:20:4f:51:ac:67:87:e8:a5:09:ef:43:49:0f:ba:0a:8c:ad:
90:d5:ad:f6:f0:63:c1:dd:bb:c2:b1:7c:f5:8b:03:40:09:20:
6a:b9:ea:37:26:a5:3c:9d:9f:a9:59:b0:5a:91:e1:76:b1:c3:
64:e0:36:52:76:1b:74:02:2a:1b:52:85:85:c2:86:78:49:d0:
09:47:ee:81:98:28:59:cd:77:f5:3a:ab:8e:b5:a8:75:ef:86:
8b:ec:db:54:b3:0e:b0:78:bb:19:41:c6:7a:97:8c:8c:e2:35:
cb:3d:ec:52:e5:33:78:9e:43:35:c4:b3:1e:8d:18:61:6c:00:
cb:f3:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:00:40 2025 by rpki-client