Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/793d95d3-fd6d-4652-9a56-8623f3c1d21c.roa
File: 793d95d3-fd6d-4652-9a56-8623f3c1d21c.roa (raw, json)
Hash identifier: /GydkSNASlA+YyU/B0B0ehAwEAvlU++uLAUmV0nwDzI=
Subject key identifier: 70:BD:A4:67:0A:E6:A8:4A:90:20:F3:51:09:19:ED:EC:98:3D:3B:AB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 42F44D4309E018ABB2846B84E8FF6E8FA49050AD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/793d95d3-fd6d-4652-9a56-8623f3c1d21c.roa
Signing time: Sun 13 Oct 2024 00:00:00 +0000
ROA not before: Sun 13 Oct 2024 00:00:00 +0000
ROA not after: Sun 17 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f4:4d:43:09:e0:18:ab:b2:84:6b:84:e8:ff:6e:8f:a4:90:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 13 00:00:00 2024 GMT
Not After : Nov 17 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:14:3f:11:a3:39:ce:f9:a5:a7:4f:df:7b:
f9:64:09:c0:3b:10:24:16:48:35:a4:95:05:e3:ea:
fc:2b:d4:d8:18:85:45:c0:51:9f:d7:38:3f:56:7e:
d5:b5:14:78:5f:98:9c:3d:3c:bb:4d:43:9c:a0:7d:
e9:db:75:01:95:ac:65:fa:72:3f:0d:00:58:aa:c7:
3c:5d:2a:4b:77:18:2f:eb:c1:fb:16:ab:01:3a:7e:
47:4b:d5:98:16:89:3d:7f:c2:e0:1e:bc:7c:c7:ad:
db:c9:ff:64:7e:3e:e6:36:3c:e5:66:ec:6a:f9:a7:
f1:18:23:06:dd:90:30:dc:9c:7f:54:98:c4:d8:1a:
8b:07:e9:43:63:91:37:ee:ea:9c:1d:d1:1b:66:fd:
29:b2:f2:2e:e4:79:4d:16:fd:7a:64:ab:69:b1:6d:
be:44:57:e6:d0:dc:d8:6c:e2:6d:7a:29:50:83:c1:
0b:eb:cc:e6:cd:0e:e7:bb:ac:b4:da:04:27:61:ba:
a5:07:64:ef:67:e3:f3:29:f9:74:f2:dc:0b:ef:c2:
a5:40:d3:e8:0e:2d:6d:2a:ae:57:31:da:42:74:8a:
63:2e:ef:79:16:53:16:8e:ab:02:1e:63:6f:33:c6:
ca:87:e9:1c:06:79:a2:f5:a5:40:0c:54:80:d6:99:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BD:A4:67:0A:E6:A8:4A:90:20:F3:51:09:19:ED:EC:98:3D:3B:AB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/793d95d3-fd6d-4652-9a56-8623f3c1d21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9c:80:d9:f3:59:16:b9:05:e5:8c:c6:4f:57:6a:fe:39:20:
58:21:6c:d5:b1:bc:76:cf:68:92:73:1c:5c:82:93:ab:b6:ba:
cb:4f:11:85:f8:62:51:b8:f4:80:7e:2b:bd:c3:ab:5c:fd:06:
17:ea:42:50:8d:1c:5b:85:21:0c:d7:f1:b3:35:de:e8:f2:39:
8e:d8:00:cd:7b:ff:0e:1d:db:27:57:e1:bb:08:63:cf:a9:9c:
3e:64:f0:1b:d3:e5:c2:28:6c:05:93:79:09:e6:25:83:10:81:
1e:4a:7d:89:52:ee:ac:bc:e2:ac:16:57:b7:08:45:d1:cf:5b:
2f:9b:6a:ec:e1:3d:7b:ad:00:e5:c6:7b:b9:70:14:fc:01:63:
d8:da:0a:bd:89:f2:79:93:47:e5:f2:8f:96:bf:1c:29:4f:6f:
52:cc:dd:ed:11:dc:1e:36:c8:21:6c:54:cd:79:b2:aa:4f:cb:
5a:0e:a9:aa:30:0f:5f:80:ff:38:2a:98:ca:ea:95:fc:72:1f:
7c:18:95:03:d7:7d:39:24:ae:11:09:a4:bf:45:59:59:9c:77:
0c:8f:6d:14:01:e9:16:a2:e9:04:a2:98:75:ce:84:a4:83:3e:
d7:e6:31:24:ef:49:c8:3d:9d:9d:d4:a4:ef:cb:15:5c:3a:4a:
af:2c:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:04:51 2025 by rpki-client