![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c03c319-ec4d-4957-9fe7-ed5c03a76c0d.roa
File: 7c03c319-ec4d-4957-9fe7-ed5c03a76c0d.roa (raw, json)
Hash identifier: og78U30yUZKYFiNlhmSjXq/BVarRWAw8k6TAlWxgyjI=
Subject key identifier: EF:6D:70:89:27:61:0E:24:52:E6:60:06:16:B1:1F:AC:D4:0C:86:63
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 52D7730E015AECE1164416C3156A7AECD8927906
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c03c319-ec4d-4957-9fe7-ed5c03a76c0d.roa
Signing time: Sun 11 Aug 2024 00:00:00 +0000
ROA not before: Sun 11 Aug 2024 00:00:00 +0000
ROA not after: Sun 15 Sep 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d7:73:0e:01:5a:ec:e1:16:44:16:c3:15:6a:7a:ec:d8:92:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 11 00:00:00 2024 GMT
Not After : Sep 15 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:89:84:74:2f:d3:74:59:b7:e5:80:73:37:
75:90:d2:f5:0f:c8:ae:00:ea:e9:4c:a0:a5:69:aa:
2f:3d:24:b6:81:ce:51:58:53:16:19:8d:84:c2:d2:
21:c0:37:5e:e8:3e:a1:bd:db:68:56:09:a9:05:1a:
dc:12:97:76:41:16:23:57:1c:47:06:34:af:02:55:
a5:a1:ec:71:dc:4f:c4:a9:54:1c:ac:19:2e:e9:e0:
30:80:90:ed:03:30:0b:b6:bf:e2:76:35:27:93:f8:
ca:ab:65:f3:69:30:d7:64:8a:30:3e:b7:71:78:96:
e9:56:5e:60:dc:5d:01:08:57:07:d9:42:14:9d:3b:
9c:19:be:2d:79:5e:2b:e3:49:ce:bd:26:cf:23:69:
5e:25:38:c6:70:dd:7d:2a:c7:4a:46:97:e9:85:a1:
1a:a2:fc:51:cb:6a:9f:e8:32:db:fc:f5:f1:53:75:
b7:aa:5d:68:49:14:4f:02:a3:4a:f5:70:72:08:18:
d4:50:37:14:6e:2e:8f:4d:02:17:c4:5a:06:22:56:
f4:b2:15:0b:4a:9e:14:7b:1e:7e:5d:b8:8c:ce:7c:
11:a4:ed:ba:8f:62:c0:d0:46:63:27:ba:0a:fc:b2:
9f:33:00:86:53:c3:4b:4b:a3:9a:ec:85:70:77:7d:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:70:89:27:61:0E:24:52:E6:60:06:16:B1:1F:AC:D4:0C:86:63
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7c03c319-ec4d-4957-9fe7-ed5c03a76c0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0e:ee:8b:c2:7a:3f:40:57:cf:d7:b1:dc:b1:38:96:ac:a2:
6f:ad:0b:6e:fd:c9:ef:f9:10:05:96:2b:cd:90:47:85:0a:a4:
78:d4:d2:b4:84:26:19:3b:3c:86:c5:70:4f:15:f6:fb:ab:c7:
02:8d:30:53:c8:0c:aa:20:14:fd:c2:19:06:4a:fe:fd:8d:a2:
ae:5f:23:ad:c6:0c:f3:59:12:04:47:5f:ac:e3:7d:44:4e:8e:
df:81:3a:9e:4e:a4:7c:d2:86:53:cd:d0:2c:27:32:59:c3:e3:
18:2e:8b:af:4e:59:7f:cf:b1:af:1c:c7:25:b0:27:3d:fe:ba:
28:e5:ec:5e:0b:2b:e7:6c:f2:41:d8:9e:13:dc:90:41:03:d7:
59:f5:d4:31:b2:77:4f:12:92:6c:01:c2:06:dc:02:0c:06:35:
5e:d2:ca:de:c8:e3:33:d0:99:67:f0:ff:c4:62:6e:d9:c0:36:
a9:f8:94:e2:64:7c:ac:73:f1:82:81:37:8a:83:d4:59:b9:58:
f0:11:ae:70:ce:de:36:c0:f3:80:9d:bf:c8:c5:78:1d:0a:bc:
b1:a7:ab:f4:78:be:1e:1e:55:fe:9e:40:63:5c:50:f0:11:6e:
35:a5:a8:37:c0:9d:8c:81:aa:3c:8a:54:b8:47:0c:10:21:42:
fe:91:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:03:48 2025 by rpki-client