Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/877ea75a-f25a-4259-b44f-4f6df714cdaf.roa
File: 877ea75a-f25a-4259-b44f-4f6df714cdaf.roa (raw, json)
Hash identifier: d1fS6b6TDAOcwpYMa3c1VxmzFPO7qfSfIV3pJO9kphk=
Subject key identifier: FA:47:DD:D2:37:8D:5A:89:E3:FD:01:24:77:63:E5:27:41:A1:30:48
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 635826E84410A019B637EE88CDE987C75E2200CD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/877ea75a-f25a-4259-b44f-4f6df714cdaf.roa
Signing time: Fri 14 Jun 2024 00:00:00 +0000
ROA not before: Fri 14 Jun 2024 00:00:00 +0000
ROA not after: Fri 19 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:58:26:e8:44:10:a0:19:b6:37:ee:88:cd:e9:87:c7:5e:22:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 14 00:00:00 2024 GMT
Not After : Jul 19 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:fb:ec:74:4c:0a:80:3d:6f:ba:19:8a:94:
96:7e:ce:be:6c:13:04:31:33:3c:f4:f8:58:87:af:
1d:16:f3:31:19:b3:9e:57:82:b2:0a:7f:2b:62:04:
f0:70:8a:2f:92:5c:e6:a4:d1:cd:5e:46:7a:4b:0b:
0b:bf:3a:08:41:1b:17:51:63:76:f5:d2:38:9a:5b:
36:30:02:8e:4a:b3:04:e5:69:19:7c:ec:6e:94:ec:
95:ec:7c:fc:9a:44:e6:e6:37:64:59:88:4c:e8:44:
2a:19:48:62:54:63:cf:b0:ef:6b:21:ae:db:24:a2:
bd:9d:ee:ee:a7:0f:e2:50:6c:d3:db:e3:8f:75:87:
cb:8c:3d:3f:94:fb:4b:88:cd:a1:f1:2d:9a:cc:cd:
28:29:12:52:0b:91:2e:a0:5a:fd:cc:16:15:c5:c9:
ae:5a:24:ed:f9:11:63:e1:c8:2f:09:ea:4c:eb:ad:
c1:cd:a5:08:ff:b0:a5:0a:59:60:be:74:97:ed:41:
28:38:9e:70:79:44:8f:0b:cc:c6:f4:8a:28:ee:71:
92:c4:ad:44:0b:55:5b:21:a3:96:37:e1:9e:84:bc:
0e:27:f0:f3:f1:0f:dd:a3:c3:a7:c3:6b:25:20:fb:
34:0e:90:50:64:f3:26:3d:de:59:2b:e0:4f:81:64:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:DD:D2:37:8D:5A:89:E3:FD:01:24:77:63:E5:27:41:A1:30:48
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/877ea75a-f25a-4259-b44f-4f6df714cdaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:df:89:35:c0:d9:33:a8:d9:5d:6c:c7:40:25:6e:bd:e6:a3:
65:1b:d1:d4:03:91:d5:53:c6:29:42:3a:c1:a2:e8:c0:98:71:
82:a0:83:b2:f4:25:37:1f:2d:34:89:71:89:b1:7d:fe:74:4a:
2b:5b:3e:d5:8a:7f:26:17:a3:1f:0b:b3:b7:3f:9d:13:8d:30:
b1:a0:83:8a:4e:82:1d:6f:b6:58:2a:c6:15:aa:d0:5f:aa:64:
38:30:21:f1:b1:98:c8:a5:c3:fb:e4:8a:58:6f:9b:97:e8:81:
f8:fd:ed:f7:4f:93:d9:a1:60:d3:2b:2a:fb:18:5c:c0:96:63:
98:12:f7:ec:39:45:ad:d1:67:de:9e:55:ae:02:25:1f:40:3f:
18:f1:65:c4:97:ef:2a:71:05:58:65:a6:3f:48:75:61:b5:55:
e3:c2:4f:d2:67:ea:5e:a9:50:10:0c:27:85:d7:2c:b5:fc:eb:
63:26:6b:8a:e4:de:94:61:08:33:0e:ec:1a:d3:7a:57:c7:8e:
e2:92:e5:e6:f8:ac:a7:7b:20:cf:b1:b8:de:57:c9:4c:be:6e:
32:3b:9f:17:3a:81:c2:87:13:15:ae:8a:ec:2c:02:27:c4:ba:
e9:c4:e2:00:01:73:a4:39:8d:db:26:2f:f6:77:f0:09:69:51:
75:3f:d9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:08:00 2025 by rpki-client