Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b85307c-70ae-465c-a53c-bcf9600dc0a0.roa
File: 8b85307c-70ae-465c-a53c-bcf9600dc0a0.roa (raw, json)
Hash identifier: cn+jQor5JAqw2rAfqucIZayNvNILRWq6bO8To8BNn8k=
Subject key identifier: 42:06:E3:B0:70:5F:13:27:89:96:A9:CC:2C:FD:4F:7C:01:43:F6:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4CE50D230BDC1AF860F12030DDEE2F9FA91FF10B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b85307c-70ae-465c-a53c-bcf9600dc0a0.roa
Signing time: Tue 24 Oct 2023 00:00:00 +0000
ROA not before: Tue 24 Oct 2023 00:00:00 +0000
ROA not after: Tue 28 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e5:0d:23:0b:dc:1a:f8:60:f1:20:30:dd:ee:2f:9f:a9:1f:f1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 24 00:00:00 2023 GMT
Not After : Nov 28 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:8d:08:cd:de:7c:1b:56:b3:a8:e7:7d:88:
ef:e4:63:14:b9:61:68:de:b2:2c:c9:7d:80:7e:b3:
40:d2:b2:ca:99:16:ee:52:d7:e0:e1:9d:86:cc:5a:
38:5f:22:f8:50:2e:8a:90:8f:bd:39:69:5c:0d:e6:
08:2c:bb:b2:7d:19:0f:2b:a0:99:4e:43:46:8b:1e:
3c:e5:ea:53:3a:d7:f3:db:f0:6e:78:f1:7e:ec:a3:
ec:90:61:b0:a9:9a:55:b6:bd:7a:ae:2d:db:a7:c7:
a9:f3:a0:8d:6d:cd:8f:f3:6a:83:bf:d3:bf:e3:c8:
76:e0:f0:4e:7f:5e:16:29:a1:f0:fd:ed:67:b3:7d:
98:9f:ce:0a:07:fc:d0:a9:f2:b6:7d:27:1a:a2:f2:
2a:ee:18:34:ce:d5:bf:2b:50:4d:ab:00:76:7f:8d:
30:e2:00:78:ba:f6:71:34:a4:5f:c2:06:ec:65:06:
0d:fa:72:46:d7:7d:58:bb:dc:bf:3d:7d:9e:47:d6:
d6:66:e8:26:2e:18:71:bb:7d:21:20:4d:6b:00:17:
07:02:5f:be:70:be:54:5e:4f:92:f6:bf:b0:88:cd:
01:72:ed:6c:45:c2:de:49:c7:fe:04:78:4a:a8:bb:
80:be:aa:84:49:fd:ed:d1:0f:03:cf:6c:c8:61:bb:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:06:E3:B0:70:5F:13:27:89:96:A9:CC:2C:FD:4F:7C:01:43:F6:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b85307c-70ae-465c-a53c-bcf9600dc0a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b2:80:96:30:35:bd:5a:66:4b:1d:c4:3a:71:1c:0a:49:fe:
f3:39:9c:8b:19:cb:1f:bd:77:52:94:6c:ef:d9:e4:d2:c8:4e:
95:ad:5d:0e:49:c1:5a:78:ce:7e:af:5a:3b:0a:18:ef:93:e9:
2d:99:73:a0:ec:21:f1:d0:71:1e:ae:31:33:2a:d9:4e:44:cd:
23:ac:48:d1:85:ad:0b:69:a4:85:44:54:78:15:0b:b3:7d:13:
24:39:e4:88:77:c2:26:75:b1:78:d4:a4:2a:db:25:34:b3:f6:
3e:81:c7:a8:4c:5c:3c:13:c1:5b:44:19:7a:13:a6:72:a3:64:
86:c3:af:1c:8a:ce:da:86:90:0d:5e:d4:6b:cc:3a:e8:34:62:
59:8d:2b:8b:50:a7:62:cf:cc:d1:f2:06:46:b0:74:6a:55:33:
a0:93:b7:d4:46:05:3a:46:cc:e5:e3:62:b9:69:85:85:76:16:
9e:97:07:30:f7:24:1a:01:b1:12:7a:ed:f0:fd:16:ed:04:18:
f1:3f:51:66:9b:fb:d9:a0:be:e9:bc:26:20:71:fc:ac:ec:90:
68:27:65:94:80:38:06:95:e8:39:ed:a6:e5:4b:0b:15:d0:e4:
7c:90:1f:8d:e9:9f:ac:c2:5c:ca:b1:f3:57:66:fa:5f:e8:c4:
25:48:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:03:34 2025 by rpki-client