Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8cc80544-e93a-4921-a2fa-96c1f0de8774.roa
File: 8cc80544-e93a-4921-a2fa-96c1f0de8774.roa (raw, json)
Hash identifier: dPL68OCEJ3KpA0sjGOhH3tctidaXpUQnI62+h90nLQ0=
Subject key identifier: CB:20:5B:7F:17:AF:78:96:2D:19:55:D5:C4:2D:72:D7:0B:7F:81:B2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D08172133846339C1AFE79F66253A0222DF8133
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8cc80544-e93a-4921-a2fa-96c1f0de8774.roa
Signing time: Fri 27 Oct 2023 00:00:00 +0000
ROA not before: Fri 27 Oct 2023 00:00:00 +0000
ROA not after: Fri 01 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:08:17:21:33:84:63:39:c1:af:e7:9f:66:25:3a:02:22:df:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 27 00:00:00 2023 GMT
Not After : Dec 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:dc:43:49:98:e8:3a:2e:d7:bd:7f:11:ba:
ad:ac:42:bc:31:bf:24:eb:fc:c3:0c:5f:11:b0:5b:
3d:37:19:47:58:46:10:ea:08:8e:62:0e:ec:16:0d:
b8:f8:68:34:1b:a6:36:bb:69:3d:ac:48:58:ac:f7:
d3:7e:42:0a:6f:31:a3:4a:5d:ba:f6:c6:28:7c:50:
44:21:7b:6d:ca:aa:68:33:a2:32:33:f3:cc:28:93:
f0:56:82:a9:08:dd:9b:71:b0:f9:a7:04:ed:bc:de:
e6:9e:56:99:05:e8:aa:13:93:ab:66:0b:2e:57:f7:
85:ec:70:f8:d9:e1:3e:89:90:c3:b1:85:5f:25:7a:
c7:07:10:70:3f:38:88:55:63:7f:20:17:77:b5:b5:
2a:66:be:d8:22:2e:aa:b8:3a:db:62:b2:1a:85:f3:
4c:7f:a1:8f:7b:78:48:74:ea:27:31:5a:ae:8b:3a:
73:3d:be:8d:be:38:7d:17:40:98:ac:fb:b7:83:89:
ea:03:8e:19:8d:5d:cb:14:21:10:3f:df:f0:85:5f:
bb:56:a2:25:84:cd:2d:ed:df:06:a9:83:0b:a2:82:
0c:d6:2a:c4:22:04:6a:53:90:51:a2:ad:e6:31:40:
7b:57:95:d7:c6:51:6b:f9:e5:5a:df:bd:60:77:7c:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:5B:7F:17:AF:78:96:2D:19:55:D5:C4:2D:72:D7:0B:7F:81:B2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8cc80544-e93a-4921-a2fa-96c1f0de8774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:75:21:2c:99:f6:1e:a3:ad:da:86:dc:6b:5c:ad:6c:ea:28:
32:d3:bf:08:b6:74:d6:32:64:e2:59:da:55:1f:68:75:8b:d9:
28:36:fd:de:f2:58:03:f9:9b:ca:70:b7:1d:84:13:96:73:a1:
d7:e2:30:2c:ae:55:23:30:0e:74:0d:2f:07:fc:10:36:57:fe:
ec:9e:6b:a5:c6:9b:92:35:8a:29:1a:2c:7c:d9:46:c4:34:87:
7b:75:39:a4:92:73:8f:40:32:7f:c4:a4:1e:c5:a0:d4:44:19:
f3:c7:0e:4f:43:31:d2:71:f0:dc:c8:e9:a3:9d:ac:2f:4c:88:
20:05:f7:52:20:1e:f1:25:76:27:aa:25:eb:b0:55:32:2d:16:
a3:6b:84:29:21:e0:44:34:90:7c:0d:db:26:2e:dc:4a:9b:56:
e4:c5:46:16:62:03:0a:12:44:cf:53:62:b9:a3:4b:c1:d6:e5:
b6:38:5e:07:5e:28:66:82:12:e2:1a:3c:2c:a7:02:33:ea:92:
e4:d0:0d:d6:14:2c:cf:8e:27:cf:4e:04:6a:04:1f:01:a5:d5:
7c:ea:2e:4f:db:fc:2e:1a:d5:8a:cb:35:ed:81:25:3d:77:89:
07:3f:de:c1:d5:b2:c5:0b:b1:35:80:15:be:f2:59:24:d3:c1:
8c:42:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:49:59 2025 by rpki-client