Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/915f50e3-d399-452e-b816-68b5582eb734.roa
File: 915f50e3-d399-452e-b816-68b5582eb734.roa (raw, json)
Hash identifier: VRoCqEbjN725RpZ03CA2Bo7yFnID/Zs6dOu9KZaU9CA=
Subject key identifier: C4:3D:97:22:22:43:D8:E7:9A:CD:C2:B9:9D:0D:70:11:40:B1:0F:13
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3023D0B31CAA9FF3B8654BA90EAB60017E26DF43
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/915f50e3-d399-452e-b816-68b5582eb734.roa
Signing time: Sat 30 Sep 2023 00:00:00 +0000
ROA not before: Sat 30 Sep 2023 00:00:00 +0000
ROA not after: Sat 04 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:23:d0:b3:1c:aa:9f:f3:b8:65:4b:a9:0e:ab:60:01:7e:26:df:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 30 00:00:00 2023 GMT
Not After : Nov 4 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:4b:a6:68:33:f7:4c:f3:c6:73:31:13:75:
d5:55:37:7a:01:c0:56:02:ec:60:9b:d2:18:35:86:
9f:14:d2:f6:99:46:eb:c6:99:e5:51:72:ac:da:bd:
1c:cb:e4:0e:71:3b:25:93:e7:f6:2a:f9:e0:e2:dd:
73:c7:2b:79:d3:0e:85:a4:39:bb:ca:c4:03:40:4c:
57:b7:4b:ec:b9:a0:66:d6:32:1f:2c:5b:84:14:c2:
82:b4:f7:2b:c8:91:4f:fb:54:ab:2d:48:db:a1:5e:
02:46:ff:30:3d:af:80:81:fb:29:16:05:f4:1f:8b:
6b:6c:49:64:6c:71:a5:8c:db:1f:52:90:37:2f:5b:
7f:d6:60:87:82:77:3d:64:74:15:2b:65:03:59:3e:
48:d7:4a:8b:f5:4b:8d:38:9c:28:78:b6:8b:f8:cb:
3a:13:ff:ed:65:b7:c9:43:85:a6:f7:cf:ff:cb:f7:
c2:26:36:11:79:90:36:32:59:73:77:32:cb:43:e6:
88:91:b5:82:55:b1:e8:96:bf:64:ba:e6:64:e0:38:
20:e0:f1:eb:75:ab:25:6b:7d:53:43:70:6f:44:06:
79:04:ba:22:ad:75:13:ee:73:4b:0a:92:6d:57:0b:
b5:a7:0e:f9:89:44:eb:73:da:3f:ac:6d:11:6d:4e:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:97:22:22:43:D8:E7:9A:CD:C2:B9:9D:0D:70:11:40:B1:0F:13
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/915f50e3-d399-452e-b816-68b5582eb734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8f:81:af:51:5a:96:54:cb:c1:b0:6a:ef:fd:20:7b:19:10:
5e:21:1e:cd:ae:3d:99:10:49:85:2f:88:c7:e4:2e:f9:ff:0d:
48:bb:45:95:72:77:f7:ad:68:af:20:af:c3:d2:b3:d3:87:cf:
5d:85:50:e6:47:8e:2f:7b:6e:0e:7e:22:40:82:e2:b5:5d:3f:
69:bd:ea:bc:63:fa:1f:3b:e5:07:2f:b7:f4:d7:f5:0b:ef:d2:
92:0f:61:ba:f8:80:78:10:e9:b6:89:fe:b6:54:19:11:30:12:
a9:fa:dd:86:93:d7:b4:56:24:4e:e0:70:ba:05:4d:51:80:c3:
68:b6:ae:0f:7f:2e:99:13:87:4b:08:91:ba:ed:1d:67:ea:0f:
83:40:f1:ef:e0:c0:a9:18:68:2b:4a:f9:4e:cd:eb:68:05:4b:
82:14:ae:07:c9:1a:12:f8:d8:f3:7f:af:cb:59:1f:a6:25:6b:
91:ba:9c:cc:e2:de:41:1d:1a:38:e6:b6:67:88:6d:2a:93:00:
b0:ae:c2:83:37:45:aa:e6:43:13:ea:8c:18:7f:21:cc:35:49:
2b:1d:60:08:ed:45:0e:1b:f9:64:df:df:41:45:0d:59:35:2e:
3a:94:38:89:c3:75:cd:b7:83:ce:b2:f9:b3:f8:3e:5c:1d:d3:
58:ee:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:03:35 2025 by rpki-client