Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/922f0dd1-e155-40cd-96a2-968370b7bee9.roa
File: 922f0dd1-e155-40cd-96a2-968370b7bee9.roa (raw, json)
Hash identifier: 4qmcWZAWF4g2LWb01n5uhpSP6EVyoWNu/2AttsoVAko=
Subject key identifier: 32:65:B9:DF:5F:D6:CD:B4:8C:FB:1C:55:C0:D9:2D:94:82:AB:32:8B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 042E98F4BE3474AF1DEBD56A8FF732CCDE538219
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/922f0dd1-e155-40cd-96a2-968370b7bee9.roa
Signing time: Tue 28 Nov 2023 00:00:00 +0000
ROA not before: Tue 28 Nov 2023 00:00:00 +0000
ROA not after: Tue 02 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2e:98:f4:be:34:74:af:1d:eb:d5:6a:8f:f7:32:cc:de:53:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 28 00:00:00 2023 GMT
Not After : Jan 2 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:dd:8a:51:10:d1:c5:e9:40:05:e8:f2:df:
f7:05:36:93:f5:81:fa:58:c8:57:56:61:60:65:13:
4e:fb:c2:c5:19:73:6d:4b:41:9b:03:3e:cf:e8:8b:
e2:37:b7:17:c7:d1:1a:6d:a2:7a:35:bf:fe:b9:2c:
89:bb:f7:a9:04:ba:15:e9:81:02:f5:6d:c4:78:83:
61:ad:58:5f:36:6b:5f:9d:64:9f:50:d8:b3:89:5b:
8c:54:e2:53:2f:7b:d7:4e:b0:d0:8e:40:f0:c5:b0:
fd:67:12:b3:b6:e1:2b:44:43:ee:96:b1:92:0e:49:
09:d6:db:5d:ad:30:11:ae:02:c7:db:6b:13:52:eb:
b7:3c:c3:32:b4:e1:ca:fb:b1:bd:3b:54:af:84:b0:
4f:6f:59:57:5b:89:6f:ba:62:06:9f:30:25:f7:5c:
6c:64:aa:b0:24:54:c1:0b:81:13:a8:9b:c2:0c:87:
fc:1c:ff:8f:b2:64:19:4a:04:cc:9a:1c:f6:45:41:
fb:bf:e2:56:f6:d3:fd:d9:fd:90:8c:de:73:bf:ca:
37:e6:1d:2f:cb:39:88:4c:fc:4f:8c:13:f2:22:25:
1c:c4:84:a1:32:a8:4d:5b:8f:c1:2e:cb:a1:15:fb:
4d:ee:92:82:cd:61:ef:51:1e:d2:39:45:68:e6:1c:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:65:B9:DF:5F:D6:CD:B4:8C:FB:1C:55:C0:D9:2D:94:82:AB:32:8B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/922f0dd1-e155-40cd-96a2-968370b7bee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6e:2b:f7:a2:e1:7e:fa:29:02:78:56:cd:61:7c:5f:f2:c3:
2c:cd:b7:ca:52:40:1b:0c:bc:36:e6:37:f9:08:76:d1:ba:31:
5d:05:62:27:6c:52:19:dc:40:b9:53:08:49:dc:f6:4a:39:c5:
9d:dd:55:2e:cf:bc:31:25:71:ea:1a:90:17:f4:38:3f:e3:ba:
8b:97:6b:1a:92:2a:62:35:35:af:96:37:41:0b:c7:0b:31:10:
52:3c:13:28:71:92:5f:c1:66:1e:85:3d:4c:37:5d:aa:61:61:
ea:b3:84:75:d2:38:bc:a5:ca:93:56:25:4e:3d:1c:bd:d0:ad:
a3:ea:74:23:a8:8c:9c:ee:0e:e7:2f:d5:7a:54:2d:ad:fa:eb:
6e:36:61:e4:34:41:3e:24:ff:2f:0e:4e:fe:7b:64:31:8c:78:
2e:28:b8:98:0f:bb:18:a2:8e:80:bd:72:a3:e0:58:18:dd:54:
35:85:71:96:72:8e:d1:d2:aa:62:b7:f6:4e:67:40:31:0b:3e:
26:68:b2:7c:bf:84:2f:6b:0f:87:04:a6:a0:a4:83:95:03:62:
72:19:85:15:81:31:3b:fc:d0:bb:79:a7:dc:22:16:2b:15:58:
a9:c5:fa:2d:cc:18:0b:c4:9f:b4:f3:b0:46:78:12:e3:00:df:
3c:43:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:08:23 2025 by rpki-client