Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b72a6e1-7b8d-438d-9e85-9bc354bd39e0.roa
File: 9b72a6e1-7b8d-438d-9e85-9bc354bd39e0.roa (raw, json)
Hash identifier: ZEnxkR/lbuxAYrXFcox3R+9UYE47iYWh/VUptp1ulng=
Subject key identifier: 9C:B7:83:F9:13:2B:17:F2:24:8D:46:8C:A5:6E:8A:A8:CC:8D:14:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0595EF450D94046CAE8BE712C06DE21346DCCA3D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b72a6e1-7b8d-438d-9e85-9bc354bd39e0.roa
Signing time: Sat 11 May 2024 00:00:00 +0000
ROA not before: Sat 11 May 2024 00:00:00 +0000
ROA not after: Sat 15 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:95:ef:45:0d:94:04:6c:ae:8b:e7:12:c0:6d:e2:13:46:dc:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 11 00:00:00 2024 GMT
Not After : Jun 15 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:77:2e:18:65:31:63:a6:9d:e8:83:60:8e:
7c:7f:af:5e:6c:2e:8e:6a:0b:b1:b0:1b:b0:56:55:
eb:a4:b5:01:8a:01:d2:ec:82:e4:40:31:d1:09:bb:
94:e0:36:02:97:b0:85:91:51:58:8e:55:c9:1a:1a:
bc:d3:d2:98:26:8c:dd:90:12:0d:34:9f:ad:c9:b0:
23:7c:73:ad:18:33:a8:68:02:d9:dc:0c:a7:6c:b6:
ef:b3:68:e5:e6:d4:d9:2d:b8:df:af:74:bc:e6:60:
fa:4f:3a:dd:59:67:de:9a:cd:36:e7:a0:84:96:a9:
65:3a:73:cb:83:da:2d:3d:66:6f:dc:b7:19:cb:87:
a4:84:a6:00:62:c8:3f:89:81:c5:4a:3b:4f:41:6b:
ca:58:d0:f9:99:4b:55:f5:78:c3:2c:69:72:9f:77:
7a:de:b1:42:d6:f5:da:f0:c1:94:78:c9:56:59:4d:
0f:2a:2a:bf:2b:53:42:d2:af:4d:49:9f:eb:c6:1b:
0d:be:63:cb:5c:d5:b7:19:7d:66:fd:f0:d9:1e:13:
31:17:36:df:5a:75:6b:61:78:f7:b5:a4:87:ed:a2:
97:ca:33:7b:b0:6e:c2:fc:af:0e:d3:c3:6d:82:b2:
17:f8:8c:a9:da:1f:7d:fb:03:fa:d9:25:3f:bd:c5:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B7:83:F9:13:2B:17:F2:24:8D:46:8C:A5:6E:8A:A8:CC:8D:14:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9b72a6e1-7b8d-438d-9e85-9bc354bd39e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:44:ae:44:12:c3:93:58:7f:83:98:71:9d:ad:c2:c9:6e:30:
c8:2d:32:ab:d1:d2:70:67:63:a2:40:4a:b8:56:86:4b:27:83:
04:32:83:a0:e1:1a:6e:4f:61:ce:0f:3b:fb:1f:b6:1e:f4:4b:
a4:74:06:89:12:b3:da:37:6a:84:ab:20:6a:ba:d1:51:38:0a:
c2:0b:76:d3:79:09:1f:22:4e:9b:d0:44:ed:41:a9:56:6c:aa:
76:f2:b8:aa:38:a0:89:9a:78:67:54:7c:7e:c0:6a:67:81:61:
26:fe:ef:95:b4:87:2b:63:44:f0:3c:ab:e3:73:bf:eb:25:fe:
0b:2e:71:8a:12:37:fe:8f:1a:13:e8:0e:ef:4e:44:30:a9:fa:
8e:43:3b:1d:d3:e8:df:3e:de:08:72:76:05:52:0b:4d:f8:59:
90:7a:f6:ca:89:d4:ee:be:cf:4f:85:76:12:91:42:cb:5a:3d:
fd:c0:36:56:0b:0c:79:a8:fe:cb:5c:18:8e:50:9f:39:1b:71:
a0:d7:e9:7b:ae:09:9d:95:5c:b5:8d:69:5b:85:12:c6:99:ed:
22:09:33:28:20:1f:b1:cb:31:54:56:dc:70:0b:0b:2a:df:f8:
8e:d8:3b:c5:90:bc:fa:46:25:ea:96:57:63:e4:6b:ef:30:ac:
1c:2b:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:11:25 2025 by rpki-client