Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a31e22ea-b820-466b-9ad5-555350e973ec.roa
File: a31e22ea-b820-466b-9ad5-555350e973ec.roa (raw, json)
Hash identifier: KooIGsLSkT6aI3YtuSDniBLSL1qtw8xH51F0tuPaLQI=
Subject key identifier: D4:5D:E3:F5:95:2F:82:B8:BF:72:7F:59:D1:8E:D3:7D:7E:F3:33:6A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6682586DE2D5DD5046304965DB64A49DBAFEC6FF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a31e22ea-b820-466b-9ad5-555350e973ec.roa
Signing time: Thu 22 Feb 2024 00:00:00 +0000
ROA not before: Thu 22 Feb 2024 00:00:00 +0000
ROA not after: Thu 28 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:82:58:6d:e2:d5:dd:50:46:30:49:65:db:64:a4:9d:ba:fe:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 22 00:00:00 2024 GMT
Not After : Mar 28 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:89:cd:09:00:a2:6d:36:c3:9b:f6:81:79:
26:93:17:64:c9:e0:6e:76:50:af:c2:63:0d:61:97:
f0:28:d6:c6:b3:28:37:d1:92:a2:c7:35:cd:02:0a:
1a:93:89:00:fc:4c:b5:4c:01:90:55:ff:0f:f6:cf:
42:6f:2d:2c:b7:bb:84:4d:89:05:c9:36:e5:e7:eb:
7e:3d:95:e2:a1:24:26:c1:55:ea:da:78:34:41:b3:
fe:88:aa:0c:da:f3:3b:28:fd:67:c0:ae:31:6a:02:
61:65:16:b8:5f:a3:76:57:6c:1e:c2:4d:3c:04:47:
87:27:25:78:fe:94:08:b5:1b:93:70:cd:a5:fd:e1:
32:40:13:41:a3:26:aa:eb:a1:03:83:3e:62:32:35:
d9:2a:07:4c:ec:53:25:d5:12:43:67:50:8d:68:67:
3d:f1:be:9a:f9:b9:ca:d8:be:d6:6f:bf:e6:a2:e2:
f4:6d:49:36:18:85:62:64:c7:70:00:49:56:52:c7:
37:5e:91:8a:14:15:34:c4:52:fd:90:c5:55:e7:55:
65:6e:2e:5b:c5:9c:0b:7b:f4:f8:0f:57:e5:26:2b:
87:af:aa:05:7a:50:6a:76:93:cc:dd:6a:04:e6:f5:
54:e8:11:c3:7a:2c:70:a3:a4:27:db:3d:5a:f1:45:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:E3:F5:95:2F:82:B8:BF:72:7F:59:D1:8E:D3:7D:7E:F3:33:6A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a31e22ea-b820-466b-9ad5-555350e973ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:42:a5:7a:0f:e7:65:4c:d7:b6:d8:26:d9:ce:a3:7d:7f:27:
0a:32:96:9e:cb:b9:87:86:9b:14:0f:32:a5:1a:9d:55:65:a1:
61:43:31:2b:13:8e:d8:5a:55:8e:39:40:d4:13:ae:c6:fc:05:
85:69:8b:d3:69:c4:8e:8c:54:a4:2f:a7:23:30:bc:f0:30:6f:
a3:c5:3f:73:28:8b:32:0d:a6:42:0e:fb:50:42:da:dc:28:29:
d2:54:c5:1e:b8:5d:fd:a9:15:b0:8f:08:3b:fa:d7:60:31:03:
09:4f:0e:cd:9d:2e:89:9d:16:3f:a8:a3:6c:0f:f6:1e:c6:a2:
51:c2:10:b8:99:19:97:ba:09:6d:65:7b:27:32:93:b5:8a:78:
05:79:e6:2f:6b:aa:3d:b9:41:d8:d8:6f:9e:3c:93:3a:88:be:
f4:a7:88:69:44:6b:f0:50:37:08:b1:6e:89:fb:d5:fb:76:e2:
6b:89:5d:c2:60:3d:79:6f:15:99:14:22:40:04:4f:1c:f1:dd:
36:55:9f:ee:40:a7:12:41:df:51:cf:44:27:d6:a8:0a:22:f1:
a2:e4:b5:2d:83:5c:59:e9:15:ee:82:e1:be:b2:4c:8e:56:45:
04:96:9c:1f:f4:e0:c7:41:69:82:e4:3c:ff:dc:7c:87:55:68:
7c:57:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:01:27 2025 by rpki-client