Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b50252ac-6bc4-400f-a8b0-a5ad6d21d6a3.roa
File: b50252ac-6bc4-400f-a8b0-a5ad6d21d6a3.roa (raw, json)
Hash identifier: sUN5maHnsXcflXwGAb7HjeyveJYO6o161FeI8DKdBMY=
Subject key identifier: F3:29:CF:59:81:BA:D9:1A:DA:2C:91:DF:27:89:41:83:BF:87:8D:A7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AE9D4D012D27D2F6B5684200A2E3401168738E1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b50252ac-6bc4-400f-a8b0-a5ad6d21d6a3.roa
Signing time: Wed 23 Aug 2023 00:00:00 +0000
ROA not before: Wed 23 Aug 2023 00:00:00 +0000
ROA not after: Wed 27 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e9:d4:d0:12:d2:7d:2f:6b:56:84:20:0a:2e:34:01:16:87:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 23 00:00:00 2023 GMT
Not After : Sep 27 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:6d:7b:e1:3d:a8:d1:e4:9d:93:a2:ec:02:29:
13:b7:08:a3:98:7a:7e:95:89:3e:bf:b3:14:1a:97:
45:af:9b:e6:36:ae:ae:a2:d3:16:c7:13:53:f4:8d:
e3:f0:9a:a0:da:55:a5:f8:75:2f:2c:e5:80:ae:67:
d8:76:02:bb:a3:c7:b7:aa:5b:db:2f:3f:87:c3:61:
64:e5:f1:75:6f:77:5d:1d:8d:7e:9c:50:f3:89:20:
70:48:d4:22:33:49:14:9d:5a:38:45:b9:79:cb:35:
e7:b6:ea:0c:6c:72:67:d0:6c:aa:bb:e2:88:d5:db:
a4:c4:57:c0:aa:b7:45:4e:0b:65:bc:d6:72:67:b7:
f8:c4:89:fb:ce:74:88:40:1f:3a:bd:ba:e8:67:b1:
41:81:67:5c:f6:80:7a:df:24:64:64:ed:b1:34:1b:
f1:6c:b9:f1:9f:8c:ac:bc:fb:b7:9c:9f:e2:7b:65:
aa:df:8f:6e:d0:08:f3:09:6e:0e:71:27:b1:dd:5d:
42:c0:25:00:49:51:85:34:71:b9:92:69:8b:5c:62:
16:45:f5:19:a1:b1:cd:51:9e:3e:9f:20:22:97:33:
1a:49:13:6e:c4:20:c2:90:27:88:3f:c2:bf:2c:58:
05:dc:44:cc:cd:b7:da:1e:75:87:7b:0a:29:55:81:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:CF:59:81:BA:D9:1A:DA:2C:91:DF:27:89:41:83:BF:87:8D:A7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b50252ac-6bc4-400f-a8b0-a5ad6d21d6a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:88:9a:70:29:4d:40:a7:e2:16:83:cd:54:ad:57:68:77:2f:
2d:84:1d:45:dd:8c:13:b9:95:68:17:9b:95:8c:1b:fc:c4:59:
79:36:a0:9c:d9:15:0b:de:e4:58:9d:cd:2e:0f:12:a1:e6:69:
26:00:be:3f:ef:88:5b:dd:a1:df:52:cd:e5:ec:7d:1f:2b:ad:
5c:f6:e7:81:23:a5:a9:b0:00:68:72:4f:21:2d:ce:26:2b:98:
41:e7:22:a7:db:bd:e2:8c:15:98:d5:d1:3f:0d:50:47:f4:15:
5c:23:c9:7e:3f:b9:c1:58:07:ba:1c:fa:04:56:69:a4:e3:61:
84:6c:42:0b:04:61:17:d5:1b:16:c3:e7:3f:4a:a2:d7:d1:6b:
ee:32:43:d8:cd:09:9b:2b:a3:70:09:69:db:01:b8:ef:f2:10:
e4:a6:a6:60:1f:2b:32:c7:ea:0f:7b:5e:fc:ab:d1:66:4b:68:
ae:4a:7b:35:bf:45:02:42:30:84:44:9a:99:f8:77:40:75:1f:
3e:13:e0:20:7e:8c:e0:67:c5:b1:7e:b1:32:9d:c0:61:6f:09:
02:0f:4b:21:a1:6e:00:64:83:87:d5:de:67:1e:23:72:c0:21:
41:18:11:4c:fd:91:b6:c9:cf:ee:84:15:51:6e:a6:c9:d8:68:
f1:75:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:05:58 2025 by rpki-client