Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b96d95ef-1acd-44a6-aa9d-ec14e8a8387a.roa
File: b96d95ef-1acd-44a6-aa9d-ec14e8a8387a.roa (raw, json)
Hash identifier: qL6qKzIvr4Ho28GIm77cupoonytQF+TQBLBGwSb3W7g=
Subject key identifier: 2D:C7:B5:44:59:13:07:FD:14:C5:95:7D:38:5E:1E:89:DD:EB:CC:22
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 358AF4DD77FE857927FEB39D10D33551B90B27E3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b96d95ef-1acd-44a6-aa9d-ec14e8a8387a.roa
Signing time: Sat 19 Aug 2023 00:00:00 +0000
ROA not before: Sat 19 Aug 2023 00:00:00 +0000
ROA not after: Sat 23 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8a:f4:dd:77:fe:85:79:27:fe:b3:9d:10:d3:35:51:b9:0b:27:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 19 00:00:00 2023 GMT
Not After : Sep 23 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:99:01:fe:bb:91:76:a6:4f:c6:9e:a4:eb:
7f:cb:c1:3e:76:34:12:cc:0b:e5:7a:dd:8a:50:6f:
50:a0:a5:d1:03:57:f4:85:ce:29:5b:1f:53:4d:50:
22:de:fe:4a:b5:b5:51:e6:cf:9f:2f:d9:51:e9:cb:
0c:07:ca:0a:dd:50:ef:9f:45:1e:89:9d:da:f3:d0:
d8:d1:0b:87:8a:d3:a1:0e:04:4c:20:c7:fa:de:46:
ba:04:11:70:7d:41:6b:fb:35:a0:ff:1d:a8:85:18:
03:d7:61:aa:18:8c:a6:91:38:f6:54:b5:f9:59:ce:
10:71:f1:02:dc:72:30:d9:3d:67:a7:38:0d:05:28:
31:c8:6a:65:5a:d8:73:c4:a5:a0:cc:e1:c4:ae:60:
92:ab:3e:5a:22:51:4f:12:e5:62:88:b4:81:09:d7:
c4:48:86:bb:3d:aa:c3:15:6a:c2:e8:58:df:ce:dc:
b2:92:15:73:ee:c6:c2:af:b8:b3:19:c1:ca:fd:27:
fe:2e:90:eb:85:d3:8b:94:5a:f3:5f:99:2f:29:87:
66:f0:cc:55:18:8e:ca:4d:e0:a6:89:9a:c6:f6:b3:
a3:db:5c:34:bd:7e:80:e7:ea:e3:db:01:4c:30:82:
0d:d6:f5:24:80:77:68:84:08:16:08:e6:0b:a9:70:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:B5:44:59:13:07:FD:14:C5:95:7D:38:5E:1E:89:DD:EB:CC:22
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b96d95ef-1acd-44a6-aa9d-ec14e8a8387a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e1:aa:72:86:aa:7f:36:b7:2c:6c:e1:8a:29:ee:ac:f4:a2:
1f:e0:87:f0:33:8f:aa:e0:11:c9:4b:c1:ac:b6:f7:c5:5d:7f:
2c:ad:92:e7:25:56:78:bb:9e:2e:0d:66:50:ca:e5:da:94:56:
e8:fc:74:f8:6b:09:79:b8:e8:dc:3c:b1:9b:b8:a7:8b:1d:58:
75:89:c7:f2:db:b1:89:47:f0:f1:2e:e2:20:e9:32:b4:9d:97:
5d:a5:cd:5c:39:57:b6:10:67:dd:4e:65:cc:a2:07:48:f1:c2:
17:29:33:db:2e:4e:d9:1d:90:85:bb:bd:ab:60:fa:ee:9c:36:
64:56:77:72:ca:06:9f:f0:28:60:c2:c9:68:dd:8b:b7:52:21:
69:5b:29:c1:b8:a8:93:f9:b0:36:20:1e:c3:5a:f7:cb:bf:e5:
a1:fe:87:b7:39:27:61:43:db:1a:f5:13:0b:53:b8:f2:1a:70:
4a:32:60:ad:0e:d4:20:09:c6:55:f7:9c:44:a6:2d:ab:ba:91:
df:6c:cc:e0:d6:af:e2:fd:d6:89:1d:3c:48:ae:25:31:e4:f3:
5c:82:96:5c:e9:30:34:18:aa:b5:5a:33:87:54:b5:5e:fd:e9:
3a:1e:7c:62:51:55:a4:97:97:72:07:b0:f6:08:f1:af:50:d5:
7c:0a:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:50:34 2025 by rpki-client