Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0cd0fd0-dc9f-40b5-bb02-390c706faa00.roa
File: c0cd0fd0-dc9f-40b5-bb02-390c706faa00.roa (raw, json)
Hash identifier: GwSU38ebYuQWkHq6fHSs/8N8+KNJvHZZ7pmWxTQJeuE=
Subject key identifier: 0C:09:7E:EB:3A:3F:83:F2:53:B5:C2:3C:D4:8D:A3:53:CB:09:12:7C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74DEEBD2770C38AC2FC67E15408448869B2F7621
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0cd0fd0-dc9f-40b5-bb02-390c706faa00.roa
Signing time: Mon 03 Jul 2023 00:00:00 +0000
ROA not before: Mon 03 Jul 2023 00:00:00 +0000
ROA not after: Mon 07 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:de:eb:d2:77:0c:38:ac:2f:c6:7e:15:40:84:48:86:9b:2f:76:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 3 00:00:00 2023 GMT
Not After : Aug 7 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:2a:a5:87:f1:79:d1:d0:08:dc:5c:aa:74:
15:83:90:68:39:38:bd:bb:fe:85:5a:34:88:d1:6f:
38:93:9a:b9:03:7a:eb:81:27:46:e8:01:e7:0e:d4:
0f:a5:36:f3:61:78:df:d5:c6:ae:3b:99:e4:2e:a6:
f5:34:19:84:91:0a:85:e4:20:be:91:59:02:1f:6b:
8e:fb:b9:ec:4c:d6:48:99:1c:79:a1:a4:f0:0c:9d:
75:0e:6c:66:24:2f:b7:d1:90:f7:cf:36:be:4d:48:
a1:40:a6:52:46:7a:9c:7f:e9:d5:a6:cd:57:54:7f:
39:10:e6:78:ad:3d:48:fc:22:08:f6:88:0d:0c:ba:
76:1f:4b:2f:c2:53:a6:1c:78:49:ca:16:3e:c1:cf:
6f:66:48:b8:98:be:95:3d:54:98:ab:65:e1:03:17:
cd:a9:38:48:88:39:84:4d:d0:b1:46:b2:10:f8:6a:
16:44:bd:f8:4d:0b:16:53:b6:7b:4b:47:a7:5e:d0:
04:52:68:18:1e:d6:a9:5d:a5:9f:34:62:04:d6:56:
70:fe:7a:89:20:cb:3a:a1:a7:6d:5e:d1:58:c6:2c:
68:40:d8:6f:01:41:cd:62:3b:33:5e:03:51:d2:97:
61:70:50:30:6c:fb:12:b5:d7:83:12:4b:03:5f:52:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:09:7E:EB:3A:3F:83:F2:53:B5:C2:3C:D4:8D:A3:53:CB:09:12:7C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0cd0fd0-dc9f-40b5-bb02-390c706faa00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
85:34:05:b4:05:78:a6:6a:0f:54:1c:5b:8a:62:fa:e0:2f:cf:
ad:4f:21:9f:48:1b:14:00:7d:05:41:ff:2b:ca:73:19:11:ce:
b7:9c:8a:5e:b9:15:f4:61:16:12:a4:1c:e1:39:29:a2:08:24:
44:45:2b:9e:81:64:f1:d5:e2:1d:27:07:e3:5f:4b:86:96:b9:
02:27:e2:c8:eb:c4:1b:c6:99:69:c2:d4:58:55:f4:72:81:f8:
79:af:fa:a7:19:80:ab:1e:6a:9f:6c:1f:22:78:2c:be:1c:37:
a4:3a:5b:11:13:d6:20:63:ee:b2:79:f8:78:6b:27:a0:63:b4:
2c:7c:2e:6a:81:6c:55:d2:f8:cb:da:26:01:2d:e8:39:e7:be:
26:71:d4:7a:e2:6e:77:92:dd:6a:7e:06:fa:eb:21:95:7b:68:
ea:a9:cb:d2:e1:07:67:b1:66:91:34:8e:15:a9:7e:0b:55:11:
cb:39:38:16:83:98:a5:a4:6e:e6:e7:e2:c9:ad:7c:bd:40:b9:
00:1a:f0:7c:35:3e:3d:39:7e:c5:4d:3f:c7:a5:57:93:75:54:
41:c5:5c:2c:4a:a1:e4:df:6a:4e:c6:43:ed:23:dd:89:34:50:
65:c9:3f:8c:79:b2:35:64:0d:ba:39:24:38:94:14:9c:ee:2d:
f7:5a:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:57:54 2025 by rpki-client