Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ceb6efdf-1add-4b55-a01b-c61f29b73000.roa
File: ceb6efdf-1add-4b55-a01b-c61f29b73000.roa (raw, json)
Hash identifier: hxWuElmC7vGqq19JcUuDNox66KbiejSHZ+2FaYin+EE=
Subject key identifier: 06:61:F1:43:A7:46:92:7D:A6:E1:0E:34:88:B2:9C:D9:C0:45:1F:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4C0F0662B43D2628433F5E5F2E4D5B10EDFB7E02
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ceb6efdf-1add-4b55-a01b-c61f29b73000.roa
Signing time: Wed 26 Jul 2023 00:00:00 +0000
ROA not before: Wed 26 Jul 2023 00:00:00 +0000
ROA not after: Wed 30 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0f:06:62:b4:3d:26:28:43:3f:5e:5f:2e:4d:5b:10:ed:fb:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 26 00:00:00 2023 GMT
Not After : Aug 30 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:c8:da:c2:87:82:15:8e:56:92:22:f1:0e:
09:d3:b3:22:92:2e:01:6d:28:b7:21:fc:35:14:ff:
d8:70:cb:35:bc:8c:e6:21:56:5d:45:2a:10:b2:a0:
f4:a4:e8:74:2a:e6:c3:04:8d:a9:c7:00:dd:1f:e4:
48:d7:ee:1a:e6:e2:87:de:70:c0:0e:6e:d7:c7:0b:
43:29:70:38:85:c9:f7:8d:08:3a:94:71:3e:84:50:
50:aa:ce:7c:fe:95:f1:4f:2b:b8:42:84:27:6a:98:
d1:60:0f:74:3c:15:67:f2:d6:7e:16:e8:0b:73:68:
c8:53:8a:5d:f5:ed:e4:85:ae:30:35:f0:bd:95:e0:
b3:e9:be:aa:ff:90:bf:81:87:b5:f8:ff:84:50:10:
92:9f:c4:b4:99:9e:a6:aa:cf:26:d9:47:4d:79:e3:
7b:72:c0:0e:bf:a0:b0:eb:52:2a:eb:31:94:40:5e:
76:1b:92:bc:de:62:94:4c:a9:8e:9d:74:98:7b:dc:
d1:7b:b5:06:71:ad:93:dc:00:fe:08:20:c2:e4:55:
79:3d:92:0a:27:f1:25:0f:1f:81:7b:d9:76:23:f2:
b1:be:02:54:d1:c8:9d:b5:6d:dc:fc:67:38:6a:29:
30:d0:5c:6a:b5:47:46:3b:2f:b4:14:1f:de:e9:e2:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:F1:43:A7:46:92:7D:A6:E1:0E:34:88:B2:9C:D9:C0:45:1F:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ceb6efdf-1add-4b55-a01b-c61f29b73000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:57:cf:10:06:d2:c0:85:41:21:da:cb:10:09:17:a2:b5:4e:
8d:6c:aa:f2:3e:fb:62:5b:7c:b2:ef:77:f8:35:7e:11:47:61:
9a:26:d8:ec:5b:f7:9b:15:cb:a4:68:dc:79:40:74:a1:a8:28:
9e:21:e8:72:35:73:50:cb:f5:72:c9:86:ac:b4:ee:f5:ff:40:
d3:a6:a2:0d:93:de:c5:c4:fd:c8:da:94:ce:0d:71:29:91:8b:
6b:c2:5e:5f:ef:cc:c2:e0:34:69:3a:16:43:24:ae:b6:eb:d8:
db:33:d8:99:d8:d1:fb:07:34:1f:7b:bc:eb:4b:31:fa:3d:c8:
bc:48:71:ca:a8:29:bd:97:a9:94:4e:9d:8c:99:e7:79:7b:6f:
6f:c4:6d:2d:58:f4:fd:3c:6e:43:96:a7:56:d0:61:c7:d4:71:
81:b7:86:0c:40:18:e7:b4:66:6e:ad:14:24:db:c7:fd:82:4f:
43:4f:b1:69:30:a6:a8:ca:b4:4c:f6:aa:1a:25:f4:22:cb:ee:
2c:dc:8f:2c:4e:c7:d8:82:ed:7b:9e:78:f4:d9:33:5b:b3:ac:
22:f3:5a:e5:54:28:7c:99:75:73:88:a4:ca:d6:64:18:47:62:
08:46:48:95:9e:1b:5e:45:67:63:4c:55:b5:31:bd:ff:af:ac:
d6:3a:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:53:40 2025 by rpki-client