Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d22e2567-d695-47df-ba07-6d76d219f505.roa
File: d22e2567-d695-47df-ba07-6d76d219f505.roa (raw, json)
Hash identifier: XTXQSIriB02+9zfpPBoiaNwcEGHVqVZLIeLiuyQQDWQ=
Subject key identifier: 6A:AE:5E:34:4F:8F:AC:C9:DB:1D:BF:37:22:5D:0D:2D:C1:5A:9B:57
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BCD3F75BDDCAF6A762D18D70E90BB39014D7286
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d22e2567-d695-47df-ba07-6d76d219f505.roa
Signing time: Sat 26 Aug 2023 00:00:00 +0000
ROA not before: Sat 26 Aug 2023 00:00:00 +0000
ROA not after: Sat 30 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cd:3f:75:bd:dc:af:6a:76:2d:18:d7:0e:90:bb:39:01:4d:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 26 00:00:00 2023 GMT
Not After : Sep 30 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:ac:9b:07:f6:3b:23:17:b9:cf:2c:07:2a:
f0:50:20:b6:5d:99:54:0f:49:48:e8:06:54:03:13:
3a:fc:a6:95:08:df:74:7c:03:62:7d:0e:7e:03:d5:
73:99:76:b4:28:4b:88:51:fc:d6:36:12:e5:7e:3e:
9f:a9:14:e7:43:ff:93:11:66:95:a1:96:bc:48:75:
73:87:fd:d3:de:92:1f:1a:3d:00:74:c7:0e:d4:d2:
5f:17:f3:b9:e9:f4:4c:98:5d:93:e2:a4:47:82:76:
b8:7f:31:b1:c5:3f:33:9f:c2:95:11:a4:27:de:29:
00:29:e9:38:ed:2a:5a:b3:02:7e:27:4d:df:65:fb:
a9:d5:b7:f6:47:15:de:6f:ea:24:f6:08:3b:01:b3:
aa:00:1e:8d:df:5a:2c:98:dd:5e:9b:11:46:6c:ad:
0d:69:12:9a:4f:70:3c:10:7a:5f:04:da:4e:fe:1e:
55:d8:9f:63:77:7a:60:eb:d9:bd:ef:15:46:87:1e:
87:83:53:78:4b:7c:6f:7c:c6:75:51:62:b7:f5:69:
e9:05:58:5d:bb:3b:f1:58:4f:56:1b:b0:db:65:83:
23:43:96:57:79:84:63:36:28:03:70:ee:d1:8e:db:
a5:b8:17:bb:91:f5:ff:5a:f7:89:16:64:db:f6:4b:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:5E:34:4F:8F:AC:C9:DB:1D:BF:37:22:5D:0D:2D:C1:5A:9B:57
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d22e2567-d695-47df-ba07-6d76d219f505.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:49:c4:17:f9:80:5a:6b:f1:5a:3c:45:3d:26:d0:c2:b2:75:
a0:0b:51:70:e0:4f:d4:a9:3b:52:7f:17:9f:74:45:a6:2b:bd:
0e:8d:0e:fa:8f:20:1d:b4:81:01:e8:04:86:f9:bb:ed:58:19:
b3:62:db:95:9b:31:5f:6d:1e:63:02:06:d5:81:07:92:2b:5a:
bf:77:5d:26:83:78:25:ab:aa:5f:78:97:52:f1:57:54:21:7b:
32:a2:c3:3f:a3:b9:b4:a4:20:03:90:9d:0a:5c:9f:3a:88:93:
73:0c:14:19:58:64:c0:f0:1e:40:06:d3:3d:23:47:b6:00:d8:
df:4b:4d:81:43:fa:aa:7d:1f:55:66:1c:b5:23:f1:39:7a:5d:
8e:c3:1b:13:dd:4b:a2:22:df:a5:ce:47:71:15:ee:3b:5b:a9:
0c:d3:8e:fc:23:0b:52:cf:3d:00:98:41:07:7f:5c:6a:48:ba:
30:77:80:7d:cb:8b:ac:72:1e:55:28:fb:1e:e4:96:1a:40:11:
3f:35:8f:79:71:7f:95:9b:c7:cd:94:15:32:59:23:14:48:fa:
f0:25:55:9e:95:80:4f:44:62:69:5d:fb:16:01:62:c6:07:30:
25:73:73:79:12:e7:f5:dc:b5:2a:63:d6:4f:e9:0f:04:59:7e:
19:cf:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:48 2025 by rpki-client