Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4e1ad16-af36-4315-92b3-2dc4d9c71ce5.roa
File: d4e1ad16-af36-4315-92b3-2dc4d9c71ce5.roa (raw, json)
Hash identifier: oEntM1qk4w4Y0Az+fbFgQtY61CDCY5iHPVdvN84GxIw=
Subject key identifier: E6:C9:01:31:8F:CD:BB:10:DC:18:42:41:4C:06:8D:FF:A8:35:BF:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 772EAD8B2453897763B0697B25164AF98660D0F9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4e1ad16-af36-4315-92b3-2dc4d9c71ce5.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2e:ad:8b:24:53:89:77:63:b0:69:7b:25:16:4a:f9:86:60:d0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:2b:4c:d5:ba:ae:1f:d6:42:94:20:6e:0e:
00:1b:a6:c0:7f:10:c8:88:28:33:e0:25:d8:05:a6:
14:ba:bd:5b:29:4d:22:ff:11:1c:1d:ea:34:8d:14:
26:40:bd:67:26:59:b3:58:c4:80:5b:f5:86:9d:76:
2b:03:dc:d2:c9:ff:73:b0:85:09:56:3b:31:82:9d:
c9:00:97:84:12:a0:99:d9:aa:eb:0f:62:51:fb:d3:
6b:11:34:32:6c:14:a0:99:64:9b:e7:2d:3e:ae:ee:
74:ab:f7:94:df:4d:ac:bb:b7:38:ea:36:c4:0b:b8:
ee:2e:0d:89:fc:17:b9:dd:b5:82:60:cb:84:fc:0d:
c0:ba:cf:43:85:3d:a8:97:bb:f7:77:c5:af:73:95:
a8:c5:33:88:59:19:54:dd:9d:37:bf:d8:2d:cd:e4:
4c:94:db:19:57:88:3c:5d:7f:5d:73:46:7b:ea:4d:
24:dc:a1:4e:05:98:0d:46:d1:06:33:23:59:0b:66:
4c:d4:f1:13:28:08:88:d9:c0:ed:7f:88:7e:54:a9:
32:98:c7:8d:14:68:96:94:f2:a4:3e:68:2f:06:ff:
75:7d:93:d3:14:50:b9:b5:58:f2:82:f9:a9:88:71:
c0:26:7f:bb:65:7d:fe:9a:eb:0a:b5:0d:ee:ba:d1:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:01:31:8F:CD:BB:10:DC:18:42:41:4C:06:8D:FF:A8:35:BF:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4e1ad16-af36-4315-92b3-2dc4d9c71ce5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3a:52:88:34:e7:14:42:2f:6e:fe:fd:fc:3d:4b:21:dd:92:
9a:aa:ce:fc:78:e3:17:66:17:2c:ca:0e:87:ce:c4:8a:ff:62:
3d:45:bd:09:8c:9b:45:75:99:d3:f6:a0:71:3c:60:1a:76:73:
f8:f4:e3:d1:29:69:83:98:9b:71:71:40:75:45:3b:1c:02:c4:
01:58:b9:d9:4b:1f:96:d2:20:00:55:70:f2:5a:25:87:e2:b7:
bb:31:9d:1b:c8:19:59:e6:0d:d6:16:16:b1:6a:67:6e:f6:f5:
85:db:a2:0a:f2:14:ac:79:99:b1:1b:1e:21:38:e8:d8:d4:bb:
5e:eb:e5:66:f6:50:d2:b0:71:11:ff:10:58:5d:5c:d8:4c:9f:
a3:f7:41:97:d1:67:3d:28:00:4b:73:9e:20:d9:f5:db:e3:82:
63:e3:9b:cc:ef:82:15:b3:6f:65:75:0e:cc:52:ed:a1:16:30:
9a:3e:fb:89:88:d6:c0:d4:7b:3f:ec:01:95:7f:d2:75:77:cc:
4e:3f:69:ad:c8:08:cf:db:5e:1d:21:dd:22:f8:9b:80:d8:c9:
5e:87:1f:f8:5a:36:0f:62:74:c4:a6:2e:a5:2d:b5:83:21:5c:
cc:bf:9a:9f:8a:77:5c:ce:82:81:03:e9:bb:81:5f:fe:9c:16:
d8:30:01:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:00:25 2025 by rpki-client