Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d80747a5-9358-42eb-898c-18fa2a29f20f.roa
File: d80747a5-9358-42eb-898c-18fa2a29f20f.roa (raw, json)
Hash identifier: /VhQ4WghTkvPHQ6EOahELCVDyJmBoBWX9dmlLMUXfEM=
Subject key identifier: 53:36:AE:F0:25:73:CA:D0:41:1A:8E:4C:20:C6:B4:2F:8B:D0:4A:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25C34D797882B14F9DF06B25578376860B4733
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d80747a5-9358-42eb-898c-18fa2a29f20f.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c3:4d:79:78:82:b1:4f:9d:f0:6b:25:57:83:76:86:0b:47:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:8c:09:4a:6e:76:d4:fa:45:1c:1e:d4:b7:
eb:56:64:ca:b5:ed:10:64:1f:49:6c:4e:52:d2:24:
20:df:bd:6e:9f:be:dd:ca:cd:62:24:e0:da:07:a5:
45:d8:57:73:47:2e:a3:0c:33:84:81:51:19:cb:62:
c5:ad:a4:e4:94:90:d2:57:fb:02:e9:a3:16:14:8b:
ef:b2:0f:7b:31:54:a2:37:59:06:d8:e2:37:b3:20:
cd:53:be:71:07:11:aa:22:4d:6c:4b:61:3e:3d:e0:
9d:00:72:29:31:45:48:9e:3d:bd:b2:7c:8c:8c:37:
19:da:64:55:f6:5c:16:da:6b:e8:76:09:da:48:91:
dc:40:2d:2d:20:fa:90:6b:f7:08:9d:7c:69:af:12:
26:81:ba:82:eb:13:36:09:04:2f:17:56:27:40:93:
96:d7:23:3e:6d:9f:ec:bf:10:7a:81:7b:32:4e:55:
20:6f:3e:62:88:a7:90:39:35:52:ad:dd:38:dc:70:
a8:b9:75:9e:1a:60:41:d1:63:aa:de:cf:12:92:59:
f1:50:c0:64:8b:bc:f2:e4:d3:86:fb:fc:e8:b0:3e:
21:a1:ae:c0:a1:64:71:f9:93:d3:0b:2c:6a:71:72:
c8:7d:2c:96:44:c8:7b:35:5b:32:2b:0a:88:3f:30:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:AE:F0:25:73:CA:D0:41:1A:8E:4C:20:C6:B4:2F:8B:D0:4A:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d80747a5-9358-42eb-898c-18fa2a29f20f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:80:77:19:44:dd:3e:e7:fb:f6:73:df:62:aa:56:fd:f8:3d:
e2:e6:7d:54:6d:b9:68:76:3f:82:9a:73:e5:c7:58:b6:32:d6:
c4:cd:3d:19:6d:c5:c2:25:2d:31:d4:83:eb:79:2f:25:59:f7:
37:ea:9d:33:97:5e:cd:8b:1c:67:73:12:9f:c3:a0:5f:a7:0c:
c4:86:bf:46:4c:7b:5e:2f:53:90:fc:5e:56:f9:9c:41:1b:66:
d7:bb:d6:c0:bd:1c:25:89:cd:6c:19:df:e2:d2:78:d3:d2:3b:
99:df:87:6f:88:24:46:bf:65:30:60:c5:8b:f2:6a:ca:b1:7e:
4c:7f:af:cb:d8:dd:fa:5c:75:fe:6d:d2:be:27:d6:fb:56:3f:
d6:56:8d:53:9a:cb:5c:f1:89:fb:b1:21:c7:26:9c:04:b4:60:
83:57:80:05:4b:b9:33:45:15:cf:d3:ce:21:c7:b4:f3:1d:94:
bd:b7:7d:13:79:8a:a5:4d:e8:85:0a:c2:3d:37:71:d0:41:76:
da:e5:b5:c9:38:78:71:76:80:b5:85:b5:34:e5:16:11:5b:b1:
c7:43:44:10:b6:8e:f0:d0:ad:b6:29:2e:6b:24:eb:3a:61:ba:
f0:18:8c:71:0b:78:ef:fa:ad:52:29:ed:33:ce:98:14:44:fb:
de:a0:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:00:36 2025 by rpki-client