Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e08d7d97-28ee-46f4-8fa8-8964b586fbf0.roa
File: e08d7d97-28ee-46f4-8fa8-8964b586fbf0.roa (raw, json)
Hash identifier: o3l1+l0SBD+yuSQsq5cIc8xYdGfpRuenB0GT0KQy3qY=
Subject key identifier: 6D:48:81:CE:DF:ED:95:AF:E0:5B:A1:F5:CC:1C:C9:EA:CD:E6:72:0E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4F243B86DFC04DDC5F6F001E2CE7A77B8F2D9877
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e08d7d97-28ee-46f4-8fa8-8964b586fbf0.roa
Signing time: Sat 16 Sep 2023 00:00:00 +0000
ROA not before: Sat 16 Sep 2023 00:00:00 +0000
ROA not after: Sat 21 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:24:3b:86:df:c0:4d:dc:5f:6f:00:1e:2c:e7:a7:7b:8f:2d:98:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 16 00:00:00 2023 GMT
Not After : Oct 21 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:55:35:6b:d9:dc:c8:8f:4a:57:46:89:c7:
c1:41:be:4d:4f:89:e7:78:d4:96:e4:fc:29:a2:10:
18:3f:ef:3c:52:02:3b:2a:d3:72:79:2d:2c:44:14:
5d:d5:0c:96:ee:90:f3:0a:77:ef:73:eb:dc:2e:56:
bc:ca:16:5d:c5:58:f4:77:d5:75:4c:6d:78:28:a9:
b2:81:ad:b2:6d:dd:e3:65:90:0a:fd:c5:53:99:51:
7b:7f:01:0d:53:25:cd:b0:f6:ee:29:c0:70:de:d8:
dc:39:34:88:66:a0:88:41:75:78:e2:0f:ff:98:5c:
e9:57:4b:c3:fb:13:ee:74:1f:03:6e:ec:6a:53:f7:
2d:f5:c7:66:a3:28:b0:60:0b:02:3b:3b:24:dc:aa:
e6:8f:4b:a1:1e:33:46:8f:7c:5e:35:56:ed:4f:be:
d9:7b:ef:4e:e0:a9:81:15:b7:2a:fb:fc:0a:c7:ab:
3a:dd:b9:cf:72:92:b5:1a:56:c6:67:b3:d9:67:de:
64:23:98:18:9c:c8:24:a6:51:43:d1:0d:9c:bf:fb:
df:df:c2:4d:df:45:ee:b0:cd:6d:d0:f0:3c:e1:8c:
65:89:ac:49:6c:93:ba:f8:55:1c:3e:70:8a:22:7d:
95:5b:b7:6b:50:74:7d:49:db:1b:ec:e3:b5:70:b7:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:81:CE:DF:ED:95:AF:E0:5B:A1:F5:CC:1C:C9:EA:CD:E6:72:0E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e08d7d97-28ee-46f4-8fa8-8964b586fbf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e2:5b:ca:1c:66:a1:dc:3f:85:4d:f2:8a:ee:f1:ee:4c:3a:
17:5e:de:ea:2b:9f:2c:de:fc:e0:de:20:d2:dc:0f:78:ff:23:
c6:37:4e:ec:0a:bb:bc:c4:10:d7:71:f4:26:86:51:70:f4:49:
f2:7b:00:d8:cb:c8:07:58:f1:97:e5:70:a1:c7:1c:9c:54:b7:
11:e2:33:66:0c:ce:50:c9:ce:12:54:90:91:f5:d8:32:6a:4f:
7b:6a:03:6e:3f:06:64:df:39:c0:b2:2b:7c:ec:38:db:db:8c:
9b:35:17:f8:f3:9e:ff:43:b1:b7:ae:a2:e0:cb:85:2c:2f:19:
9c:a8:ca:99:5e:c2:c7:07:57:3d:ef:0f:5e:35:39:cd:89:a3:
23:ba:10:9d:23:c4:ca:86:b2:38:72:f9:9b:a2:97:07:7d:49:
a1:1e:10:b7:f7:ee:4a:7e:4b:59:f7:53:5a:0f:5d:df:1d:e1:
87:e4:3c:76:3c:8b:56:65:56:7c:a0:c9:07:8e:07:ed:ec:bf:
e7:3f:49:72:ea:f7:8b:29:fe:b3:43:cc:74:fd:94:4b:87:95:
23:f2:78:82:ca:24:f6:13:a5:1c:19:95:b7:a5:8d:a2:aa:b6:
83:9d:6a:6f:5a:e6:8f:d1:80:3b:66:3a:ac:26:25:b0:61:c8:
b1:e1:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:52:49 2025 by rpki-client