Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e544c19d-d4c5-435b-9c36-0a13e95c47c4.roa
File: e544c19d-d4c5-435b-9c36-0a13e95c47c4.roa (raw, json)
Hash identifier: QK2sdJIKHYeJSO2YZygxFDsuQcxzx+7l8jHtzzfyZ1I=
Subject key identifier: 8E:E7:4E:36:95:76:4C:03:0C:6F:0E:13:5B:11:25:2D:0B:94:C0:40
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 50AF2EF42CAE92780BCFA65AC24955D7FA549641
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e544c19d-d4c5-435b-9c36-0a13e95c47c4.roa
Signing time: Mon 19 Jun 2023 00:00:00 +0000
ROA not before: Mon 19 Jun 2023 00:00:00 +0000
ROA not after: Mon 24 Jul 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:af:2e:f4:2c:ae:92:78:0b:cf:a6:5a:c2:49:55:d7:fa:54:96:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 19 00:00:00 2023 GMT
Not After : Jul 24 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:f4:ad:81:06:b7:0a:21:00:a2:bd:8d:26:
49:6f:82:40:91:39:e6:26:18:44:46:19:77:00:3f:
ce:66:d7:90:a1:4d:4b:c1:31:98:e6:22:2b:26:f6:
94:29:27:8c:5d:84:87:64:0c:02:cc:38:d0:e0:61:
11:3b:4a:1e:ab:69:4d:6f:1e:67:84:b4:40:78:67:
6f:5a:76:5c:de:8b:d0:48:29:df:56:3e:0b:d4:4e:
3f:5d:61:76:f5:22:0a:d9:41:12:a6:2d:6e:fd:18:
fb:f0:0e:d5:a1:f4:6c:98:67:2b:6a:c5:d2:30:3a:
56:42:9d:2b:05:39:74:d6:85:de:ec:d8:f4:61:ac:
09:0c:6e:f7:1c:b2:70:47:53:95:6c:88:6e:7f:dc:
86:ac:b9:99:85:9f:eb:cd:ec:fc:72:d8:d4:7e:35:
9f:39:78:0e:77:ae:a2:74:c8:e8:8d:f9:4d:1b:d6:
a0:e9:67:79:33:15:89:66:43:2b:ec:47:6b:48:71:
30:9e:d4:38:0a:21:81:ef:b4:bf:1c:19:dc:d7:d3:
cd:b4:5b:b0:d2:4e:eb:b2:b4:7b:f3:4c:81:dd:84:
89:48:a4:3a:54:ce:3e:e9:93:28:62:94:cc:7e:8a:
fd:b6:b9:11:fc:87:f4:d0:da:53:04:cf:dc:a2:ca:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:4E:36:95:76:4C:03:0C:6F:0E:13:5B:11:25:2D:0B:94:C0:40
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e544c19d-d4c5-435b-9c36-0a13e95c47c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cf:d0:76:a8:19:64:90:0d:22:04:d7:18:72:88:57:64:d4:
e2:74:d0:4e:d9:3f:ce:42:e6:e3:76:ef:5e:6e:e6:40:3c:82:
6f:be:80:d9:88:0f:e0:fe:4f:b7:9f:0a:57:94:1a:b7:08:e0:
d6:c5:30:28:f3:6e:1c:0a:2d:2a:cf:52:b4:5f:e2:22:7f:01:
73:69:0c:c5:b4:2d:f0:67:3d:00:74:b3:46:b8:1c:ca:24:b3:
5e:63:d6:7b:99:3c:15:1a:31:ce:dc:27:07:dd:c5:6f:90:fb:
35:4a:b2:af:88:03:9a:01:12:75:62:6d:05:fd:35:40:a0:83:
67:47:f0:f7:49:84:90:a3:06:58:d4:a3:cf:cb:5c:23:78:a7:
fe:ad:af:e7:1e:aa:44:41:c6:ef:63:ba:3a:cc:a8:f0:55:5e:
f5:51:6a:75:48:45:51:ff:74:4b:a7:74:ce:7c:7b:24:1b:eb:
49:d0:fd:0d:ce:6a:8f:6c:ed:79:23:e1:d3:be:ec:f6:8b:29:
1c:73:5c:7d:b7:ea:87:4f:ed:7d:c8:c4:b8:5e:03:77:2f:95:
72:83:df:5c:9a:55:8d:51:c6:5d:96:c8:a7:f7:a3:0b:1f:e5:
1d:36:ee:dc:33:99:2c:f1:7d:b3:e0:0e:ed:6c:26:44:39:19:
37:06:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:58:42 2025 by rpki-client