Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e94921f7-f50c-46fc-a2e1-3de1a364e264.roa
File: e94921f7-f50c-46fc-a2e1-3de1a364e264.roa (raw, json)
Hash identifier: 8Kwfwyb+O/h6c5HYehE/CyiSY1QXbk/9c+jfLYO4UlA=
Subject key identifier: 45:28:A5:75:AE:A5:EC:55:32:54:98:CD:31:3E:95:6D:1E:12:D8:F0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 127244E5AF09E8AC36F5B89072F98D469C81A95B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e94921f7-f50c-46fc-a2e1-3de1a364e264.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:72:44:e5:af:09:e8:ac:36:f5:b8:90:72:f9:8d:46:9c:81:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:21:73:29:dd:dc:18:39:60:73:7e:87:e4:
60:7d:6a:aa:ae:11:db:8b:34:23:f8:b8:e0:c8:96:
28:12:74:2f:ec:cd:35:12:12:04:74:73:87:e9:2d:
17:5b:81:26:86:96:00:4a:b7:b0:03:c9:a0:48:2b:
4e:f8:c8:f8:9f:87:7a:92:ae:b4:2f:ec:a1:fc:4d:
a3:a9:fd:25:2f:d7:d8:59:4f:e9:e4:dd:71:75:ef:
01:56:ae:7d:3d:d8:59:a5:38:3d:a5:a2:1b:3b:60:
4f:54:aa:43:dd:24:74:3c:24:7d:31:a6:c0:d9:32:
20:aa:0a:a4:ba:2b:5a:ef:df:10:39:37:e3:e6:b8:
87:49:09:2a:a6:8e:02:7e:36:9f:4a:1b:ed:78:8e:
95:40:76:d6:17:c0:e9:e9:4c:1a:88:5f:d0:cb:e4:
27:87:6a:e8:62:33:4a:7b:8e:64:75:b1:44:ed:48:
cd:5c:c8:17:76:70:e2:59:dd:09:61:41:ff:b0:1f:
0e:16:e0:5d:4e:50:91:d7:4f:0f:9a:5b:ac:73:41:
ab:83:cd:c1:a8:e5:24:6e:34:b7:8e:d6:59:95:30:
b9:fe:67:a7:74:5a:3b:d4:ab:e1:2f:55:95:cd:55:
21:c8:2b:95:87:bd:cc:d1:0c:07:02:39:d3:28:8c:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:A5:75:AE:A5:EC:55:32:54:98:CD:31:3E:95:6D:1E:12:D8:F0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e94921f7-f50c-46fc-a2e1-3de1a364e264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a7:66:03:b8:21:db:1c:7c:f1:f0:f5:0f:22:60:61:5d:0f:
04:94:29:86:96:ae:4d:75:45:46:24:fa:10:2b:42:fc:a2:13:
53:f1:40:3b:ed:eb:98:97:83:e9:ec:87:73:03:4e:44:65:6c:
89:dc:81:4f:20:63:dd:79:e0:5f:b5:29:b5:af:91:cf:11:9a:
97:c4:05:95:1f:78:0f:96:69:00:ff:2a:d2:f6:91:27:74:b3:
b8:cf:19:22:9c:1f:f0:9b:ec:3c:ae:ab:6f:ea:53:83:3f:a5:
f9:c4:f3:21:1c:80:0d:e3:cf:cc:5d:9a:d3:81:0f:a4:af:c1:
0d:23:50:c9:46:7d:fa:f7:57:47:49:79:50:d8:fe:db:1a:88:
b4:9b:fb:d8:ed:3d:fa:26:6a:9f:9b:1a:81:18:b1:7b:cb:c7:
68:5f:94:da:3d:5a:85:c5:2e:36:13:ae:11:1d:34:dc:ea:f4:
e2:e7:ae:da:fe:dc:fe:d5:7a:dc:ab:64:36:cf:05:12:11:5a:
dc:14:2f:b1:b2:83:83:61:91:e5:db:b1:8c:a9:26:c5:05:2b:
9b:ca:95:e3:7a:ea:66:e4:30:ad:f2:c3:01:e8:d7:4d:bc:f1:
70:8e:98:20:2d:6b:04:be:9e:68:7f:c8:88:35:ae:47:01:fb:
39:d0:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:07:57 2025 by rpki-client