Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb1134b9-a62a-45b0-89b5-4d21e1ed4219.roa
File: eb1134b9-a62a-45b0-89b5-4d21e1ed4219.roa (raw, json)
Hash identifier: y+J93dkatxktLVJFQsP5VqMkNC+ERc7hI3thsLhy7Ho=
Subject key identifier: FF:36:C8:55:E6:C7:2C:AD:FA:C0:75:9C:23:12:1B:7C:2F:96:BA:97
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3A74DD693FE1543BEAFE4D2F92AFD7111556D8DB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb1134b9-a62a-45b0-89b5-4d21e1ed4219.roa
Signing time: Sun 23 Jul 2023 00:00:00 +0000
ROA not before: Sun 23 Jul 2023 00:00:00 +0000
ROA not after: Sun 27 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:74:dd:69:3f:e1:54:3b:ea:fe:4d:2f:92:af:d7:11:15:56:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 23 00:00:00 2023 GMT
Not After : Aug 27 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:be:f3:89:f7:56:00:38:b4:39:2f:0a:57:
a4:3b:1b:d8:f5:49:36:39:af:6a:a6:6c:5a:a4:ca:
cf:04:bd:ed:4d:7e:61:43:80:a7:05:65:c3:31:b6:
c0:a7:02:ff:bc:2f:6b:bb:25:d5:44:cf:a3:85:f5:
8d:20:a6:da:31:89:25:73:75:68:12:33:ab:48:b6:
0d:4a:fc:b7:f9:22:c0:66:d1:eb:2c:17:8f:26:17:
b4:7b:4b:a1:24:52:09:06:99:b2:ac:6f:8e:83:57:
ea:9e:0b:13:e3:b8:28:43:fd:72:c0:d8:01:40:fe:
f2:8c:42:11:cd:33:d6:03:53:8a:d4:e3:7e:da:e9:
0e:73:fa:2d:a9:54:ff:50:97:c0:f0:83:3a:7d:b7:
66:58:86:4f:c1:4f:d1:39:00:d0:5d:89:c0:e2:ad:
87:da:62:20:26:20:cb:0c:bc:49:f5:e0:63:8f:4f:
79:18:9a:a2:e5:5b:32:8b:85:a6:f1:0e:a3:20:a8:
3b:80:90:2b:ea:65:c5:c6:eb:70:ff:b6:a2:ab:7a:
61:68:28:8a:dc:9c:2c:fa:e8:6e:50:40:85:b3:20:
dd:9c:61:c7:61:fd:fb:c5:50:49:69:84:e9:6c:0a:
ec:ad:d9:4b:bb:13:6d:71:6f:86:a1:ee:b2:49:1c:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:36:C8:55:E6:C7:2C:AD:FA:C0:75:9C:23:12:1B:7C:2F:96:BA:97
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb1134b9-a62a-45b0-89b5-4d21e1ed4219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:b0:e5:f2:e8:ed:fe:ec:68:8e:84:0c:6e:89:06:9c:3d:
37:49:ed:20:a5:58:dc:8d:4b:f6:9d:5e:df:97:ec:ab:e4:e3:
6f:e8:30:20:59:17:72:ab:ca:d2:28:80:28:b2:de:7c:44:56:
0a:c4:b1:69:47:3a:88:e3:d7:07:26:1b:2b:9b:43:0b:68:8a:
a3:57:29:20:fb:cb:5e:73:d9:46:ae:76:fb:b9:ba:8a:41:ab:
5a:3c:61:4f:42:e6:3f:50:07:ea:27:b5:00:5b:22:cf:b9:12:
d6:ae:bb:2b:b3:7c:74:f4:5e:4e:78:35:7c:8e:88:13:a2:94:
67:e9:eb:f1:07:ca:b9:48:72:76:29:d1:5f:bd:b9:76:aa:45:
3f:52:b2:6d:37:63:79:ab:cf:5c:95:4b:6e:9c:0a:87:b6:ab:
aa:0d:a9:51:e9:45:45:b7:7c:fa:31:ee:d7:2d:d5:fd:e2:11:
df:70:03:e6:b1:5f:bd:c6:fa:b7:e3:1c:de:45:e1:76:2b:1f:
a0:53:c1:60:9e:a0:b7:10:6c:c3:fe:87:0c:2b:d0:0c:e9:b0:
67:e3:7e:20:b8:3a:aa:73:46:34:27:43:88:09:d9:f0:3e:fd:
a7:e6:28:93:29:07:35:2c:af:89:ff:77:45:7e:1f:fc:11:f3:
ff:69:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:02:19 2025 by rpki-client