Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f44f6aaf-655c-42b8-a6b4-2a269c158599.roa
File: f44f6aaf-655c-42b8-a6b4-2a269c158599.roa (raw, json)
Hash identifier: ZXVeChbZYa0tdG5VbmlcPxPAGi5Oa/4j7O4IPe8YZlk=
Subject key identifier: 71:01:19:E6:ED:EF:9C:2F:07:EB:EC:B1:90:0A:4E:EB:E7:4D:66:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C2C0BC01FD9BE14D7D65CCEE4BD4B6174AC5ECA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f44f6aaf-655c-42b8-a6b4-2a269c158599.roa
Signing time: Wed 19 Jul 2023 00:00:00 +0000
ROA not before: Wed 19 Jul 2023 00:00:00 +0000
ROA not after: Wed 23 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2c:0b:c0:1f:d9:be:14:d7:d6:5c:ce:e4:bd:4b:61:74:ac:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 19 00:00:00 2023 GMT
Not After : Aug 23 23:59:59 2023 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:d3:3c:ed:e9:56:86:d1:b1:e1:9b:e2:bf:
4f:da:01:ad:b6:1f:f7:ba:6d:16:af:34:c2:c5:a7:
9f:71:0c:9e:4b:bb:88:6f:5f:91:ad:59:17:36:28:
da:af:e2:12:76:00:82:0a:2b:d8:49:7d:f7:05:09:
d4:86:80:ed:1a:bc:0d:7c:ab:35:86:b1:ee:8d:00:
9f:b7:fa:22:78:1b:a6:15:b1:f4:4d:29:b9:3f:f1:
fb:60:06:68:86:8d:4b:c3:4e:53:4c:d3:f8:be:5d:
53:4f:66:7b:1d:96:83:01:1a:46:25:4c:d5:e0:93:
23:2b:d1:57:17:f1:95:ce:9a:ab:2e:07:9d:94:af:
97:dc:45:6d:ff:0e:12:41:a5:62:71:cc:6f:fb:42:
99:f1:7b:b5:02:5e:75:2f:9a:2b:7e:d7:7f:88:37:
51:d2:b1:7e:b5:fe:8b:e6:d2:33:92:22:ce:3f:cf:
c9:fd:05:6a:61:f9:aa:f5:9b:b1:f2:b4:0c:a9:ca:
49:06:4e:34:d6:e4:0f:61:bc:e2:5f:bc:8a:3b:16:
fb:49:fa:3f:b9:d9:c1:f5:e8:1f:95:41:4c:e7:fd:
34:06:75:38:68:a2:18:5c:8d:8f:50:9d:74:7d:50:
8b:2f:1b:81:c7:1e:a9:fb:d5:11:39:36:de:0b:56:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:01:19:E6:ED:EF:9C:2F:07:EB:EC:B1:90:0A:4E:EB:E7:4D:66:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f44f6aaf-655c-42b8-a6b4-2a269c158599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8d:91:61:3b:25:74:4e:6c:b1:83:1d:6f:11:60:1d:11:65:
00:21:2b:12:4b:ac:0e:39:6f:04:0d:23:06:94:0a:a8:2b:28:
da:2d:78:34:8a:46:c9:4d:79:6d:ca:78:0c:0a:59:05:99:a1:
2c:ff:33:ff:dd:6e:03:fb:98:3d:de:8e:a0:a0:09:47:f4:69:
b1:fd:50:04:ff:43:33:a9:6c:04:6b:66:4e:83:ab:2d:ca:79:
c5:c3:95:10:1b:92:5a:22:77:90:a6:a7:98:b1:64:c0:97:f3:
14:3b:e3:af:69:14:74:dd:e9:06:9f:cb:c1:50:37:cb:cb:1d:
bd:70:93:12:ba:91:60:c9:ce:bc:97:04:dd:6f:f1:84:3e:01:
46:94:b6:5d:b1:37:5c:55:0b:73:b3:6b:8a:36:ac:e5:04:71:
61:81:ac:8b:3e:2a:bf:eb:ef:9b:80:82:16:6a:e4:2c:a2:4e:
ee:ea:e5:8c:83:f3:e0:8e:25:2a:f9:78:68:7b:0a:e1:7d:e8:
37:d7:b5:87:50:e3:5b:ca:b6:cf:0d:48:42:ab:55:a1:cc:f0:
67:10:10:77:f6:cc:1c:c0:9c:4b:87:60:17:aa:84:48:14:bf:
d4:c4:68:93:a6:17:85:9e:d0:cf:19:80:56:79:88:98:83:86:
12:06:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 07:01:28 2025 by rpki-client