Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f59e3388-09f9-41f9-bfd2-29c5f35aaf58.roa
File: f59e3388-09f9-41f9-bfd2-29c5f35aaf58.roa (raw, json)
Hash identifier: KlqaACLKatUmMZcC8ZY+cmWhBh20herRfO2f4pUBO28=
Subject key identifier: 95:AD:3B:76:F0:31:BE:BB:60:0D:CF:76:34:BD:A8:BA:C6:53:90:1A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1F6EFB964D023007F07FCF3775ACED181BF134F9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f59e3388-09f9-41f9-bfd2-29c5f35aaf58.roa
Signing time: Sat 26 Oct 2024 00:00:00 +0000
ROA not before: Sat 26 Oct 2024 00:00:00 +0000
ROA not after: Sat 30 Nov 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6e:fb:96:4d:02:30:07:f0:7f:cf:37:75:ac:ed:18:1b:f1:34:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 26 00:00:00 2024 GMT
Not After : Nov 30 23:59:59 2024 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:d2:e0:5b:dc:8e:10:29:3b:8d:d8:17:25:
01:9d:7e:3c:b0:bc:a7:70:2a:8b:d9:fa:ec:9d:76:
b4:4a:24:71:3c:a6:76:83:ae:b4:70:a0:24:de:be:
95:74:ca:c1:ac:4a:4b:9d:cf:04:1e:14:5e:85:d1:
e9:63:b3:4b:93:29:5e:75:ae:58:88:90:dc:28:be:
f8:5c:3c:4c:11:d7:c9:99:c9:09:6a:3b:a3:0f:50:
af:8d:3e:e9:52:4d:42:1d:aa:b4:dd:b4:ee:03:df:
aa:4e:d4:0c:be:1a:ba:0f:51:44:21:f0:a1:32:03:
9b:75:2b:1b:b1:2b:8c:d9:4d:17:c2:c1:0c:72:23:
0d:2f:36:da:62:ce:11:c6:d8:a4:02:25:b4:3c:d6:
01:60:83:69:8f:72:ef:8b:5d:c0:0a:cb:6d:15:a8:
a8:83:f0:60:d0:10:37:26:23:de:bb:10:7f:7d:77:
a5:1f:ae:0c:1d:b0:38:ed:9b:52:90:14:52:a2:f4:
d8:0e:0a:bd:d1:6d:29:a4:6b:f5:7a:31:0e:ac:a9:
fe:05:1b:55:ed:3f:b6:ac:50:c8:2d:e1:37:5f:09:
16:8f:4a:63:b1:d7:f5:a9:8f:89:1a:c1:7f:4b:d3:
cf:79:76:7a:e7:5d:6d:d4:7b:9b:89:e2:d6:83:e7:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:3B:76:F0:31:BE:BB:60:0D:CF:76:34:BD:A8:BA:C6:53:90:1A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f59e3388-09f9-41f9-bfd2-29c5f35aaf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ad:74:63:2d:c4:24:ec:54:7a:6a:bd:22:f4:7b:fb:4b:72:
fc:a4:21:21:ea:32:d2:59:a4:98:bb:7f:22:bc:4d:c9:b1:3c:
a4:fd:85:19:7b:88:f1:50:b9:d1:e1:7c:a2:b6:4b:75:91:f3:
d7:c7:94:ce:a9:78:51:e2:14:9c:a6:26:68:93:6d:3e:54:78:
00:ed:14:cb:cd:83:e6:4b:1f:34:d6:0e:36:d6:02:db:52:5c:
b4:10:9d:ec:4e:05:c5:d4:03:84:01:40:6f:9f:b7:34:ad:4f:
e2:2b:c3:ce:42:0b:ae:e0:09:25:e2:25:ea:64:ed:8a:53:eb:
f5:4c:c3:d4:da:dd:00:7f:5b:37:4c:10:a5:4e:ec:d9:61:f8:
8b:06:6c:53:a7:d8:5b:f3:30:a5:37:61:83:98:2e:0f:af:a4:
fb:ed:fc:f7:0b:26:67:b5:9d:56:88:6a:76:9f:e4:a8:8e:65:
4f:70:28:77:88:ca:0e:3d:bc:89:d4:b1:f0:60:da:a3:14:72:
4d:da:d8:1c:5c:2e:a5:cf:c2:f8:53:65:cf:9c:e4:21:0c:29:
2c:aa:f2:b8:46:7a:24:42:93:80:11:64:e1:68:8b:49:d6:c0:
92:3b:90:cb:31:57:3f:ec:cf:f1:0c:ff:65:e2:a2:d5:17:08:
81:7e:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 06:50:35 2025 by rpki-client