Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b6e4e56-6ce5-43fd-94e2-c143c3146250.roa
File: 6b6e4e56-6ce5-43fd-94e2-c143c3146250.roa (raw, json)
Hash identifier: vXTzYbm6bSc89/wqFbWlzTbuZteONH+HoFo/HvBnt48=
Subject key identifier: CE:DE:B2:D3:E3:C8:F1:2B:85:B6:05:FD:DF:63:FD:90:69:0D:01:3B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 59F857C926A12C7C8990E4D415D2357215C75983
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b6e4e56-6ce5-43fd-94e2-c143c3146250.roa
Signing time: Sat 04 Jan 2025 00:00:00 +0000
ROA not before: Sat 04 Jan 2025 00:00:00 +0000
ROA not after: Sat 08 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f8:57:c9:26:a1:2c:7c:89:90:e4:d4:15:d2:35:72:15:c7:59:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 4 00:00:00 2025 GMT
Not After : Feb 8 23:59:59 2025 GMT
Subject: serialNumber=23e2e75c2aa876c07851f9b4f25a862fec53495edcb5668c252742e00243f227, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:6f:69:5f:6d:d2:73:14:59:5c:ec:1c:1c:
8d:5f:c5:74:82:16:97:25:25:38:07:4f:4c:75:c0:
9a:ed:19:2e:87:69:b0:32:76:70:21:f7:6e:14:8b:
9c:77:62:ad:2c:2b:c4:75:08:84:c4:9b:1d:19:98:
ad:6e:a1:ed:f3:fe:41:cb:ac:08:93:aa:ba:7b:93:
6d:71:ec:0e:47:28:e0:31:37:d0:40:3c:c1:9b:fb:
00:d7:81:da:66:3f:eb:7f:bd:3c:a7:32:98:43:1a:
43:4e:b1:8a:8f:91:b8:6c:33:80:b3:57:05:4b:3b:
ed:90:bd:e9:ad:55:fa:2b:1b:f9:3e:20:9f:e4:98:
f7:5f:7e:60:5f:00:ab:a7:66:49:e9:06:d9:9b:f9:
b7:db:4e:76:d4:9c:0f:c7:14:3e:26:21:c3:b9:b3:
8d:df:ce:e0:d8:05:0c:11:9c:fe:4b:43:5c:7b:1e:
17:f4:9a:6d:fb:28:e4:6c:0a:7b:58:41:e7:47:82:
ba:39:85:0f:d1:a4:69:6f:69:7b:e0:21:b9:5b:e7:
12:70:0a:07:c5:ef:c8:7c:09:42:ee:4e:5f:08:2c:
2a:f8:1e:1e:75:bb:dc:cf:9a:78:9a:ef:f9:ca:c4:
c3:60:1d:1c:75:cb:ef:84:28:7f:17:b3:e3:19:fe:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:B2:D3:E3:C8:F1:2B:85:B6:05:FD:DF:63:FD:90:69:0D:01:3B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6b6e4e56-6ce5-43fd-94e2-c143c3146250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b7:25:43:c8:07:9b:ed:ab:09:47:c0:69:75:bb:7f:10:4a:
87:ce:59:a8:3f:67:ca:ae:1a:89:b7:af:22:b4:51:65:b4:b3:
6e:ce:01:6c:07:72:a1:92:fb:ca:c2:d4:85:94:d6:87:ae:98:
2c:3d:af:81:16:22:3b:4e:07:7b:5d:12:00:2a:44:d5:ef:c8:
60:d5:2a:4d:12:d4:0d:ca:5a:b2:10:94:ad:5b:e0:a9:4c:92:
a7:6b:5f:f4:06:d2:95:0d:83:85:1b:8d:13:47:0f:be:29:90:
9d:60:03:b3:9f:6a:e7:63:ad:83:e2:d2:df:da:ae:b9:e5:6b:
ec:44:fc:7d:82:26:f8:b9:a5:87:c4:b7:ae:9e:4f:83:e6:c0:
57:77:7a:b6:e1:dc:5e:47:4d:33:3e:4a:c2:19:5c:28:da:28:
5f:da:30:66:b8:34:c3:f7:b9:62:dc:ab:ad:87:20:3d:38:dc:
6a:4e:de:f8:98:4b:c4:6d:78:54:16:40:6d:e3:1c:43:f7:27:
9a:22:c3:49:91:bd:24:37:7f:31:86:4d:0b:91:e5:3f:b0:e6:
4b:d2:79:81:cf:10:93:e9:91:b7:2c:6a:fd:c6:cc:76:9f:05:
8e:da:82:64:ba:95:f0:5a:ae:a2:04:49:d3:b7:0e:4d:7c:d8:
33:71:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:38:14 2025 by rpki-client