Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a0ee4fb-d99f-44ee-88d8-918d89ff5e45.roa
File: 7a0ee4fb-d99f-44ee-88d8-918d89ff5e45.roa (raw, json)
Hash identifier: OrybRW6KrFLtvdBsYflLNPr38y2KbT6lqFx6lmpGMEs=
Subject key identifier: 75:21:65:EF:6A:6F:6D:35:72:45:B7:FF:0D:F6:8A:2A:F0:03:43:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 744B15F24D6110872C56FF487F46050BB4FD2149
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a0ee4fb-d99f-44ee-88d8-918d89ff5e45.roa
Signing time: Wed 18 Dec 2024 00:00:00 +0000
ROA not before: Wed 18 Dec 2024 00:00:00 +0000
ROA not after: Wed 22 Jan 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4b:15:f2:4d:61:10:87:2c:56:ff:48:7f:46:05:0b:b4:fd:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 18 00:00:00 2024 GMT
Not After : Jan 22 23:59:59 2025 GMT
Subject: serialNumber=696a61b75a72d1ef9fc839660e20c3f21a3881b54aee50b8830cb6a81acb9d8f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:2e:c0:f6:e6:f7:29:b8:1f:49:34:34:30:
94:b4:ec:51:76:ef:b5:c7:ec:04:c7:57:94:6f:1e:
ea:db:d4:12:b2:81:09:34:82:7b:a7:f8:b9:ed:05:
86:5a:4d:43:f1:0a:75:37:9d:3c:8a:1e:a6:8f:5c:
7e:ef:1e:b7:18:52:8a:03:ae:89:ed:3a:04:6b:76:
21:51:b8:d1:10:ce:50:18:ac:c0:81:a7:8a:5f:c0:
5a:a0:11:23:7c:13:2a:55:e3:97:16:50:42:17:b7:
1d:42:f1:31:f7:3e:17:4f:8a:43:ed:7b:0b:b6:2d:
40:cc:16:aa:1a:c4:53:24:00:01:f0:5e:e5:2f:0d:
ba:88:8d:63:09:ba:12:4e:02:85:6d:4d:99:9a:2b:
1d:72:36:35:82:95:bd:f1:c8:b5:55:b4:f7:df:6e:
94:e5:88:e9:dd:21:aa:fe:42:a9:13:16:48:98:82:
16:c2:cf:31:c1:fe:97:0f:c0:d4:e3:94:c9:6c:7a:
c5:fd:63:63:74:f9:40:75:f8:45:f5:6d:59:d0:90:
ce:0f:c5:d4:6f:f5:7d:99:2c:fb:79:33:49:c6:aa:
67:38:be:fb:53:23:35:c2:90:6a:ae:bb:45:03:4d:
62:a2:65:47:b0:75:e2:ca:a9:d6:3b:c7:15:6c:07:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:65:EF:6A:6F:6D:35:72:45:B7:FF:0D:F6:8A:2A:F0:03:43:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a0ee4fb-d99f-44ee-88d8-918d89ff5e45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4b:22:1e:fe:d2:44:17:4c:df:17:2b:a9:33:3d:b8:5d:5f:
d9:3a:e4:6d:df:04:ef:96:99:3d:a8:cc:ec:c6:1a:c1:ad:52:
9f:04:74:d8:e2:63:f7:ac:2d:72:54:d5:5c:06:2c:e8:b1:e7:
5f:32:a6:91:e7:e8:e8:f8:4c:e7:aa:b3:68:c5:98:d2:68:9a:
d1:37:f5:b7:b4:d5:36:22:f6:b9:b6:91:34:73:38:bd:12:aa:
7a:f9:c6:26:4b:dd:b7:f6:d2:c7:8c:fc:0c:7e:88:20:bb:fb:
1c:e6:b9:a0:82:ee:51:ed:85:21:55:83:3e:eb:95:2a:b9:9b:
bb:cf:80:32:37:9c:06:af:cb:8a:11:f9:ff:74:1c:03:ae:f2:
6a:35:27:2e:be:c3:09:c9:28:f2:c7:60:09:7c:99:6b:13:ab:
0b:aa:d1:f7:2c:7d:78:49:cc:a3:bd:b8:2e:85:80:3a:2c:c0:
ab:ec:8c:bf:02:ec:ae:fe:85:9f:3e:39:c5:bd:99:e4:30:c3:
31:62:09:6c:42:a4:7a:83:a6:de:85:00:8f:85:a6:c4:e2:9f:
df:0e:5f:54:6b:6a:ac:89:3c:e2:0e:99:b0:18:22:84:53:53:
bc:6e:13:e7:37:25:67:f5:0b:a4:22:c1:95:1b:ae:fd:6d:94:
8d:a2:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:13:51 2025 by rpki-client