Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/80d5dd62-be44-4469-abcd-c5a1384339f4.roa
File: 80d5dd62-be44-4469-abcd-c5a1384339f4.roa (raw, json)
Hash identifier: 36TGF7elhAe6c7AXPTgtPIBgXQgFXG6bllycw5SXdFk=
Subject key identifier: 80:5F:E1:1A:BD:4E:14:B4:94:62:9B:F5:0C:CB:D6:3B:BA:65:3F:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6765F67AFF2BAB5BEC9CE606D53B8B7B09B98650
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/80d5dd62-be44-4469-abcd-c5a1384339f4.roa
Signing time: Sun 03 Dec 2023 00:00:00 +0000
ROA not before: Sun 03 Dec 2023 00:00:00 +0000
ROA not after: Sun 07 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:65:f6:7a:ff:2b:ab:5b:ec:9c:e6:06:d5:3b:8b:7b:09:b9:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 3 00:00:00 2023 GMT
Not After : Jan 7 23:59:59 2024 GMT
Subject: serialNumber=18c7958cfcef7a8c4a5313dafb7985030c0ce40b194510aaafc622bbca0f1bf9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:6f:6c:67:cd:b8:3b:cd:0e:12:cd:28:6c:
73:39:c6:47:b7:1b:93:c5:4d:b7:8a:b1:5d:f1:1d:
d2:29:a1:b5:d7:13:9e:ad:45:ce:0e:21:ff:eb:07:
53:c9:44:8d:a2:9c:5e:ba:fb:75:53:be:53:c8:38:
c8:34:6a:f2:a0:69:7f:95:89:d5:44:39:a0:0f:9d:
d1:ba:fb:e3:2e:06:af:4f:9d:cf:99:47:6a:d6:80:
1f:34:4f:1e:87:ac:24:ed:24:62:3f:fa:53:84:9a:
b6:cf:55:11:6a:a7:1c:74:04:a4:6c:14:fd:4f:41:
24:56:38:90:a4:23:1c:e6:99:34:10:bf:d0:ff:ba:
c5:ba:fb:f5:27:73:b4:00:c5:f6:66:e4:96:3e:8b:
91:70:fd:f2:0f:d3:c1:cd:0a:14:84:f1:36:5c:f2:
ef:e2:d9:81:f5:34:b9:7f:1b:08:09:2e:96:6e:8f:
ab:5d:03:62:9e:c6:8f:1a:6b:be:df:b7:e7:f0:28:
8a:7a:b9:75:59:ac:54:a1:2e:60:1e:c9:2b:8b:9c:
f9:e1:13:87:7f:f4:14:34:98:cc:bc:70:2d:1a:e5:
f2:c4:54:8b:b4:0a:17:21:67:01:a7:2f:57:ff:74:
44:cd:2c:88:44:f0:e5:a4:ce:3f:ce:87:49:d6:de:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:E1:1A:BD:4E:14:B4:94:62:9B:F5:0C:CB:D6:3B:BA:65:3F:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/80d5dd62-be44-4469-abcd-c5a1384339f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:9f:fe:e0:4a:79:29:fa:61:2d:2e:a1:37:bd:7f:48:17:3b:
52:b1:4c:99:95:6a:67:32:36:4e:dc:72:c5:fb:91:9c:14:ec:
a8:fa:32:b2:98:c1:57:82:d5:15:9f:b8:a4:68:b1:bf:38:d1:
2b:13:59:76:b4:73:4c:2d:97:47:30:eb:09:e9:a5:9b:07:ad:
c9:2a:34:a4:00:00:fd:93:9b:aa:3a:d0:00:ce:48:80:c2:53:
58:49:e0:50:01:3b:7a:23:7b:0f:fd:24:1d:1f:20:32:75:dc:
60:70:71:49:34:f1:bf:7e:e8:74:07:e6:b1:5a:cb:e5:e7:e2:
fd:92:13:ef:ff:b3:01:aa:24:d5:b4:96:78:87:0c:ae:62:f2:
1e:3b:a2:92:13:bf:2f:55:7d:6a:71:6d:a0:19:52:b9:e5:80:
f6:b0:99:2e:0e:ca:90:08:cd:4c:a2:02:56:37:52:1b:8f:d1:
62:b9:e9:90:ce:49:97:22:8a:a6:60:67:46:06:67:03:26:89:
35:e7:50:bf:c9:bc:86:e4:e9:42:09:6d:17:c1:03:0a:60:a8:
68:6e:30:ef:8c:b1:67:02:ea:99:82:bb:58:c4:6f:be:26:c7:
c7:63:9c:9f:88:c9:98:67:f9:7f:90:97:4b:de:df:dd:ca:6c:
5a:67:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:02:43 2025 by rpki-client