Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f984043a-7b88-4fae-b379-4809ad8e3ed0.roa
File: f984043a-7b88-4fae-b379-4809ad8e3ed0.roa (raw, json)
Hash identifier: bcogoKNkM08jt5yZ2JPhRekQ/YjUQ27wVspCrrnZBQ0=
Subject key identifier: 38:6B:F0:C1:92:D4:2E:99:C2:B6:86:FC:25:34:27:F2:80:C9:90:AB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6BCC8F67D2F85FF79E4296FD6F06BFBB6A1D1DDE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f984043a-7b88-4fae-b379-4809ad8e3ed0.roa
Signing time: Thu 20 Feb 2025 05:28:21 +0000
ROA not before: Thu 20 Feb 2025 05:28:21 +0000
ROA not after: Thu 27 Mar 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cc:8f:67:d2:f8:5f:f7:9e:42:96:fd:6f:06:bf:bb:6a:1d:1d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 20 05:28:21 2025 GMT
Not After : Mar 27 23:59:59 2025 GMT
Subject: serialNumber=738ddd6fab59ec85433abac9e2479ae41427bf5dc2ec65b262c68692022a1711, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:01:42:be:b6:f4:cc:f9:b1:2e:03:b2:18:
bf:4a:88:a5:d1:18:40:de:e5:b7:d6:84:06:44:b2:
c8:78:f3:6e:b5:2a:41:b8:2b:9b:e1:ce:73:51:a8:
24:e8:02:73:f5:a5:39:b2:54:e7:b6:81:cf:ba:22:
6f:e6:60:0f:b6:bf:b5:21:91:f4:8d:48:1c:4f:94:
a3:43:bb:04:2a:ff:bc:39:ad:5f:81:2c:83:b2:87:
dc:1c:5e:34:3a:07:5b:ba:d6:08:d0:af:a3:52:c5:
83:a1:22:36:ad:64:c4:34:0c:a2:d2:d9:35:c5:a5:
1e:fa:42:fb:ff:2d:e7:56:04:38:7b:fe:0b:66:e7:
b6:60:22:9a:4f:36:ea:90:9c:bb:28:78:02:f0:25:
55:e8:e3:0a:1f:ff:f4:f0:7f:40:f7:50:af:88:64:
57:2c:b2:29:f1:bb:c7:18:bd:79:98:c8:ae:98:6a:
87:84:21:99:3b:42:f1:32:b6:fd:7f:97:bd:34:15:
3b:87:1f:4b:9b:a5:68:27:2c:9e:7c:5b:cb:ef:09:
24:a5:b9:d5:42:b8:ed:27:6d:d9:8d:d3:f3:dc:9e:
6b:98:60:f6:29:b3:0e:18:23:b1:ce:0c:97:7e:ee:
a0:f6:0b:30:1a:49:96:58:26:ef:ce:b7:e6:23:e0:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:F0:C1:92:D4:2E:99:C2:B6:86:FC:25:34:27:F2:80:C9:90:AB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f984043a-7b88-4fae-b379-4809ad8e3ed0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3b:f4:1d:a4:0a:1d:88:80:7f:18:30:07:33:46:fc:58:8f:
01:b2:4d:51:44:f0:56:97:7e:7a:81:b3:75:7a:ee:42:76:b0:
96:09:e0:57:cf:77:e4:a9:e5:d9:02:56:f6:d2:41:9d:3b:d5:
8f:91:2c:24:f4:f8:8c:92:3e:fb:c2:27:b8:6f:b3:d9:27:d1:
87:1b:bb:f4:5b:39:87:1c:91:2a:d5:91:2f:de:f1:57:41:75:
54:17:c4:52:c5:6e:f8:65:d2:1e:76:2e:91:ff:7e:49:df:9f:
61:c6:34:0a:ae:2b:5d:23:53:bc:1d:ea:60:62:54:94:8a:8d:
c5:98:c8:dd:5d:9e:3b:06:29:ec:5c:f7:6b:f8:75:f8:bb:54:
dd:13:d2:ae:70:88:e9:c4:eb:31:e4:4a:6c:42:f0:a4:fc:ac:
f9:33:18:4f:d2:8b:e2:29:e8:0f:45:98:a0:90:ca:56:78:58:
a0:55:cd:de:af:80:9f:00:52:15:d2:12:a7:39:81:d9:02:b7:
66:e4:8d:a9:cb:6d:73:a5:d7:a4:ab:41:3d:35:cb:5d:27:53:
d2:30:09:d2:6e:a5:ec:a1:74:ea:98:b0:81:df:99:b4:89:2d:
2b:c5:9e:25:cb:40:e1:39:c7:d1:57:d5:d9:c5:82:c7:5d:27:
c4:a8:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:34:49 2025 by rpki-client