Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff9eb5e6-13d3-417e-bd69-93d18e6d29cd.roa
File: ff9eb5e6-13d3-417e-bd69-93d18e6d29cd.roa (raw, json)
Hash identifier: KfBo8nivAfKlnrQ/iPJFdQPz5RYlUGocXDjXTyXbgas=
Subject key identifier: 0D:2C:4F:23:4D:A1:88:9F:5A:10:9F:90:E7:CE:9F:D2:36:DC:E2:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 674AF20DCE26AF0DADEC5C503438ED5560CBF81E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff9eb5e6-13d3-417e-bd69-93d18e6d29cd.roa
Signing time: Sun 12 Jan 2025 00:00:00 +0000
ROA not before: Sun 12 Jan 2025 00:00:00 +0000
ROA not after: Sun 16 Feb 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4a:f2:0d:ce:26:af:0d:ad:ec:5c:50:34:38:ed:55:60:cb:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 12 00:00:00 2025 GMT
Not After : Feb 16 23:59:59 2025 GMT
Subject: serialNumber=d6d018a0d4f5cb0519d2336f5132f5d5225a02e948dd0395c7c8ebb303cdb9e4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:a1:1d:24:52:f9:12:1b:5e:c8:82:e0:bc:
57:42:ba:9b:83:bb:e0:30:95:71:3b:ac:c2:00:d3:
eb:d9:8e:b6:53:cb:aa:30:f5:41:10:ea:c3:6f:1f:
72:a1:cf:50:4a:ea:12:6f:84:dc:44:36:92:5c:13:
ee:a4:aa:18:a3:16:f1:51:2f:e5:2b:95:f0:a0:6f:
ed:96:13:68:d4:3d:83:4b:af:f1:ae:90:3a:b6:40:
ef:24:eb:62:fa:aa:e4:77:8e:6f:27:85:d4:b8:02:
2d:86:ff:af:ad:d6:4d:14:b8:1c:93:b0:7a:92:b5:
b6:74:24:f4:d2:66:fc:e7:dc:02:03:85:f4:2c:0a:
e8:f5:dc:33:d0:8e:1c:7f:d1:ff:12:58:df:7d:47:
b4:33:ee:73:cd:47:1c:99:5e:70:de:e5:af:7a:06:
55:a2:2c:a5:65:84:cd:c3:ef:50:12:cd:e4:04:01:
11:13:48:33:1b:4f:23:73:4d:71:58:8a:5f:42:1f:
c3:30:89:42:9f:82:4b:47:2f:6c:78:e0:49:ac:89:
e5:79:05:d6:08:61:56:d0:4a:ab:80:e0:b1:91:0b:
e3:97:f3:3c:52:60:48:a8:fc:13:4c:4d:fa:82:b1:
8d:f1:1f:c2:48:7c:cc:93:75:1f:62:bd:f3:9b:9f:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:4F:23:4D:A1:88:9F:5A:10:9F:90:E7:CE:9F:D2:36:DC:E2:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ff9eb5e6-13d3-417e-bd69-93d18e6d29cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:46:2f:f6:28:89:50:2b:c0:c9:e4:d6:8f:2e:19:68:c3:b0:
03:a9:88:53:17:68:74:3c:28:bc:59:38:f8:cb:78:5f:7f:5c:
dc:6b:82:06:42:92:66:e0:6c:a9:8e:d1:d1:a9:8f:3b:b1:8d:
4a:b9:fc:e2:f5:79:99:f3:27:53:41:57:5f:d9:99:f5:dd:32:
b1:df:14:0d:70:19:a9:97:dc:e9:37:d3:ba:97:f8:c1:a4:0a:
12:a7:eb:01:23:df:06:94:31:d0:70:15:49:a7:85:d7:e5:96:
c5:c2:2d:b6:d6:52:b7:48:fa:da:ae:d3:fe:71:68:30:f1:f4:
4e:fb:1a:75:33:a1:48:42:8a:7d:85:d0:e9:2e:0f:aa:6e:f6:
6d:7f:e5:00:98:dd:02:44:fc:bf:7d:cd:3a:f9:0b:d5:54:c3:
77:7d:3e:f6:aa:36:45:e0:63:75:e4:84:f2:f9:05:76:7e:cc:
a7:47:c8:cc:81:7c:47:b5:23:95:30:cd:69:7a:12:3c:b2:77:
ca:ec:32:04:14:6e:9a:f1:6b:17:9a:11:3e:49:8b:26:63:81:
03:54:42:63:15:1c:f3:ed:5e:09:fc:65:c2:4e:10:a1:72:2b:
b0:4a:77:a4:3a:24:96:3f:46:c2:9a:8c:e9:39:0d:27:d8:59:
85:35:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:24:36 2025 by rpki-client