Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/052bfd85-caf1-4503-96c6-a51fd4c3cb3d.roa
File: 052bfd85-caf1-4503-96c6-a51fd4c3cb3d.roa (raw, json)
Hash identifier: 0seLtTVI+5HHe1kxsvDsZwdptW6C9Z9Wuo/4CjbrJtc=
Subject key identifier: F0:B0:FC:B5:C1:FC:CF:6A:1A:44:F6:FB:D7:E4:C7:BA:45:B7:C4:63
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 026E99F8A64FB827F34665417EBE92173742573C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/052bfd85-caf1-4503-96c6-a51fd4c3cb3d.roa
Signing time: Sun 03 Mar 2024 00:00:00 +0000
ROA not before: Sun 03 Mar 2024 00:00:00 +0000
ROA not after: Sun 07 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6e:99:f8:a6:4f:b8:27:f3:46:65:41:7e:be:92:17:37:42:57:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 3 00:00:00 2024 GMT
Not After : Apr 7 23:59:59 2024 GMT
Subject: serialNumber=c4e64ea5379b1d3d0f94d6a437046e6a4603f03645a318c45f18f958effa4125, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:d4:6d:46:d3:88:e7:82:2c:32:aa:7d:39:
00:52:3d:a1:89:87:b1:25:b2:bb:b4:53:7b:fd:b3:
a4:12:8b:fe:2f:6d:e6:4f:bf:ea:47:ea:23:3c:c0:
d7:60:82:56:ad:34:1e:41:23:f1:34:aa:e3:c8:2e:
77:a7:28:00:f1:07:9a:5c:3f:d8:13:30:28:2e:ae:
2d:aa:d2:5b:90:12:96:df:83:71:28:d0:a4:a4:9e:
de:88:f5:1a:2f:27:4c:d6:a1:27:92:13:6d:d0:82:
23:db:e3:36:fb:c4:d1:4d:f8:58:09:bc:e6:6f:77:
3b:07:cb:76:44:54:a9:bb:2b:44:a7:04:a4:92:4c:
54:b2:09:fe:01:c8:18:bf:b6:2a:10:ab:bf:b2:96:
c8:01:09:da:04:ad:c5:7e:46:b4:c7:35:88:f2:93:
ef:27:3a:22:ab:5d:91:8d:7a:f3:d7:8a:4b:7b:ae:
98:b0:8d:1e:31:b6:b1:08:32:4e:dd:1b:67:3d:9a:
44:d7:0d:b6:b4:ad:7d:6a:ec:d9:65:b0:b3:4e:2c:
3d:9d:5d:01:db:2a:01:7c:46:73:db:e1:55:38:8e:
3f:77:c5:41:d9:1b:5d:10:35:67:14:fc:98:10:c2:
a8:38:97:2b:5e:94:32:fc:04:c1:60:2f:31:4d:36:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:FC:B5:C1:FC:CF:6A:1A:44:F6:FB:D7:E4:C7:BA:45:B7:C4:63
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/052bfd85-caf1-4503-96c6-a51fd4c3cb3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6f:2a:d2:63:b2:66:9e:28:57:d4:68:67:d5:a2:e2:d1:d7:
93:6c:3f:b6:a0:cb:90:19:e1:95:b6:ae:09:66:63:11:ba:a6:
81:a0:3c:b0:36:a2:aa:36:6b:d6:ad:bf:63:44:30:25:c8:d6:
93:85:e6:38:26:16:4b:a6:66:c9:1a:47:7f:53:d4:e4:16:5d:
91:38:b6:11:74:d5:02:72:39:0b:d1:ae:1e:e4:b8:d0:47:4e:
e3:fc:45:21:c3:51:ff:0b:42:db:61:33:ba:f8:2a:72:aa:7a:
f5:24:20:d4:97:64:a0:0f:b5:8b:b4:18:2b:16:8f:3f:42:8f:
69:d3:52:e1:57:67:99:69:c0:cc:df:a8:03:d4:ff:fb:79:27:
69:60:f7:07:68:d5:cb:00:34:d4:33:65:88:b2:f0:8f:ba:6d:
a5:28:bb:9a:5b:3f:13:99:ba:26:dd:02:2d:59:0b:3a:59:3d:
2c:a7:16:d5:ad:61:00:2d:85:d0:cf:fd:26:26:40:69:14:cd:
1f:18:be:57:e7:fc:21:71:b6:ce:9b:fd:af:5b:98:aa:01:23:
e1:ec:ce:76:d0:aa:84:9c:66:8b:dc:07:6e:b3:01:60:0d:22:
e5:a5:f4:15:1e:90:f8:16:bb:8a:8d:28:3c:68:f4:3d:c5:8b:
8e:20:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:46 2024 by rpki-client on console-ams.rpki-client.org