Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05e29d17-d8b1-4ddb-a0ad-e037cd2279a9.roa
File: 05e29d17-d8b1-4ddb-a0ad-e037cd2279a9.roa (raw, json)
Hash identifier: FwvXCMgqnyhKqlD9KxEtl6ze1G7gMEamjqXEUDoxidc=
Subject key identifier: A9:EA:04:DA:77:A8:7F:62:F9:B0:B5:8B:23:C7:CA:91:29:45:35:C0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 45D38B097DC9F267AD3F5331E9C185273A08C528
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05e29d17-d8b1-4ddb-a0ad-e037cd2279a9.roa
Signing time: Tue 08 Aug 2023 00:00:00 +0000
ROA not before: Tue 08 Aug 2023 00:00:00 +0000
ROA not after: Tue 12 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d3:8b:09:7d:c9:f2:67:ad:3f:53:31:e9:c1:85:27:3a:08:c5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2023 GMT
Not After : Sep 12 23:59:59 2023 GMT
Subject: serialNumber=25f81dd41a4a83b6d66ccb546e351af65dd063c117a77c86c0f0b8b00b3f53b5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:fa:98:de:10:51:b6:36:9d:d4:e1:01:33:
f6:c6:45:fc:d1:91:93:00:13:dd:9c:97:7e:7c:00:
6e:4e:87:39:41:46:14:d5:ba:29:d2:a7:08:28:76:
d7:cf:72:26:a0:37:23:eb:c4:82:69:f8:2a:44:94:
16:4a:0f:f6:44:ff:b7:ab:26:16:d3:29:09:7b:c9:
69:ae:b4:c8:aa:e4:c6:c2:7f:e4:45:fa:f0:97:06:
8b:41:16:3d:4c:09:ae:9d:0c:34:af:c2:a5:13:9e:
d6:14:25:32:c3:04:86:2e:6c:d8:16:45:bf:3e:38:
18:98:eb:17:d6:31:40:e0:1b:a5:e1:a4:c3:1d:c2:
2f:70:61:14:54:de:a3:23:a3:8a:0c:f5:13:74:ef:
8a:c3:ec:bd:89:ae:36:8e:bb:5d:8c:d1:6d:0a:86:
06:35:4b:f7:3a:0c:52:4b:63:e2:bc:95:ca:05:4f:
21:ac:eb:fc:6c:0c:e9:b0:e0:41:71:34:c8:5b:7e:
ad:bd:23:a7:f9:71:4d:4c:44:f0:db:06:ff:0e:2b:
2f:44:29:1c:07:b5:6d:89:10:a0:f9:82:1b:b8:de:
9b:da:fa:8e:a6:44:21:4c:96:1d:43:2a:ac:12:52:
0c:c4:a0:d7:6a:d9:cb:84:8f:c5:dd:2a:ea:ce:2c:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:04:DA:77:A8:7F:62:F9:B0:B5:8B:23:C7:CA:91:29:45:35:C0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/05e29d17-d8b1-4ddb-a0ad-e037cd2279a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:83:22:9b:60:30:00:54:e2:1f:ff:56:90:59:44:1a:15:ce:
8c:01:31:2b:b1:7b:89:b1:54:43:0c:38:d6:b4:4f:23:64:82:
cf:f5:4d:f4:20:81:e3:ec:7f:92:2b:1e:32:0c:c2:0e:41:07:
bf:95:6f:7a:5e:6c:63:b9:8d:69:9a:f5:62:29:8f:03:e2:f9:
89:04:22:47:01:8c:4e:bf:eb:88:65:89:e3:b6:b1:cf:e1:a8:
69:c7:9f:f8:58:03:6a:d5:e9:f4:8b:ad:6b:51:ab:07:f9:e2:
4b:ad:e8:b2:72:12:d1:b1:38:5e:a0:40:2d:89:c7:2e:ae:33:
11:c2:a3:95:92:cf:50:ef:0f:39:76:43:71:fb:a2:ff:3d:69:
fa:a0:16:36:aa:e2:b3:3f:11:48:75:f0:bd:64:bc:ee:de:5c:
5b:8e:dc:3e:92:65:e4:28:68:48:e9:90:ba:0e:04:c8:8d:0d:
41:ce:4b:2c:a8:04:66:84:0f:51:46:c5:ed:4f:c3:f8:b4:a9:
38:40:34:e0:8d:0a:52:4e:79:4c:9b:d1:82:f2:78:cd:e9:68:
62:62:a0:96:3b:be:f7:1a:96:00:15:71:a3:a0:79:cb:9a:6d:
4b:e7:b6:cf:ce:b2:f3:01:94:43:cf:c8:7c:f4:09:48:ef:5d:
c8:3f:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:46 2024 by rpki-client on console-ams.rpki-client.org