Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06da6523-5768-45d9-aa33-d9381a1ab1fe.roa
File: 06da6523-5768-45d9-aa33-d9381a1ab1fe.roa (raw, json)
Hash identifier: b+irrFzqSTJa5sX7LpZuZgDaTfAzDTYT/JbciAqL34o=
Subject key identifier: 9F:9C:FB:F2:57:92:52:66:03:B2:CE:9C:5A:89:16:C3:BE:D2:A0:FF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4481149F4C552FB4C1EFEAB4EE9DE023BA2FD9F4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06da6523-5768-45d9-aa33-d9381a1ab1fe.roa
Signing time: Wed 20 Dec 2023 00:00:00 +0000
ROA not before: Wed 20 Dec 2023 00:00:00 +0000
ROA not after: Wed 24 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:81:14:9f:4c:55:2f:b4:c1:ef:ea:b4:ee:9d:e0:23:ba:2f:d9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 20 00:00:00 2023 GMT
Not After : Jan 24 23:59:59 2024 GMT
Subject: serialNumber=2ea89e058d572154c8f546e15750e268c1581cd2a094d08ffa1ae6c8720c4d9d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:bd:32:cf:a3:09:7d:76:08:51:f7:e4:aa:
8b:e4:c5:54:12:1e:45:85:93:b1:88:60:26:51:0f:
c0:66:57:6d:3d:43:86:46:19:84:41:7f:9c:98:15:
14:3f:10:dd:61:d9:ae:13:82:d4:20:22:24:a8:55:
ca:3b:d6:a5:69:e9:9d:a2:90:e0:ff:9a:6d:ff:5b:
76:fc:b3:14:d8:45:c3:e7:9b:e6:0d:ba:12:27:fb:
c0:76:b3:1d:9d:95:0c:8d:ba:c8:b0:9d:83:41:d7:
61:f6:9b:4a:be:23:bf:60:1a:9c:13:0b:3a:4e:06:
11:0f:56:38:07:86:b7:01:0b:bb:5f:52:61:71:2e:
70:67:09:5d:49:97:ac:75:35:8c:21:b9:b9:25:a7:
52:78:76:c4:f9:4d:ce:5b:4e:b4:7e:0a:bb:f9:9c:
93:65:4e:99:e1:98:d4:3b:14:df:82:b4:29:f0:aa:
00:ba:f0:30:c6:be:7c:a0:5f:40:d4:15:20:a8:08:
61:af:79:13:f4:06:92:8f:00:ac:5e:ff:5b:c5:db:
c3:6b:53:ed:3d:1e:5b:50:97:57:1d:cc:15:b5:3e:
64:2a:56:0a:cc:61:f2:9a:ab:5d:a7:78:d3:dd:4c:
bb:d3:9c:31:b2:20:19:bd:39:0e:cd:bc:f5:c2:db:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9C:FB:F2:57:92:52:66:03:B2:CE:9C:5A:89:16:C3:BE:D2:A0:FF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/06da6523-5768-45d9-aa33-d9381a1ab1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:98:7e:80:de:c5:dd:21:c9:83:c8:b4:8f:af:81:6b:b4:56:
26:72:d0:dc:e9:7b:f5:f5:24:a6:e1:75:c6:60:72:c2:2d:e7:
77:3c:f5:37:ad:6c:d0:eb:11:76:d5:28:50:b6:7d:37:9a:ec:
e0:7a:b0:45:46:61:3b:6e:20:f2:07:66:ef:2a:d8:ec:1e:06:
06:4b:c6:4d:ea:9e:ce:11:5e:c2:5d:e7:26:91:58:b6:70:8c:
dc:f3:2a:00:85:1b:a8:b3:2b:b4:49:d8:81:50:f0:32:4c:09:
bc:9c:01:70:fa:49:21:ed:fa:a9:c7:bb:65:9a:b8:34:72:eb:
fd:3e:c2:97:ef:9d:6a:c4:dd:06:71:b4:03:47:5d:87:4c:92:
14:02:14:d0:a1:6b:ed:28:cf:dd:a3:1b:d6:dc:9d:ad:48:bd:
f1:55:d8:3e:f3:d8:1d:86:ab:cd:8a:6d:27:e4:72:8d:44:ef:
98:43:9e:54:15:53:b0:21:ef:64:15:fe:4d:e1:ce:b9:af:4e:
78:7f:d5:74:cf:ea:47:a1:3d:62:f8:af:7e:67:0b:1a:d4:ab:
30:8b:00:c2:d3:97:db:b9:04:b5:36:db:ea:3b:e9:8a:9d:1c:
cb:e4:94:74:11:b0:3d:ae:92:15:a7:fd:81:ad:ce:e4:62:64:
5f:02:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:46 2024 by rpki-client on console-ams.rpki-client.org