Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07a207d6-01a9-474a-85f2-e7e0a98240dd.roa
File: 07a207d6-01a9-474a-85f2-e7e0a98240dd.roa (raw, json)
Hash identifier: RMsZPszJiSdJKYj2JauCntn9AA16PdW3OW2nFN1XLnk=
Subject key identifier: D6:75:DB:37:B6:33:DD:23:BE:D3:20:C2:45:F7:9C:56:90:85:79:A6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 540E005B838F1051221787BB6FBB708FF2465BFF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07a207d6-01a9-474a-85f2-e7e0a98240dd.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0e:00:5b:83:8f:10:51:22:17:87:bb:6f:bb:70:8f:f2:46:5b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: serialNumber=df0819a4f17bb54312247ba63e6e3ec9365fec0697857ef30ed9a2b977feaded, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:55:4e:b4:06:b1:56:08:4a:f2:f6:5f:af:
98:b3:c0:0a:c5:94:ab:5b:ba:ee:0f:15:02:e8:57:
68:6a:87:d8:e2:48:56:29:6f:ae:2f:2e:44:48:cb:
78:5f:b1:e6:00:30:2e:fe:62:87:21:10:53:bc:ee:
cf:3e:52:d2:3b:1a:cc:74:4a:b7:54:96:bd:60:db:
9a:96:f5:0f:0b:c7:24:60:cf:cb:b7:43:4a:10:31:
83:85:02:27:ef:50:bf:77:02:ca:1c:48:c9:b4:b9:
20:48:af:58:02:d3:6a:e0:01:59:01:63:6b:04:f3:
15:9f:71:ad:a8:80:6d:8a:97:34:a7:4d:f6:28:4b:
b9:88:5c:3a:6b:6f:b6:b5:ce:ff:46:72:07:03:29:
bd:eb:ac:4b:d4:fa:f3:98:df:21:05:6f:ce:78:17:
2c:54:20:b4:e0:ff:90:3c:c1:f8:22:2d:48:10:71:
ec:3d:fd:54:e8:90:c0:eb:30:79:fc:9f:44:c7:85:
9b:ec:e2:bf:3a:59:e9:1f:07:03:02:83:69:f0:9d:
fb:62:d5:1d:7c:81:4b:4a:30:ee:b7:f0:cb:3f:97:
ea:01:77:81:86:d4:f9:a1:e6:76:1a:ad:2c:3d:c7:
81:2f:47:5a:46:7b:50:11:ba:d1:05:cc:20:67:a9:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:75:DB:37:B6:33:DD:23:BE:D3:20:C2:45:F7:9C:56:90:85:79:A6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/07a207d6-01a9-474a-85f2-e7e0a98240dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:58:5f:7d:61:49:23:0a:53:52:e4:4d:45:fa:8b:8a:51:2a:
fd:0b:1b:b8:cf:4c:04:59:f3:8a:fa:89:e8:85:6f:74:cb:90:
23:dc:a1:b4:d5:53:9a:32:60:b8:a0:ea:ec:15:1f:e4:5b:72:
db:a7:60:a3:9f:16:8e:17:dd:d0:1d:94:94:b7:c3:2d:d9:9f:
9b:1b:96:70:6d:17:b7:74:ee:eb:88:91:f7:50:d3:98:88:e2:
89:29:4b:9e:38:50:59:5d:fb:37:92:18:f0:c8:00:07:9b:8a:
44:7c:4a:48:c3:85:e8:9a:96:60:47:f1:d0:59:9a:eb:7d:fa:
a4:7e:58:bc:b5:21:de:40:06:28:af:3b:ea:4b:1d:75:4d:7a:
53:c6:82:59:2b:9f:38:6e:a9:19:44:5d:42:58:70:37:fb:1b:
ae:ee:0d:32:49:4f:11:47:43:95:08:b1:c7:c7:36:28:98:35:
26:d7:61:cd:c1:eb:39:cb:3b:9f:b4:ed:c1:48:22:b1:40:16:
76:66:bd:99:50:82:4d:b9:e1:c2:78:a1:47:00:55:56:91:2e:
3c:ea:31:92:14:dd:e8:73:0c:b0:b8:e4:cb:70:13:21:12:89:
c7:0a:70:19:d7:27:12:7e:7b:b3:17:20:52:a8:99:6a:30:63:
07:e3:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:10 2024 by rpki-client on console-fra.rpki-client.org