Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b14b4a8-86d8-43b2-9d74-c050617bc8c6.roa
File: 0b14b4a8-86d8-43b2-9d74-c050617bc8c6.roa (raw, json)
Hash identifier: EKLMabiYDB+iu5mymHwOwp8iC5vS5YoIzk+OkD9MU0o=
Subject key identifier: F8:57:5C:89:78:8D:AC:DE:2F:F0:47:53:40:EF:CE:13:03:34:63:66
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 209B5FFB19795091196CFDE92D566D5681913977
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b14b4a8-86d8-43b2-9d74-c050617bc8c6.roa
Signing time: Tue 01 Aug 2023 00:00:00 +0000
ROA not before: Tue 01 Aug 2023 00:00:00 +0000
ROA not after: Tue 05 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9b:5f:fb:19:79:50:91:19:6c:fd:e9:2d:56:6d:56:81:91:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 1 00:00:00 2023 GMT
Not After : Sep 5 23:59:59 2023 GMT
Subject: serialNumber=97dca1b93eb48a19f3bf0630df9f5509c1a4e7b834db574111d0b9e04ada1ab0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:68:34:07:d2:f3:23:30:46:0c:a6:3e:fa:2d:
36:16:5b:b2:83:f2:58:bf:9f:d9:ca:dd:ff:46:ac:
25:36:94:b5:f9:cb:78:35:a5:0c:2f:15:3e:3e:0a:
4a:f4:77:97:e9:db:85:bf:25:4f:d3:dc:74:2b:13:
0a:bf:16:9c:cf:03:9e:98:a1:9c:67:be:ce:2f:2a:
c5:6a:ae:66:4c:ae:7b:42:2a:09:eb:dc:75:05:c7:
20:c3:b4:31:68:ef:29:f5:54:45:62:74:64:1a:80:
21:52:d3:29:13:d8:cc:48:7c:d0:4b:6a:ce:46:ff:
3e:c1:4b:35:44:db:03:70:71:38:03:a6:5c:6c:84:
f8:57:6f:78:d3:de:85:f8:5b:92:b1:3a:8c:45:ff:
80:50:63:5f:f5:ea:46:84:be:b4:6c:60:ff:27:ab:
a4:38:71:e8:66:58:47:99:7b:d9:8c:f7:a6:49:75:
c0:5f:b8:31:d5:91:50:e5:4e:c7:d0:3a:1b:b9:6f:
9b:bb:e4:8f:54:a5:bf:10:77:4e:97:3d:75:cd:9b:
05:f0:81:07:d6:92:f1:a9:0c:93:ea:68:bc:8a:b4:
dd:14:cc:c5:a8:8a:cb:e6:8d:6d:0d:d8:45:30:c4:
0e:da:63:63:14:0a:c3:19:93:f7:89:ad:eb:55:6a:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:57:5C:89:78:8D:AC:DE:2F:F0:47:53:40:EF:CE:13:03:34:63:66
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b14b4a8-86d8-43b2-9d74-c050617bc8c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b9:fa:47:20:2d:ee:e1:59:86:84:1a:ea:9f:4c:cf:c6:dc:
34:19:11:82:81:40:e4:8a:26:c3:0c:19:61:db:d7:24:f1:4f:
13:83:e8:ba:ef:95:ad:f6:34:f8:e1:51:1f:0d:ad:53:7d:d1:
81:3b:29:6e:c6:45:c5:e0:03:d5:e2:4b:22:70:e6:66:32:13:
ee:b3:c5:80:e1:6b:14:0d:44:72:20:ef:d3:e8:b1:89:1f:71:
4e:f9:ab:ae:42:df:3f:9a:26:a1:75:f9:f1:89:ae:b1:06:c0:
6c:97:08:75:23:2f:3d:c0:e8:70:74:6c:93:ca:9e:51:4c:92:
70:c1:95:1b:5e:a4:10:5b:90:8d:e6:7f:0d:a7:cd:ea:5d:01:
b8:ff:c4:f3:b7:d7:c0:1e:93:9a:aa:e4:13:ae:e4:4d:30:3f:
ab:87:36:91:00:b2:88:fe:d8:90:89:71:6a:03:7c:04:74:74:
9f:80:45:f5:f3:ae:5a:a0:b4:43:6c:6d:eb:7f:39:37:26:0e:
59:12:20:51:25:d7:36:f5:26:64:37:87:06:d2:d9:18:2f:1e:
d4:9e:00:43:10:f9:24:f9:2d:73:8e:48:f3:2e:d9:f1:c5:c4:
a8:db:30:79:b4:a3:ba:8d:51:39:21:fc:37:e8:38:f6:1a:67:
1a:bf:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:47 2024 by rpki-client on console-ams.rpki-client.org