Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b51cec7-f401-4fcf-8fc2-c9511aa4f6ed.roa
File: 0b51cec7-f401-4fcf-8fc2-c9511aa4f6ed.roa (raw, json)
Hash identifier: n87JpwC91BWDnHz+FJvPjsGp+kscNaXll79EHh57Zak=
Subject key identifier: 7F:FE:ED:F6:D7:46:0C:7A:68:E6:26:AB:F4:DD:F6:56:06:1E:60:AA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 315E49961179C8A7474B33886B26CD58EE63198F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b51cec7-f401-4fcf-8fc2-c9511aa4f6ed.roa
Signing time: Mon 06 Nov 2023 00:00:00 +0000
ROA not before: Mon 06 Nov 2023 00:00:00 +0000
ROA not after: Mon 11 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5e:49:96:11:79:c8:a7:47:4b:33:88:6b:26:cd:58:ee:63:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2023 GMT
Not After : Dec 11 23:59:59 2023 GMT
Subject: serialNumber=0adc9c50a3a70a996c3c27e634265842b04a2609ca06b7dcc57b67ade8a96263, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:c2:02:da:52:b7:ae:54:fe:21:80:3f:fc:
c9:84:b5:cb:da:61:7e:75:29:df:88:21:cc:f6:40:
55:47:3e:f6:79:8d:25:42:bb:5f:bb:a6:5b:5a:f1:
ee:3e:08:26:12:ec:28:48:29:1b:8c:0f:fe:cb:d4:
6a:69:a5:c6:ca:13:b3:7f:b1:b7:13:0c:c7:39:87:
53:34:48:2d:b1:26:93:48:49:f3:58:5e:00:f7:a8:
04:98:31:cc:d5:73:25:5a:e5:b0:6d:60:0e:3e:34:
82:a9:01:1b:02:ff:07:fa:c9:14:88:ef:a0:08:14:
8e:7d:e3:95:74:36:f9:95:db:cc:38:59:ec:c3:f3:
35:6f:98:94:0c:87:b8:52:b8:34:9f:7a:98:0b:49:
70:3f:06:a3:23:30:9d:59:6f:4c:7c:9e:85:bd:72:
c1:7f:32:b4:9f:38:12:b1:e8:f0:b0:fb:9e:fc:b5:
24:7e:51:5f:c5:56:12:0e:9b:74:d8:5c:76:f1:57:
23:bb:ec:1b:59:05:65:34:18:9c:da:a4:40:ce:99:
78:f6:76:01:3b:67:55:40:51:e0:1e:64:63:f3:ec:
27:5e:5a:88:b0:de:85:60:33:25:4d:04:54:07:14:
66:7c:0f:63:01:ce:e4:69:23:28:83:0a:84:ad:49:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FE:ED:F6:D7:46:0C:7A:68:E6:26:AB:F4:DD:F6:56:06:1E:60:AA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0b51cec7-f401-4fcf-8fc2-c9511aa4f6ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:92:07:41:a6:d6:7f:1e:a5:33:b1:c0:04:30:f3:eb:81:a6:
26:02:25:71:7a:1b:54:d1:76:07:0a:02:ae:71:d5:18:ea:9d:
9e:4c:9f:4d:53:fd:0d:2a:94:e3:58:6c:00:97:3f:18:50:b0:
dc:77:bd:e6:48:e3:4a:d5:a6:e4:96:0a:82:9f:7b:c0:7f:f0:
18:11:cb:4a:f6:cf:0f:ed:ab:23:0c:b2:be:b3:85:0f:be:f1:
4a:bd:67:26:0d:f6:6e:6f:06:e6:31:7c:b4:95:94:ab:82:c5:
db:d9:12:a0:90:8e:e5:93:7e:7a:1f:f2:74:73:86:4f:dd:fb:
5a:40:46:ac:88:9f:84:cb:17:63:b2:c0:f2:8f:45:fa:18:31:
9d:07:6c:08:2b:e7:40:b6:e1:05:4a:e3:c3:c0:9c:07:95:82:
c1:cf:2a:1c:72:3b:30:92:f9:f0:bc:06:18:1a:fd:09:3d:7c:
16:c7:98:96:8e:c1:97:97:5c:1e:7f:d5:29:18:11:ec:0f:e8:
30:47:4a:f3:51:fd:1a:a3:aa:94:4c:f5:34:a8:62:ce:aa:8f:
51:0b:7e:89:b5:c2:48:51:fb:12:77:1d:15:2d:09:3b:d3:8c:
86:5c:57:71:a2:b3:57:68:90:ec:73:5c:b6:74:e1:66:99:de:
df:74:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:47 2024 by rpki-client on console-ams.rpki-client.org