Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c0cb476-b253-412e-a741-ca9fe2bada29.roa
File: 0c0cb476-b253-412e-a741-ca9fe2bada29.roa (raw, json)
Hash identifier: Yqa+vDeL3vyDLgUNQihxMO8k8Vfs/sFvAMme+v+sPXI=
Subject key identifier: 1C:D5:8F:B3:B9:D7:4C:BA:41:4F:98:57:7D:B1:5D:98:E3:E0:66:39
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7D6E3079FD3410E3BE505D76730187E79CBE2ABB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c0cb476-b253-412e-a741-ca9fe2bada29.roa
Signing time: Sat 01 Jul 2023 00:00:00 +0000
ROA not before: Sat 01 Jul 2023 00:00:00 +0000
ROA not after: Sat 05 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6e:30:79:fd:34:10:e3:be:50:5d:76:73:01:87:e7:9c:be:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2023 GMT
Not After : Aug 5 23:59:59 2023 GMT
Subject: serialNumber=4f8b5bfd9f481f25c386af5a77ccff8b5d88ad816b77621e4189554f40d4c734, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:99:1e:6a:12:5b:f6:13:d3:f6:2d:e5:4b:
4f:e3:2d:02:f5:a2:d3:bc:e0:62:fd:35:04:4d:46:
39:f9:d3:f6:c3:23:9e:64:c1:27:e3:40:ae:ff:36:
80:4c:4b:21:e6:70:de:1a:3c:88:36:91:b3:6d:a5:
c5:f1:dc:12:3e:b5:3b:52:2b:0d:3e:f1:03:0c:3c:
02:9e:66:f9:90:2b:ea:13:07:fa:c8:26:96:b0:c2:
80:aa:2b:40:39:bb:80:82:4c:bf:b4:ec:4c:61:d6:
57:e2:9a:95:57:db:d4:79:e5:fb:dc:69:55:c7:28:
7e:71:77:ff:8c:f4:b2:fe:41:3c:49:63:6c:a0:4d:
a6:82:d1:36:16:9e:55:d1:10:1e:94:55:12:37:7d:
bc:13:03:57:a3:f2:b4:d2:0f:fc:3a:a7:7a:9f:3e:
cb:15:43:0e:0a:ef:f4:1b:21:16:f6:f5:93:37:8d:
c6:21:70:08:48:e5:b7:40:83:dd:24:e2:b6:2b:ea:
c9:fb:10:72:d3:f1:0c:82:cf:70:ee:33:29:c3:87:
ce:42:c7:ce:4f:4c:34:ae:86:bc:4c:26:c3:11:66:
04:cc:b5:b3:46:8e:ba:32:91:e2:0d:96:7c:54:53:
c6:c0:e2:d8:7d:57:a0:9a:8b:54:9a:5c:b2:b3:21:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:8F:B3:B9:D7:4C:BA:41:4F:98:57:7D:B1:5D:98:E3:E0:66:39
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0c0cb476-b253-412e-a741-ca9fe2bada29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a6:32:1f:6e:c9:1a:15:0d:fb:a2:89:41:b0:2d:22:5f:4a:
56:96:9b:86:c0:13:09:b6:7c:24:27:1b:d6:8c:e4:aa:bb:fc:
e9:cc:e2:af:c9:70:41:35:5a:e8:0f:cc:36:76:84:80:94:a3:
02:5b:12:ef:a3:d2:3f:87:30:0a:16:cc:2d:d2:f0:dc:03:fb:
7d:fc:35:c8:40:e9:4f:dc:24:c7:6e:cf:71:7d:ed:b1:69:c4:
28:29:a2:6e:99:19:45:d4:d4:3d:b4:0d:71:0c:ca:ad:ab:94:
ed:2b:87:c1:3e:01:86:54:d4:57:f9:34:f9:bf:8c:03:68:57:
3c:0e:23:bf:23:54:07:ca:b2:b9:00:d7:db:81:83:68:ef:a3:
2b:70:ef:30:88:75:2e:18:db:32:6c:ac:06:34:fc:21:30:e8:
d1:ce:c8:a6:07:90:86:c8:b7:19:ea:19:07:e9:15:51:2b:70:
73:c9:cc:95:f5:d4:da:4b:fd:be:07:00:44:ae:dd:a2:d6:13:
06:34:21:af:ba:38:44:79:c5:49:c8:3d:3a:34:41:df:2c:7a:
b1:05:9d:48:8e:27:b1:1c:bf:3d:53:33:c9:72:97:79:14:61:
ae:01:64:88:4e:b6:95:90:0e:4f:2f:21:23:fe:28:44:67:e9:
2a:a5:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:47 2024 by rpki-client on console-ams.rpki-client.org