Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d8a8125-b54e-485a-954d-f85d47da11c9.roa
File: 0d8a8125-b54e-485a-954d-f85d47da11c9.roa (raw, json)
Hash identifier: Z9LZ7oBZGuCVDHgWgLhEaOLGOxn4GsSd447m7Ej9MiE=
Subject key identifier: D7:EF:23:FF:13:7B:0E:66:2B:CA:91:E4:12:32:1B:BB:8B:81:A8:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7F582BA9A6A93BCD247E6ACAB0CB7552493A1018
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d8a8125-b54e-485a-954d-f85d47da11c9.roa
Signing time: Sun 02 Jul 2023 00:00:00 +0000
ROA not before: Sun 02 Jul 2023 00:00:00 +0000
ROA not after: Sun 06 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:58:2b:a9:a6:a9:3b:cd:24:7e:6a:ca:b0:cb:75:52:49:3a:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 2 00:00:00 2023 GMT
Not After : Aug 6 23:59:59 2023 GMT
Subject: serialNumber=3cfaf299febbef4fb9bd2808afd83c8dc8d5c1404f4288dbd9eda976add0d838, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:79:ac:2a:d7:11:fa:7d:64:35:13:77:2a:
39:44:af:71:a2:89:1c:ee:2a:1c:b4:e8:cb:86:37:
94:7b:20:93:4a:01:7d:31:43:43:4a:95:a8:61:e8:
71:8f:5b:8d:5c:8a:1b:0a:eb:96:b2:a4:72:2b:2b:
99:67:0e:2d:91:ab:de:e1:07:9d:36:53:eb:92:7e:
10:0b:f5:a1:44:2c:ac:be:4e:23:b2:2b:a8:4f:7c:
96:84:07:40:4f:f0:6d:7e:b5:e8:3c:66:65:99:f2:
8e:12:e2:f4:43:6c:db:bd:58:69:a5:47:c6:8c:54:
56:97:83:52:e3:85:56:d6:3e:2e:76:20:93:5a:1c:
c7:56:02:c1:d2:85:2c:d9:c9:ae:b9:a8:e2:c3:41:
d7:28:4b:cf:04:b5:85:a6:e2:6f:3a:9d:d4:1e:7d:
29:55:57:be:66:d2:d5:55:4f:20:c3:1b:00:81:3d:
8f:98:40:3b:bd:e2:0e:72:bb:e9:8c:9a:4a:7d:43:
09:75:8f:71:ad:95:7c:45:9e:a7:0a:8a:33:26:90:
1b:5a:e8:bb:4b:ca:f1:cd:20:b9:df:47:75:7d:21:
ca:61:3e:ac:8f:cd:59:0e:00:fb:02:bf:aa:c8:3b:
2c:19:c0:44:a5:23:22:d4:9e:4f:a1:c6:9b:3f:68:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EF:23:FF:13:7B:0E:66:2B:CA:91:E4:12:32:1B:BB:8B:81:A8:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d8a8125-b54e-485a-954d-f85d47da11c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d6:d3:3f:ac:43:19:55:b0:d2:fc:f8:f7:e4:99:0c:7b:43:
7f:92:50:38:8a:a8:66:bf:c7:24:cb:6f:f7:db:34:f7:7b:ac:
f9:b3:5a:3e:b4:ae:bb:85:53:69:6b:ca:27:0a:8f:d0:01:c1:
bf:0e:7b:b3:6e:a5:4d:aa:70:e3:bb:43:e9:34:c3:46:3a:de:
ed:de:c8:85:bb:2f:b9:13:31:c0:c2:48:ad:e7:7b:a3:1b:15:
d3:6b:49:86:85:3e:24:6e:f0:6b:2b:de:11:c8:4e:d7:22:25:
16:d0:23:5b:77:f5:d0:f3:7f:80:3f:9b:35:6d:4b:ab:b3:61:
b4:20:d1:22:b9:2e:57:bc:2d:21:2b:60:64:ae:5f:8d:68:9c:
2a:16:e6:66:d8:a1:f7:8c:87:7e:81:3c:cd:11:cf:10:43:e0:
02:f8:54:02:f1:53:d1:84:34:bf:4f:f6:65:eb:c5:cc:fa:d8:
bb:f6:e5:60:0c:7d:a5:88:df:9a:c2:d8:5e:76:03:98:01:e4:
27:c8:1e:3a:f3:f8:22:a2:83:7d:e5:87:eb:1d:f2:1b:00:51:
43:a0:97:df:9f:2c:01:be:b2:64:f9:c2:fe:73:c4:6a:9a:f5:
15:79:b6:eb:a1:cb:19:e2:17:b9:df:fe:ba:25:d8:e5:a6:51:
62:15:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:48 2024 by rpki-client on console-ams.rpki-client.org