Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e947ffd-a641-4957-956f-ef728cf79887.roa
File: 0e947ffd-a641-4957-956f-ef728cf79887.roa (raw, json)
Hash identifier: KS/jLLSWB74MWiR146ekd9shhtH1d+UYJ4rUS2JBYLo=
Subject key identifier: E0:45:24:34:9A:30:DC:4B:36:0D:21:71:E1:49:8A:A0:4F:E1:3D:01
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1AC770DC9AC829E48E11C4972017A0A81C461FA6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e947ffd-a641-4957-956f-ef728cf79887.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c7:70:dc:9a:c8:29:e4:8e:11:c4:97:20:17:a0:a8:1c:46:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=9d8347ab369497febbf00de76b2cfd5dd3f0bf99011f342c241b9221025ff715, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:00:76:70:b9:80:b6:83:b5:19:80:fd:09:
9a:64:27:e2:a6:ab:bd:83:f1:fb:4a:46:22:32:45:
5e:53:27:72:42:9d:49:df:53:01:de:6e:b6:47:15:
8e:8b:b5:75:50:30:76:b7:15:b4:1e:ca:3d:8e:4e:
c4:e3:64:75:1e:f9:32:59:68:b1:a3:c8:54:9b:af:
31:41:fc:1d:c2:35:e0:b8:23:d4:15:0f:27:99:1d:
81:af:1d:96:e3:ae:8a:4b:54:ff:c7:f6:a9:7c:13:
39:81:40:77:05:64:99:bf:18:de:9c:e6:25:28:cb:
4a:29:c6:cb:89:ea:f5:ae:d6:70:bc:b4:d0:c6:ca:
e0:ad:1e:b7:2e:c4:16:67:95:d2:72:12:b7:51:e9:
b1:15:dd:b6:c0:fa:dd:82:9a:ee:23:75:3f:06:b5:
79:5d:7c:bc:e8:54:ec:44:5a:da:a2:88:cc:e8:d8:
e9:80:a7:39:7e:6c:10:f8:5b:7a:c8:60:74:8a:a6:
a1:76:98:c6:95:84:c0:07:f6:01:3e:8d:bd:8c:07:
74:03:12:f1:e3:68:52:a9:b2:20:4e:49:f6:73:3c:
42:0d:6e:56:a7:ae:9a:ff:50:a5:5b:22:54:fc:fd:
49:34:c6:79:bd:7c:f4:e8:af:c0:f8:ab:5e:d6:8a:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:24:34:9A:30:DC:4B:36:0D:21:71:E1:49:8A:A0:4F:E1:3D:01
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e947ffd-a641-4957-956f-ef728cf79887.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:95:0d:31:77:32:df:58:81:89:55:de:7d:13:ed:3e:07:2d:
98:42:56:57:ec:08:dc:b1:ad:2e:4f:73:26:08:77:a4:ad:5c:
be:47:a6:03:34:83:87:59:0f:4f:9a:5c:9c:d9:f5:22:be:53:
04:24:2f:fa:2f:f1:05:7b:66:b0:9d:ba:e2:6c:da:4c:48:42:
8f:77:ea:82:0a:c4:70:5c:f2:92:58:5f:5c:7e:ac:cd:42:ef:
cc:6f:5b:8c:90:fe:12:1a:cc:57:ce:ef:22:b3:0c:48:8f:2c:
8f:08:5d:20:b1:9d:d7:83:f5:d6:c9:72:07:24:8a:a3:6c:36:
d6:f5:36:a8:de:f3:0e:c4:96:3a:54:b5:11:67:35:10:8b:5b:
80:53:5b:ae:4f:6f:8e:be:29:cc:16:79:e2:35:d7:a2:38:da:
93:50:01:15:ea:36:55:a6:9c:25:54:54:a8:1c:60:3a:ae:07:
22:df:5c:49:60:34:05:5a:ba:26:98:64:93:d4:b4:e8:d6:7e:
c1:52:e1:f5:9f:b7:f3:49:52:b2:31:ad:e9:b8:24:b9:e3:72:
87:59:e2:c2:1d:7a:8e:71:e0:c7:2f:32:64:1d:e3:89:69:67:
c7:33:54:ae:d7:5f:40:04:dc:26:57:f5:1a:bd:36:99:f3:63:
c5:2f:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:11 2024 by rpki-client on console-fra.rpki-client.org