Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17260cac-6c50-4fd7-a61f-6230e8df1b37.roa
File: 17260cac-6c50-4fd7-a61f-6230e8df1b37.roa (raw, json)
Hash identifier: 3/BcPMbR4I09OyT3lu0fEurDDvhnO6+0aHITV9TTScY=
Subject key identifier: A2:47:18:19:C2:7F:EB:D5:AB:FB:AF:B3:4F:FE:F9:5C:11:64:CB:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3C1C9CEC177A19E6F59F7C053BF603559B090725
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17260cac-6c50-4fd7-a61f-6230e8df1b37.roa
Signing time: Mon 29 Jan 2024 00:00:00 +0000
ROA not before: Mon 29 Jan 2024 00:00:00 +0000
ROA not after: Mon 04 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1c:9c:ec:17:7a:19:e6:f5:9f:7c:05:3b:f6:03:55:9b:09:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 29 00:00:00 2024 GMT
Not After : Mar 4 23:59:59 2024 GMT
Subject: serialNumber=4280b0720f5b87672e6c84363022d0708a476c5065772861959e859d154ad6cf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:77:6e:94:aa:ba:c5:5e:6d:53:4b:fd:cb:
58:78:17:17:bb:12:6b:59:51:ca:98:a8:19:a1:4d:
0c:80:f1:6c:8b:9c:10:d4:2e:81:5d:67:35:f8:fb:
76:b5:7b:69:7d:47:58:7d:51:6d:49:13:12:ed:f9:
44:22:fb:ac:0c:3b:b9:a4:18:d2:95:d7:d9:e0:2c:
4e:52:07:c3:df:2a:35:2f:7a:11:5f:15:74:62:27:
5f:49:9f:16:b2:97:50:a9:ac:bd:90:21:86:cf:90:
d0:d8:ec:de:7b:2b:55:76:af:cb:9b:0c:bc:de:0b:
81:05:97:00:02:40:7e:46:90:b0:66:8e:d5:db:76:
2b:19:7d:96:0c:c9:a5:17:b7:d5:aa:d8:da:1e:45:
be:4e:b3:3b:d2:de:1e:01:92:2f:38:80:3f:c5:cb:
ed:24:85:c4:b1:e4:4a:b8:82:a3:a6:00:4c:2d:b3:
a5:19:4b:f7:f2:9b:89:4c:ba:59:9e:d9:de:8a:1a:
c5:7e:16:e5:73:9b:ad:a8:ce:a3:42:9c:1e:5b:aa:
9b:54:1f:d3:e1:87:22:62:55:28:75:10:df:ed:88:
0b:e3:ba:66:b3:90:f4:6c:1f:42:ec:d5:e8:11:78:
1e:83:54:2d:17:02:5f:c4:a6:04:14:56:04:2b:93:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:47:18:19:C2:7F:EB:D5:AB:FB:AF:B3:4F:FE:F9:5C:11:64:CB:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17260cac-6c50-4fd7-a61f-6230e8df1b37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e2:42:73:2e:77:97:57:0b:12:f1:ab:26:9d:6b:24:e0:ee:
08:77:8e:4d:45:2a:bf:4d:17:50:f0:3a:2d:6a:0c:85:d0:8f:
fb:c5:b1:9a:d7:da:04:ec:ed:6c:f4:7e:be:b7:e9:70:e3:5b:
1b:09:3d:74:0e:39:c1:85:d3:49:6e:85:ae:7a:1a:ec:93:b0:
15:88:b6:46:ff:08:06:be:00:92:db:dd:44:88:19:b9:d4:ef:
47:93:b2:24:fd:f8:8c:04:13:b9:96:47:26:2b:16:4b:6b:3f:
b3:79:67:a0:ca:53:09:ac:25:a5:ea:0b:24:90:2d:55:7d:61:
e5:cf:b6:93:8f:4c:5d:d6:75:99:bb:47:1f:cf:a6:f0:49:11:
d9:0d:c0:38:72:14:43:67:a7:bd:7f:00:a7:0a:43:15:6b:04:
99:1c:41:b2:f1:fd:89:56:44:c9:e2:9d:4a:b2:e4:67:77:e2:
ac:12:43:3d:26:32:70:db:4f:f4:62:5e:ac:b5:b4:fe:25:d9:
e2:ef:39:9f:85:2e:de:3c:30:49:4f:eb:ef:99:24:fe:6a:20:
cf:8b:0b:a0:e4:80:06:b6:c8:e9:32:f4:ab:84:37:f2:3c:da:
1d:f1:23:e2:28:15:a3:d2:aa:c8:12:f9:ad:79:4b:c5:8c:32:
ac:2a:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:12 2024 by rpki-client on console-fra.rpki-client.org