Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a387aa-04e3-41d5-a92b-bcc77ee65109.roa
File: 17a387aa-04e3-41d5-a92b-bcc77ee65109.roa (raw, json)
Hash identifier: 7sTFxeq/Pz8sy1+xTcROUgM7lfK8XmtDdn7hopInzHo=
Subject key identifier: 1B:0B:3A:0C:60:EB:89:95:DA:45:42:7B:F4:24:7C:69:FE:A4:58:03
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E7F249A25928321CB03E298910E0AEF7DBE913C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a387aa-04e3-41d5-a92b-bcc77ee65109.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7f:24:9a:25:92:83:21:cb:03:e2:98:91:0e:0a:ef:7d:be:91:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=9d7e594ab75af4b60d168074f4e0d7db96eb46f952b20623bd35a65c9a0f1881, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:cf:13:e6:39:0f:b2:c8:94:8f:45:ab:a0:
81:13:b4:e8:0e:54:68:7b:c5:4e:c6:bb:0e:b7:42:
34:ec:8b:3e:f3:a3:7f:93:42:50:e6:02:2e:b7:a3:
c4:da:5b:df:09:0f:b4:26:83:69:07:5e:0e:ec:ee:
aa:44:31:18:53:56:ce:13:59:79:96:9d:35:14:38:
56:67:c5:99:c2:ba:95:be:ca:98:08:a5:e3:11:31:
ac:f7:69:94:b6:2e:ef:54:57:58:60:23:f2:47:f8:
b9:d4:18:0c:47:3e:03:4d:a6:87:75:be:0c:b6:06:
f8:df:ea:ab:7a:e7:10:41:48:fa:b5:5b:94:b8:dd:
58:8d:6e:45:3f:09:9d:00:5d:cc:36:41:cc:ee:ff:
8e:c4:d6:f1:9a:eb:be:f3:6c:e1:45:31:13:e0:eb:
32:18:3f:30:9e:9a:22:aa:e6:31:8f:37:98:8b:76:
2e:b7:bd:41:1d:7f:5f:bd:4f:47:e2:2b:31:bc:05:
58:5d:c2:7c:62:58:b3:db:cf:a6:46:92:d6:9a:db:
96:ca:1b:60:1f:b5:e1:0c:3d:83:46:34:3a:28:6c:
7c:9b:69:9b:ee:2f:cc:80:c2:ea:f8:d6:3c:92:14:
9b:12:ba:15:86:a9:a3:40:f1:35:8e:1f:0f:aa:23:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0B:3A:0C:60:EB:89:95:DA:45:42:7B:F4:24:7C:69:FE:A4:58:03
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a387aa-04e3-41d5-a92b-bcc77ee65109.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:14:a2:4c:04:25:71:4d:ca:7e:d9:10:a2:d9:d8:cb:18:19:
77:20:f3:bd:c5:2c:82:99:85:66:e9:68:36:c3:16:6f:34:93:
15:11:50:c0:b4:e3:34:51:73:06:ce:ec:25:a0:50:da:42:4a:
f9:fa:33:0c:71:bc:23:80:e2:a4:80:7c:9b:46:8a:61:7e:87:
02:bc:dd:f0:c1:a6:fc:6d:e7:e5:f5:83:ff:92:3c:b3:4f:70:
0d:5f:9f:50:45:0e:9a:b4:78:2f:95:75:16:56:ce:6d:e0:2c:
3b:57:2d:ea:e6:91:da:91:00:b0:c1:47:a0:ca:72:8a:dc:8c:
76:c5:1c:e5:9b:2d:09:d0:f1:8b:d4:62:5c:a7:e5:83:55:a7:
be:b0:9c:10:b7:bd:51:c3:e1:62:03:50:1e:cd:59:51:77:cc:
c4:2d:c9:55:a7:bf:63:6f:46:32:8c:be:94:cb:ff:71:9e:f9:
d0:d2:ff:22:73:93:94:a4:d9:8e:fa:aa:f5:d4:52:e7:19:3e:
ff:58:c4:ee:40:df:b7:85:ba:b5:63:51:02:d4:86:4d:8e:a6:
e6:5f:58:c5:30:56:f2:73:8a:b3:1a:8a:7c:da:4f:c9:aa:2c:
37:a8:c6:44:8e:f8:fa:da:99:60:ba:e8:a9:2f:88:28:72:ed:
40:8e:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:13 2024 by rpki-client on console-fra.rpki-client.org