Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18262b70-1d4b-441e-a124-016bd480e596.roa
File: 18262b70-1d4b-441e-a124-016bd480e596.roa (raw, json)
Hash identifier: YUKg63eYfD0E+VB8xJXOiIjOlY6a8UrQnVZG2LK2Dkg=
Subject key identifier: 54:D3:15:0D:08:42:C7:F3:60:96:8A:97:D4:BB:8D:1D:83:69:84:5C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 36A4C7442BFEE61DDF8A914C07CDF1686638A08C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18262b70-1d4b-441e-a124-016bd480e596.roa
Signing time: Mon 01 Jan 2024 00:00:00 +0000
ROA not before: Mon 01 Jan 2024 00:00:00 +0000
ROA not after: Mon 05 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a4:c7:44:2b:fe:e6:1d:df:8a:91:4c:07:cd:f1:68:66:38:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 1 00:00:00 2024 GMT
Not After : Feb 5 23:59:59 2024 GMT
Subject: serialNumber=21cbb3701f15df7ff11daa614ba2098a1af45a507f8e9c3f3d1442438f1a330d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:e0:55:22:ea:09:b7:a0:31:25:da:0f:07:
36:69:ff:5e:7e:24:c4:47:90:9d:9f:e9:6f:cb:20:
c0:3f:5b:73:e9:f5:0d:3e:a0:70:9b:6c:a2:97:c2:
70:0c:15:2b:6e:0f:ff:63:50:97:cb:63:61:84:f7:
ee:6e:d9:40:80:ab:a4:ef:cb:73:92:54:37:53:55:
42:64:d6:33:e3:80:00:0d:94:4c:6e:dd:29:8e:47:
f1:75:05:41:2f:b9:4b:59:5f:06:e9:75:7f:6b:0d:
23:f1:cd:bb:ea:e3:0c:c6:d1:4b:19:18:2a:1e:bf:
96:79:87:1c:7f:7c:fc:e0:f7:8b:95:4b:b2:c6:5d:
45:5d:28:39:10:10:a7:de:de:77:02:40:e7:0e:d4:
d5:d7:eb:d3:6c:96:bd:a7:74:a6:11:e1:19:94:94:
88:9a:13:b4:ac:4c:a9:db:c0:7d:37:4e:f5:1b:80:
4c:cc:77:40:86:e6:6e:b1:9b:60:88:c6:a1:31:14:
f7:6d:4d:62:7f:64:f4:e8:e1:49:c3:a6:8c:d3:3f:
4d:5a:19:46:8b:db:70:00:fe:95:25:24:44:5f:01:
95:16:54:67:7c:8c:6d:3b:5f:da:98:38:1b:0a:7b:
f9:ae:fa:fb:d2:02:31:0f:60:15:d2:70:55:9c:53:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D3:15:0D:08:42:C7:F3:60:96:8A:97:D4:BB:8D:1D:83:69:84:5C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18262b70-1d4b-441e-a124-016bd480e596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a6:02:1c:6c:0a:81:80:90:f5:ef:7a:d0:3a:23:bf:34:33:
80:86:54:2d:08:f0:b6:c2:20:47:7e:da:f4:3c:a3:b8:8f:1d:
dc:0c:2a:23:24:c3:f1:d5:f1:8b:8a:5b:9d:b9:4c:f1:7a:2f:
ba:a8:1b:b5:be:f9:39:e0:a8:7c:3a:c8:33:3d:b2:43:5c:d4:
a1:a8:3d:79:a4:73:55:da:da:a7:ea:b9:3e:c5:ed:bd:0d:c8:
16:6e:0d:22:bc:07:14:08:4a:f8:94:e0:d1:4e:a5:57:b8:1e:
73:7c:b1:df:5d:ed:1c:d5:3b:a4:28:f1:a6:da:8f:73:8a:d2:
67:8e:1e:ae:36:8c:d0:13:07:92:f2:6f:ec:70:ae:1c:30:5a:
62:45:54:0c:cf:f2:a5:1b:91:8c:ee:72:f9:a6:fc:9e:61:c3:
1e:15:dc:03:3f:2f:14:9c:bf:c1:25:de:60:8d:37:52:e3:52:
75:23:d6:b2:16:c7:f2:75:b3:c0:f3:8c:76:06:f3:b8:01:e4:
a3:6c:9e:d5:c4:1c:92:ea:88:eb:81:09:e4:d1:e5:42:2c:1b:
54:79:ca:08:e7:ba:b5:59:4a:49:87:02:e6:1e:2d:4e:87:77:
a6:e5:78:19:bc:30:f6:e6:ec:57:33:e7:6e:53:8b:76:12:d6:
e3:98:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:13 2024 by rpki-client on console-fra.rpki-client.org