Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f15497f-8cba-4611-a7de-cf00fd6ac0a9.roa
File: 1f15497f-8cba-4611-a7de-cf00fd6ac0a9.roa (raw, json)
Hash identifier: f8tRK6OAyagUUo/85Gwhn2Occ14V2qlHAphbqlekicE=
Subject key identifier: 5F:2A:FB:53:14:0E:18:3B:45:25:51:3D:7C:95:13:6B:3B:F9:18:EC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: D3B3E96B14A76449ACF43CFC533716A21F06BC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f15497f-8cba-4611-a7de-cf00fd6ac0a9.roa
Signing time: Sun 31 Mar 2024 00:00:00 +0000
ROA not before: Sun 31 Mar 2024 00:00:00 +0000
ROA not after: Sun 05 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d3:b3:e9:6b:14:a7:64:49:ac:f4:3c:fc:53:37:16:a2:1f:06:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 31 00:00:00 2024 GMT
Not After : May 5 23:59:59 2024 GMT
Subject: serialNumber=0dc34a055997d0389f09c59c3e37fd4d72c2d4abe0c320edcfc70a273a735ad8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:6c:b1:0e:ab:fc:fc:a0:4b:6d:80:9c:a4:
69:1f:c1:d3:59:c6:44:61:3a:65:9b:c5:84:56:e4:
c6:8e:74:52:e0:0c:66:4d:90:66:bb:c7:4b:c4:ca:
24:86:35:2b:cc:d4:84:ba:1f:5f:4d:85:5f:fe:82:
0b:73:cd:0c:a1:75:d2:3e:67:40:3d:86:9b:dc:b7:
4b:a0:06:70:be:4a:c3:de:e2:40:b1:4e:25:07:61:
0d:69:58:ae:33:ec:31:4a:bc:fd:3e:b8:84:9b:89:
67:af:df:22:a1:86:62:6d:72:94:6b:a8:c6:2f:f5:
aa:89:5b:9d:bf:5c:c9:e4:64:55:dd:60:14:e2:7d:
8d:0f:41:dd:0a:5c:44:1d:eb:8c:03:19:ad:62:1a:
7f:2f:85:11:cd:35:31:fb:ed:1d:05:11:eb:d9:02:
27:69:27:ef:31:21:6c:d0:8b:ff:ab:bb:d0:11:e1:
cc:0f:52:0b:c9:ac:c4:84:28:f5:85:bd:99:88:16:
22:f2:ce:af:75:0f:0b:68:2d:00:be:2c:73:1f:f4:
5c:04:cf:b4:75:6a:56:ce:7d:d7:58:54:e6:68:79:
12:6b:df:1c:a5:19:39:73:9d:dc:cd:cf:91:3d:13:
08:11:69:37:5c:21:af:79:27:cb:b0:aa:d0:a5:db:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:FB:53:14:0E:18:3B:45:25:51:3D:7C:95:13:6B:3B:F9:18:EC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f15497f-8cba-4611-a7de-cf00fd6ac0a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4f:2c:26:64:fa:9e:bc:c9:27:25:9b:ef:2a:f0:18:7f:59:
cf:0d:0c:c4:f9:a0:50:5b:1e:50:29:c2:c1:e8:50:52:16:13:
51:2c:65:15:e7:aa:dc:62:00:c4:af:c1:0b:8f:e7:ed:97:77:
2c:54:31:69:e8:ee:3d:5e:72:a9:7a:09:0a:09:94:c5:10:bc:
df:78:60:4f:4f:2d:0f:09:98:cd:0f:58:f4:6f:d6:6b:4c:b5:
7a:ae:12:63:fa:d5:dc:e4:2e:68:89:56:98:62:51:89:cf:ed:
41:8e:9e:49:a1:9f:08:52:23:62:84:5a:e8:0c:30:be:bd:9d:
76:b4:d0:97:45:f8:0b:92:bf:d2:ae:2c:26:31:16:0b:19:29:
6c:89:09:4a:34:8a:64:ff:13:88:ba:0a:08:7d:c9:17:f4:1e:
0c:65:ab:22:73:11:d2:83:1b:34:e0:05:7e:07:d0:19:0c:7d:
6b:70:75:81:b0:2f:bf:02:59:75:99:02:b7:8b:0a:c9:b7:52:
6a:cd:18:eb:b0:22:48:b0:b2:81:39:ac:55:1a:9f:56:47:0c:
b3:70:b4:25:49:a9:79:d5:c1:fb:c3:01:fc:1d:92:93:c9:ae:
40:53:56:d6:a7:3b:e5:35:0d:82:ca:27:c6:30:bf:c8:3b:64:
8c:e7:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:55 2024 by rpki-client on console-ams.rpki-client.org