Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/222d4f45-6796-498e-bcf3-d596963e75b4.roa
File: 222d4f45-6796-498e-bcf3-d596963e75b4.roa (raw, json)
Hash identifier: d+pPgbOneDhrMGsvhxpkAmkTPgCjbzo3bggR94jSgos=
Subject key identifier: 53:ED:E0:38:D0:A8:D9:45:1B:B2:34:80:B8:48:B0:C6:ED:45:AD:A7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E9E1A546B01E67DF3AA79DE03554888A0715DA5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/222d4f45-6796-498e-bcf3-d596963e75b4.roa
Signing time: Tue 06 Feb 2024 00:00:00 +0000
ROA not before: Tue 06 Feb 2024 00:00:00 +0000
ROA not after: Tue 12 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9e:1a:54:6b:01:e6:7d:f3:aa:79:de:03:55:48:88:a0:71:5d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 6 00:00:00 2024 GMT
Not After : Mar 12 23:59:59 2024 GMT
Subject: serialNumber=29267eec9daf84a5d52a535b1ff538ea9ab030a7661294e77ab94fadc66712ce, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:d0:7c:b4:5f:34:1b:36:27:09:77:08:3b:
3a:fc:5c:5f:8b:86:6b:54:92:26:f9:bc:07:27:35:
a2:64:70:7f:9a:6e:55:aa:40:f4:35:07:17:6f:11:
48:00:9b:fd:91:cf:7a:a8:f7:4b:95:7c:7e:5b:38:
6b:92:f7:50:62:44:32:5a:94:15:ef:78:f4:ce:06:
08:6e:f5:0a:df:5d:c5:c0:a2:41:1f:b3:6f:6b:1f:
1a:48:91:93:3e:ff:7f:fa:fd:2e:b0:2e:75:b6:d5:
6b:d2:49:c5:12:73:0b:9c:0f:ea:9e:c8:99:68:3e:
50:a6:54:fc:e1:60:da:48:af:b6:72:c1:1b:c1:c6:
d7:ec:90:87:90:d8:27:30:c5:24:f5:f7:83:7f:31:
46:6e:f1:ab:a3:8a:d4:d2:b7:4c:4c:de:9f:7f:0e:
45:79:94:36:18:d3:5e:97:55:36:fd:ca:9c:52:2f:
63:51:37:ed:9e:83:2d:65:8a:bb:c6:5c:58:96:3c:
cd:22:af:d3:c0:ea:42:83:ca:4e:94:f6:c0:c0:b0:
da:d6:1f:c1:c7:ec:ea:b9:f5:ca:ff:ab:5f:c0:c2:
b7:c1:49:9e:46:55:35:0e:55:28:bd:0f:27:67:e4:
7d:31:3b:24:76:71:51:9f:d2:59:3b:ec:9c:4d:1b:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:E0:38:D0:A8:D9:45:1B:B2:34:80:B8:48:B0:C6:ED:45:AD:A7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/222d4f45-6796-498e-bcf3-d596963e75b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9b:ea:19:d3:da:81:e6:36:c3:99:25:0e:43:a6:1d:5c:e7:
4d:38:47:d1:d0:b2:96:b8:0e:3d:5a:e5:79:71:ad:85:12:2d:
28:1b:dd:53:1b:6d:de:82:64:11:da:25:ec:ab:c3:ff:63:2c:
a7:92:88:83:fc:b5:d6:1e:1f:b0:68:b5:67:44:b6:a3:52:c3:
dc:0a:bb:a5:bd:e5:e6:6c:ce:36:ab:d7:b2:c1:7c:23:ca:61:
83:1f:06:a5:19:a8:81:2e:0a:f3:55:a8:da:df:96:60:77:e1:
ab:34:29:2b:57:54:4b:a5:e3:43:e3:29:97:15:4a:ff:a4:82:
10:1b:0e:17:65:41:c0:ac:92:34:a7:92:52:a8:c3:5c:86:4d:
0d:bf:fb:0d:67:5e:bb:81:d3:d7:2d:7b:98:08:d4:0b:5b:30:
95:6f:43:03:03:1e:31:c4:24:9e:7e:d2:c7:b0:c0:98:cd:15:
ff:e3:1b:e3:66:de:57:1e:45:7e:bd:32:18:c6:5e:4a:96:6f:
2f:d3:ae:e4:f9:63:f6:90:07:91:4a:31:55:9e:13:be:cd:2c:
85:47:2f:e8:22:f9:03:d8:be:c0:60:90:5a:10:a0:d6:de:8f:
6a:1b:2e:03:75:41:12:2f:4e:08:32:9e:3b:8e:30:cd:a4:f9:
e2:32:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:56 2024 by rpki-client on console-ams.rpki-client.org