Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22d07074-e455-4b5c-bbe5-d5fb31017865.roa
File: 22d07074-e455-4b5c-bbe5-d5fb31017865.roa (raw, json)
Hash identifier: vc9PbtT09tQX5HRhCu+swY2eh+zQNL8nwJrSe3Sm304=
Subject key identifier: 53:67:6B:A3:6C:7C:7C:F5:57:82:8D:37:72:FD:2D:48:76:23:E0:88
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0E5A3DC5AC75C8A6F438D0B797FB33A1B1F03596
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22d07074-e455-4b5c-bbe5-d5fb31017865.roa
Signing time: Fri 29 Dec 2023 00:00:00 +0000
ROA not before: Fri 29 Dec 2023 00:00:00 +0000
ROA not after: Fri 02 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5a:3d:c5:ac:75:c8:a6:f4:38:d0:b7:97:fb:33:a1:b1:f0:35:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 29 00:00:00 2023 GMT
Not After : Feb 2 23:59:59 2024 GMT
Subject: serialNumber=c99bee4eb38b4179abdaf8516fcc8ac88bbe7651bf65481617934699e9eda820, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:9b:0f:8c:c7:96:20:eb:bb:55:a3:a2:db:
a8:b8:58:a8:36:33:31:f5:f9:26:21:ce:be:4f:ce:
e9:5a:85:8d:5c:c5:f1:04:4d:db:67:d9:d1:2e:96:
84:a7:ee:6c:06:28:d3:d3:85:7f:04:a1:b0:ed:4b:
e6:3c:8a:2e:7c:d4:8d:c2:cf:90:29:52:e9:c1:83:
ad:3b:67:a2:5b:fc:52:51:20:9e:6b:b9:23:20:4a:
96:7e:a8:af:8e:83:74:2c:50:b7:6a:12:02:a0:d5:
92:33:2f:89:62:ee:83:3a:b0:85:ad:d6:98:83:cc:
5f:ae:56:c1:cb:3e:59:d5:a1:05:ad:70:7b:da:0a:
ee:d1:c6:2c:e2:23:07:e1:b4:7d:f4:bd:ac:ba:b7:
81:4b:c6:1b:aa:38:12:96:0d:d5:8f:94:29:1f:3e:
1b:76:a0:7f:1b:eb:33:dc:a0:eb:9d:69:89:39:a5:
1d:19:20:06:da:02:bf:d4:33:09:42:3c:05:34:29:
ee:73:3c:7a:c0:71:ad:05:10:ff:7b:20:fb:62:aa:
78:2d:72:0a:a3:bf:36:2f:5e:33:d6:fb:04:d4:4a:
63:e1:1b:59:b0:fb:1b:df:59:93:fd:92:f1:ea:ab:
bd:05:ff:0f:68:8a:7a:de:48:af:96:76:cd:2c:a7:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:67:6B:A3:6C:7C:7C:F5:57:82:8D:37:72:FD:2D:48:76:23:E0:88
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22d07074-e455-4b5c-bbe5-d5fb31017865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fe:96:e3:51:29:ed:24:5a:13:7c:f0:7b:2e:00:d1:84:ea:
05:e0:91:db:a7:4f:b2:81:cb:50:31:41:54:e0:d6:d7:de:73:
9b:f7:89:21:97:73:3f:1c:45:23:08:0c:28:98:02:51:a4:bb:
7d:54:34:5e:ad:ce:35:a5:a5:ca:ee:00:dd:05:d2:7a:49:a8:
46:32:29:52:9d:2b:dc:8c:73:eb:99:42:50:3e:74:f2:1e:a9:
65:04:92:aa:12:44:70:ef:c4:fc:56:58:84:8a:e6:e8:a9:06:
69:7d:9c:6b:bb:c7:d9:70:62:9c:be:c4:3d:4b:b9:26:6c:8e:
06:16:22:63:ec:42:71:8b:0a:80:55:97:5c:76:06:c4:6e:f0:
fc:6a:fe:e5:09:92:0a:b7:c3:b6:3e:86:61:61:76:36:19:03:
8b:22:54:a5:f4:a7:88:d8:41:85:84:ad:2c:f2:fe:0e:29:d2:
e7:69:b0:94:ae:7d:67:89:dc:0c:5c:a5:d1:c5:a3:88:41:7d:
d4:1a:ca:c6:1d:46:a6:1b:31:96:96:69:5e:8f:7d:1a:32:02:
72:05:d7:b0:29:00:d4:b9:53:0b:c9:39:67:36:d9:05:67:2a:
1a:4f:0d:ca:3c:b7:50:0e:9c:6c:90:b0:57:13:2c:55:3d:11:
b0:f2:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:14 2024 by rpki-client on console-fra.rpki-client.org