Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/243809da-fe32-461d-ab45-764a82169098.roa
File: 243809da-fe32-461d-ab45-764a82169098.roa (raw, json)
Hash identifier: p/b3Ki5Dj7pQvbcAeIleDUan+VXHrcbN1DsVIMbEoI0=
Subject key identifier: 23:69:42:17:79:10:C1:75:D0:B7:7A:AA:28:6B:3A:DC:CE:BD:72:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6087AEDB3DBA9AF7DA941BE270FEFF719B591D51
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/243809da-fe32-461d-ab45-764a82169098.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:87:ae:db:3d:ba:9a:f7:da:94:1b:e2:70:fe:ff:71:9b:59:1d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: serialNumber=6f6b2efbe95bfbef75c6da7f90d329ee8c8d077c4f6c40f27ce93285f3f01de9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:85:82:e5:57:08:81:50:62:6c:1c:79:b0:
c0:b6:be:18:6e:24:21:15:70:82:cf:59:ef:f6:38:
f8:87:7c:84:cb:12:1e:fd:89:aa:00:f3:17:85:42:
cc:70:f0:9d:36:e8:bc:cb:be:c7:84:c4:23:87:7d:
14:3a:ea:70:f2:30:52:9b:96:3e:50:73:05:94:f5:
f4:03:a8:d5:86:00:41:f2:f4:2d:ad:ff:56:2b:25:
a2:e0:cf:a9:49:0d:d0:b4:dc:e2:44:33:4e:35:c0:
8c:7f:23:86:e8:0d:e6:13:c0:97:65:90:1d:31:e9:
2f:87:71:43:b9:af:cc:b5:14:b3:bd:d4:1c:e1:f5:
97:4e:99:cb:1d:b8:a3:9c:54:87:fb:6f:f7:01:7c:
02:71:01:4c:9d:1b:df:7a:04:24:7c:92:51:fb:2a:
68:07:ec:b9:c4:48:70:39:43:a4:a7:af:d7:c0:bc:
7d:49:7b:00:9f:c6:76:f7:38:3f:c6:8f:e4:34:38:
ea:2b:6b:db:ae:12:df:10:f8:d9:28:97:cc:a0:7d:
1e:38:3f:2b:90:18:11:28:2a:ec:6f:59:b0:9b:4e:
39:8f:51:fe:d6:d8:d5:28:d2:26:7b:0f:8a:3b:f4:
33:41:64:b2:5f:03:90:c2:a1:ae:4b:f9:d7:82:1c:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:42:17:79:10:C1:75:D0:B7:7A:AA:28:6B:3A:DC:CE:BD:72:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/243809da-fe32-461d-ab45-764a82169098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
45:86:02:96:59:0c:e9:97:84:fd:ca:cd:53:97:23:1a:fd:ac:
ae:55:89:96:f7:69:d8:1f:f1:17:95:41:b7:58:94:56:66:ab:
cd:b5:ee:26:4a:76:a3:dd:bc:f6:6c:14:f3:aa:c6:4a:cd:20:
74:f6:3c:bd:82:a7:12:30:7d:65:8c:0d:bc:85:09:00:b5:a2:
7d:4d:17:9f:69:79:a7:5f:a1:dc:af:1b:84:1c:46:3e:23:cf:
dc:d0:19:f7:87:d6:3f:06:8f:20:c5:3c:78:a3:9a:fd:e0:93:
6a:88:22:54:ef:86:5d:ca:2c:8b:b7:bc:f0:9b:44:ad:f3:cd:
40:e2:20:f3:8f:37:25:72:2a:c7:dc:b9:7a:f8:a7:fe:9b:ec:
14:fc:21:d2:39:3f:14:4f:ad:12:bd:2f:45:17:13:e8:69:89:
25:27:a4:ac:88:c8:26:4d:dd:ca:39:bb:09:9d:bf:2c:40:52:
a1:b3:66:58:37:ae:5d:63:4b:de:fd:58:3c:dc:a9:55:7f:a9:
16:2c:a3:69:88:7f:41:d3:01:15:09:ff:4a:35:00:bd:58:51:
37:92:4c:e0:46:dc:cb:d7:0c:dc:d4:d0:13:49:ef:f5:a2:29:
ad:d8:9f:b1:85:59:f5:e0:39:07:f4:b8:98:fa:0d:5f:67:07:
fe:0c:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:56 2024 by rpki-client on console-ams.rpki-client.org