Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26afe79b-999d-43f2-bb77-3ac6f7c39c80.roa
File: 26afe79b-999d-43f2-bb77-3ac6f7c39c80.roa (raw, json)
Hash identifier: SaA1yjx9jYwYUexasr/S0rg/6ZS+tMRIN2LcX0Gnq1A=
Subject key identifier: 0C:E8:DE:A6:83:B0:66:62:C4:3D:D0:AE:19:D4:AD:08:5C:FE:03:98
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3605CE197E1FA984C0F4DD0661D443F95AE76888
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26afe79b-999d-43f2-bb77-3ac6f7c39c80.roa
Signing time: Wed 06 Sep 2023 00:00:00 +0000
ROA not before: Wed 06 Sep 2023 00:00:00 +0000
ROA not after: Wed 11 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:05:ce:19:7e:1f:a9:84:c0:f4:dd:06:61:d4:43:f9:5a:e7:68:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 6 00:00:00 2023 GMT
Not After : Oct 11 23:59:59 2023 GMT
Subject: serialNumber=b1742ff77bc108d5cd1a61eee719c25cac38f377aa72ebd39195a67169463b8e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:05:25:c4:6f:88:bb:8f:48:ce:14:93:26:
0e:55:da:05:c7:2e:1c:a0:d2:1f:1f:8c:c9:40:ff:
83:8b:8e:d4:30:f7:16:ab:12:f2:85:f7:ec:cf:05:
1d:5d:33:95:41:d1:c8:6a:a3:0a:96:c7:08:d1:a8:
db:02:6a:aa:72:9b:be:b3:9b:67:a6:39:24:6a:12:
ce:89:d5:c1:6e:d7:56:10:bb:7d:1f:b2:a0:5c:ad:
17:39:2a:81:61:c5:a4:25:55:3b:db:5c:27:29:14:
04:6c:a5:4c:09:06:a4:05:4b:a7:6e:c9:2c:60:2f:
e2:c3:9b:ca:a1:d1:17:f0:f9:e1:ff:a3:0b:86:d1:
e8:53:9d:4c:61:db:af:04:35:43:75:ff:62:ed:cd:
1f:10:e6:13:d8:d4:1b:44:09:e4:51:f0:d8:b9:02:
6c:f9:b0:09:1b:88:34:38:8e:1e:53:cb:67:9c:06:
14:d5:91:5b:ee:c6:81:4b:8d:77:ca:e3:0c:a7:f2:
e8:1f:d4:b7:47:e9:aa:dd:c8:67:ba:29:09:7c:e0:
06:e3:09:70:7d:16:eb:28:4f:20:78:f3:53:b8:a6:
65:43:f7:18:1b:3e:08:95:22:c5:1c:b9:97:16:9e:
e0:26:54:68:45:55:2c:5e:d0:33:ff:ae:1c:3b:a3:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:DE:A6:83:B0:66:62:C4:3D:D0:AE:19:D4:AD:08:5C:FE:03:98
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26afe79b-999d-43f2-bb77-3ac6f7c39c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d0:5e:36:ab:69:aa:07:98:02:27:25:3a:4d:6e:ba:37:2d:
ad:9d:b8:da:15:34:56:c8:d8:5c:cb:af:12:ce:47:f2:c8:8e:
69:b1:3b:1f:54:45:cf:53:1b:49:e3:90:f7:96:6b:25:ac:5f:
88:2f:fe:ee:37:b9:f7:f2:79:44:21:1e:4b:b6:c3:de:be:5c:
e6:64:1f:64:4c:fc:44:c6:75:b6:94:fe:eb:c5:c0:5e:70:ef:
1e:61:b6:34:c7:d0:91:06:72:a7:ae:bf:7f:e1:24:4b:54:0c:
8c:62:68:ef:bf:fd:69:05:61:87:39:46:94:1a:1a:09:9b:c2:
d5:aa:73:76:29:2f:8b:76:9a:61:9c:f0:b1:94:b0:1f:4b:ea:
46:3a:3f:3e:1c:49:06:4b:d0:1c:6e:b0:06:64:7e:d4:e1:d3:
cc:c1:d2:4e:6b:22:0a:19:d0:9e:49:60:18:e9:77:f3:d1:d1:
d4:54:8f:8b:fc:7e:84:3d:c4:e4:d8:e2:03:c6:af:d9:75:f0:
f6:77:d3:64:02:6e:c1:56:57:0d:fa:ed:6b:c7:4a:22:2c:0c:
ca:9a:11:e8:51:0f:5f:5b:5c:31:ca:70:65:25:c0:18:cf:bc:
3b:a0:f1:ac:28:1b:b2:24:b1:7a:d6:a4:20:15:a8:16:4a:dc:
03:98:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:57 2024 by rpki-client on console-ams.rpki-client.org