Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/271c04dc-42b6-41cf-82ee-9acf2967c282.roa
File: 271c04dc-42b6-41cf-82ee-9acf2967c282.roa (raw, json)
Hash identifier: VDBvA5/f/dwd+UEW8Q1SUcnTlrDKeyNsJIXDZBnIU1Q=
Subject key identifier: 0A:4F:C7:F1:99:79:1A:42:30:A1:26:22:27:F7:05:AD:A6:0D:88:FE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 685F89BF6E1F9A75D8D58B28C31322158BE695C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/271c04dc-42b6-41cf-82ee-9acf2967c282.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5f:89:bf:6e:1f:9a:75:d8:d5:8b:28:c3:13:22:15:8b:e6:95:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=b14db2cc84d25de446a7217e81d567c3356a4f3f77a0b6400d072810428bece5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:54:3d:6c:37:cb:28:df:73:a5:cc:0a:38:
38:e6:7d:a0:1c:45:dc:8d:f5:d3:e0:6f:cc:17:9b:
e8:eb:a4:75:08:ea:6c:00:82:56:ec:cd:63:b2:9e:
00:11:eb:dc:6e:3b:7d:a7:10:aa:04:23:a2:26:68:
03:5f:79:71:22:78:39:39:58:6a:20:df:cc:c5:28:
86:8b:47:fb:de:99:96:9d:72:df:a4:e2:a0:ea:f6:
20:ae:5c:92:ef:b2:ee:7f:b1:48:32:0f:a8:2d:3e:
51:df:17:b0:17:be:97:ae:4b:81:78:d2:4d:ab:e2:
10:8c:bc:4b:a9:fd:bb:52:f3:6b:ef:81:64:b9:88:
fa:72:d5:e2:78:03:30:56:f4:a3:13:ea:ef:12:89:
75:61:28:da:23:20:cb:22:83:46:5b:e4:90:b8:6b:
1d:f9:ba:a4:56:49:9b:67:0e:3a:18:ee:e6:dc:e4:
1e:04:17:ab:e3:da:c3:8a:8e:d8:3b:4a:b2:d3:68:
d2:40:4d:6e:34:7e:34:c1:99:7a:58:bb:48:ec:ee:
6b:f3:93:bf:ab:1a:ea:8d:71:8f:e5:4b:7a:1f:d8:
00:b9:f6:6c:ac:16:c0:71:2d:11:dd:c0:70:9e:07:
a8:3b:08:15:60:36:56:88:4a:33:b3:b7:eb:be:c2:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:C7:F1:99:79:1A:42:30:A1:26:22:27:F7:05:AD:A6:0D:88:FE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/271c04dc-42b6-41cf-82ee-9acf2967c282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b2:ec:09:d3:89:04:52:99:ba:51:8c:3b:5c:03:10:29:0e:
26:e2:b3:51:b4:fe:8a:83:a1:27:3b:f8:03:60:84:4e:a1:34:
1c:24:d9:e8:46:00:c5:84:ce:35:3b:5c:91:80:18:0b:dc:79:
23:a4:c4:88:88:b8:5d:be:07:9e:1c:ac:54:de:01:3c:d4:f1:
cc:e9:6a:1c:88:55:2f:d7:f9:ca:75:8a:a5:d1:96:e7:57:9a:
02:71:1c:f4:60:2b:88:9d:a1:fa:8f:85:08:af:6d:11:87:f6:
c3:c7:fb:82:92:07:d2:a2:61:c3:20:7b:e6:a8:f2:dc:40:bd:
af:90:46:27:88:68:6e:df:00:fe:45:2f:78:e8:d9:2f:2c:9b:
c0:dd:f4:c9:2a:28:51:ce:ef:51:af:ff:ba:41:c9:0b:67:e1:
e3:e5:81:74:9a:65:04:e0:1f:da:58:9f:77:93:c2:3b:b5:08:
88:83:03:8b:a0:c0:35:df:ad:7d:57:8c:de:ed:2c:b1:e0:88:
f3:20:1f:bb:7a:e9:24:d9:75:4d:ae:53:4e:cd:c0:10:87:60:
51:3f:16:8e:97:ba:4e:4e:e7:1d:fd:50:d4:08:09:bd:d2:56:
89:72:2c:bb:13:cb:33:53:55:48:f0:ef:68:80:bd:fd:7e:dc:
b0:a9:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:15 2024 by rpki-client on console-fra.rpki-client.org