Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/31e0b15f-036c-40a8-9ca0-a60e3ceb0419.roa
File: 31e0b15f-036c-40a8-9ca0-a60e3ceb0419.roa (raw, json)
Hash identifier: Vk4hqyqcjAa0zQDEAWf0qt2uXq9jbv1lSsNucDikE/w=
Subject key identifier: 97:0E:A1:B6:42:6E:30:49:08:67:FC:5C:CE:EC:D3:94:6B:71:C5:1A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 449BE7BA748A42A2FA2584B39856A47D16884AA9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/31e0b15f-036c-40a8-9ca0-a60e3ceb0419.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9b:e7:ba:74:8a:42:a2:fa:25:84:b3:98:56:a4:7d:16:88:4a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=fb86651ce69295d441429af592fd75c782846850bd436f53b3b1c5ac873afdb1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c8:91:18:e6:a1:28:8e:02:f9:91:10:29:8c:
92:ba:68:25:b8:94:25:3b:64:6d:5f:45:3f:e0:e0:
e6:02:11:03:83:80:3a:b3:ee:30:31:e2:6f:24:04:
dd:b2:f5:00:f8:bf:31:76:fc:db:aa:e7:ec:67:b7:
12:8a:f9:f0:90:58:b4:89:ef:45:15:c3:ec:3c:c2:
77:a9:bd:9b:63:ac:87:ff:b9:f1:b8:10:7b:8f:e9:
19:a4:00:28:0c:d4:65:f2:9b:5d:e1:8b:b0:85:c6:
e7:74:5d:14:d5:b9:4e:7d:a0:eb:8a:34:87:b0:13:
e6:65:6a:02:59:63:1b:a6:42:0c:b1:6f:b6:4f:89:
36:a6:c7:72:60:9d:86:6d:89:fc:17:7c:19:da:19:
62:48:03:cb:31:cb:83:b9:88:8b:92:e2:71:77:cc:
64:60:79:e0:02:58:19:16:34:ae:2b:08:34:2e:98:
76:2e:d6:a4:96:80:bd:7b:94:8a:9d:00:ed:5e:30:
f9:81:0c:54:f0:80:9b:32:7c:49:ac:58:f2:79:a1:
ee:42:15:93:18:80:79:d7:62:ae:09:ec:53:48:fc:
4d:07:08:fb:c8:62:57:9c:cf:be:54:c7:c7:9f:13:
c0:4d:d1:60:34:4a:3e:de:35:5f:87:66:4d:18:7b:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:A1:B6:42:6E:30:49:08:67:FC:5C:CE:EC:D3:94:6B:71:C5:1A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/31e0b15f-036c-40a8-9ca0-a60e3ceb0419.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:71:51:8e:b3:64:41:99:45:20:bc:f8:9a:8d:13:a8:7a:c6:
58:59:a0:d3:53:77:be:7f:7d:46:8e:bc:e3:ba:ed:be:c4:08:
c3:23:54:0a:f5:c7:ad:3d:de:79:b7:ee:c0:31:e0:bc:2a:19:
97:77:76:de:d6:21:7b:5b:13:01:4a:b5:d6:d5:d3:e4:6f:af:
85:0f:75:66:75:2f:63:e4:69:4d:7a:02:f5:f0:59:d9:26:39:
f6:a5:d5:21:64:7c:a8:68:64:7d:da:90:4d:19:d9:61:f9:10:
a0:a3:1c:eb:4d:a9:87:c4:02:86:54:e1:cb:45:f2:e7:c2:31:
3f:c6:fd:ab:cc:dd:8a:10:a4:e8:0c:be:9d:10:a3:2b:49:ef:
fe:ae:2b:e7:3f:e3:d2:f9:b7:50:2e:f7:66:c3:2a:fc:ab:29:
f9:c6:8b:f7:8c:cd:4f:fd:a0:cf:4d:31:91:e8:0d:63:7f:9d:
bf:7e:ff:0f:bf:06:4b:33:f7:45:41:d5:d4:2c:85:04:a2:d9:
d8:2f:1b:3f:cb:56:48:4b:a1:09:9c:af:be:59:a0:6a:4f:a1:
98:84:f2:d5:da:04:e5:48:01:e0:63:f1:46:09:6f:0d:e6:26:
64:92:88:b0:fd:a2:d2:13:95:bf:f0:c6:6c:d9:b9:d0:3f:b7:
4e:8a:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:59 2024 by rpki-client on console-ams.rpki-client.org