Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/330ebb92-8e2e-4dd3-afab-fc274058c055.roa
File: 330ebb92-8e2e-4dd3-afab-fc274058c055.roa (raw, json)
Hash identifier: P5MydFJaCfKnrQHl3lKv4lUnTSFkLcamANiWF+YUjaU=
Subject key identifier: CF:EF:83:D2:2E:02:BE:E8:78:9B:E9:75:B3:D6:F4:44:1E:A0:E0:95
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4C5E653D6AFF39F2E40E8FB065B7A457D4EB1BAF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/330ebb92-8e2e-4dd3-afab-fc274058c055.roa
Signing time: Fri 07 Jul 2023 00:00:00 +0000
ROA not before: Fri 07 Jul 2023 00:00:00 +0000
ROA not after: Fri 11 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5e:65:3d:6a:ff:39:f2:e4:0e:8f:b0:65:b7:a4:57:d4:eb:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 7 00:00:00 2023 GMT
Not After : Aug 11 23:59:59 2023 GMT
Subject: serialNumber=86baf63a5bb892087d55f15a53cefa09139594b78c5802683278fc010753b603, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:c2:bb:a2:81:f4:3f:63:7e:c6:68:36:ee:
18:ff:8c:a7:a4:fe:59:6c:0b:35:0a:87:42:f2:eb:
b3:9d:e8:c5:10:8c:39:f6:e8:d1:26:12:23:8a:37:
db:65:fa:6f:ef:63:72:e6:15:a8:c7:ff:51:9d:20:
24:96:72:e0:da:ca:6d:98:6f:86:01:d3:d4:6d:e5:
d1:7f:47:c2:cb:48:67:0f:f2:8a:a5:ba:1f:e5:a9:
12:60:7c:45:75:62:51:27:75:ff:c8:3c:75:7f:56:
8d:16:97:fe:b9:b5:c3:e0:39:45:4b:c5:d2:00:90:
de:e4:75:07:8e:46:f2:02:01:4c:35:e4:c2:05:a8:
b2:d0:d6:73:9a:cc:8e:4b:46:12:e3:de:37:b1:58:
d4:61:5d:c5:23:c7:b9:55:db:fa:5e:b5:28:5b:bd:
a3:b6:a0:ce:95:0f:60:b8:d1:0a:97:49:25:61:cf:
a8:fd:57:e7:e5:b9:46:32:a1:b9:3e:0e:04:86:7d:
b6:1c:a7:d7:3f:3a:f9:cf:3b:64:e7:e3:59:9a:e8:
6c:6a:83:59:be:ec:f6:ec:f5:34:8f:88:f4:d2:67:
51:af:29:25:2d:cf:ba:45:e1:80:e8:0e:f7:46:e8:
cc:05:57:0b:2f:92:e0:ec:08:06:ed:85:64:db:e1:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:83:D2:2E:02:BE:E8:78:9B:E9:75:B3:D6:F4:44:1E:A0:E0:95
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/330ebb92-8e2e-4dd3-afab-fc274058c055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:56:f3:b3:3d:15:40:42:a9:eb:d6:40:d3:b8:0c:7b:be:0e:
61:74:23:23:ff:0a:8c:88:8b:00:7b:8b:15:45:22:78:b4:e8:
fc:a7:b4:8a:15:9b:5f:1c:40:c2:ad:66:49:11:38:05:ac:41:
9b:5b:48:71:65:1c:1e:00:06:01:e0:51:80:a1:7a:4e:ad:32:
09:43:92:f9:9f:dc:5a:17:96:71:9f:e0:8c:63:7b:90:67:13:
2e:4b:48:5b:be:52:1c:d4:9d:fa:6f:42:eb:d7:fa:ef:ae:ae:
45:58:6f:64:74:fc:b0:b2:c6:40:02:51:1b:62:08:b8:9d:e3:
09:a4:ec:0f:2a:a4:83:8c:98:4a:73:b8:98:68:df:89:ac:f0:
be:aa:31:db:14:b4:cc:b3:67:15:68:e8:87:1d:4d:a9:81:79:
c1:16:cd:92:af:a5:de:b6:e3:d8:78:05:0e:11:52:df:df:0b:
b3:e0:87:89:bb:c4:6a:31:1e:87:1a:72:f7:42:ee:61:db:39:
98:73:b4:c7:31:66:c0:27:58:e8:c2:b6:42:d0:e8:c0:47:bb:
6f:ae:55:49:ca:a8:6f:c0:b0:0d:ba:8c:34:dd:4f:10:fe:cb:
c5:61:0e:98:cf:77:d7:dd:c2:af:e7:13:d6:22:cc:a7:f1:ae:
de:d3:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:17 2024 by rpki-client on console-fra.rpki-client.org