Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34363acd-e874-436a-9e4e-ee5ddff8c79a.roa
File: 34363acd-e874-436a-9e4e-ee5ddff8c79a.roa (raw, json)
Hash identifier: H2niiV80Jh1uLdaUTpJDrFEheAfCrx4TQYN7SRIfdJM=
Subject key identifier: 5F:35:61:43:EB:68:A2:EA:FF:2F:A8:8B:78:42:15:06:AD:E9:65:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 47CB0BC5F2933A5B1DF967DB200A9CCC1EA7E3D8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34363acd-e874-436a-9e4e-ee5ddff8c79a.roa
Signing time: Tue 05 Sep 2023 00:00:00 +0000
ROA not before: Tue 05 Sep 2023 00:00:00 +0000
ROA not after: Tue 10 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cb:0b:c5:f2:93:3a:5b:1d:f9:67:db:20:0a:9c:cc:1e:a7:e3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 5 00:00:00 2023 GMT
Not After : Oct 10 23:59:59 2023 GMT
Subject: serialNumber=6966b76a3fd596db8b4bad60ab1f30141a647f3639041e2a86743d335b222283, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:ca:a0:f1:20:e7:4c:12:c8:40:4f:a6:83:
fc:07:99:a4:06:16:d6:9f:aa:25:07:30:64:15:4a:
f2:3c:04:b5:6e:98:73:c3:6d:ed:c0:14:87:0b:0a:
85:11:e3:eb:bd:2a:49:ec:42:51:76:34:f6:58:34:
6f:ff:52:a3:dc:8a:d3:fd:ac:b7:1b:90:ae:38:76:
96:07:ff:f3:10:82:ba:1d:dd:8b:00:cd:6e:b1:c4:
1d:c1:6d:7d:11:07:0f:69:f3:bd:46:de:81:64:0a:
5d:b9:ff:80:03:a3:23:73:c4:28:f0:8b:07:24:76:
8b:01:9b:50:07:9e:a8:72:ab:f7:28:67:94:54:10:
b6:6b:df:1a:e6:76:02:f7:93:56:fe:e9:3d:83:db:
a5:59:e5:e2:73:ac:95:cb:6f:25:c8:cd:11:2c:98:
50:cf:76:7f:bb:fb:f9:be:67:61:b3:82:6e:9c:7b:
92:f8:5f:98:41:e8:be:3c:1d:a0:d3:b8:3e:df:4d:
63:4d:f1:e1:54:05:72:a3:76:f0:25:b4:17:c8:3f:
4f:8a:44:b9:91:89:10:2d:fd:53:0e:f5:a0:b0:ec:
7f:01:bc:10:3a:26:a2:55:11:73:76:c4:b9:20:5e:
a8:60:6c:16:df:2e:0b:bc:06:fd:48:16:73:d3:09:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:35:61:43:EB:68:A2:EA:FF:2F:A8:8B:78:42:15:06:AD:E9:65:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34363acd-e874-436a-9e4e-ee5ddff8c79a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:01:b7:a5:3c:e5:ae:7f:1d:12:cb:2a:e0:e1:d0:d3:42:65:
8b:a8:ed:68:4d:82:8b:ce:44:83:8b:57:77:40:b4:c2:74:96:
17:f6:71:19:66:c8:c9:7e:4c:40:8f:a7:83:44:96:2a:2c:53:
b4:e7:49:49:c7:6a:fa:a2:88:58:2d:a3:98:17:ec:0b:8c:db:
e2:ab:77:e6:cc:5b:89:87:25:45:ab:c9:d1:84:c3:90:43:16:
c4:b1:cd:cc:60:d2:42:39:7b:e7:f4:5d:21:16:dd:2c:f2:1d:
fb:79:4f:df:ec:1c:41:62:93:f5:bc:89:cb:ad:01:ae:88:cb:
df:cc:5b:f0:84:b3:d7:32:a6:a2:1b:d0:19:6c:b1:a7:a8:6a:
21:dc:b2:47:3b:6e:f4:1d:e7:98:a3:64:2e:7b:87:00:e6:3e:
da:b5:c5:f0:80:65:da:f4:ff:7b:f9:c0:3b:0d:75:0f:5d:2b:
70:81:f6:3d:73:ec:d7:b1:79:70:5c:c2:3f:70:44:20:61:eb:
f5:26:2a:ac:ef:08:b8:19:cb:ee:a7:36:1d:7a:3b:60:a9:ff:
2e:d3:88:63:ed:5e:06:d3:6c:19:a2:46:37:6f:7f:2b:89:a0:
14:a1:d8:3b:94:e5:48:12:1d:b1:98:93:8e:45:15:e3:17:2b:
4f:d7:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:00 2024 by rpki-client on console-ams.rpki-client.org