Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3602e80b-f946-45a5-8606-a5abae196dd7.roa
File: 3602e80b-f946-45a5-8606-a5abae196dd7.roa (raw, json)
Hash identifier: WeLVb/4hJqdEBSVMwTK3yNXlDf5mSxgttvKJuaEJD7g=
Subject key identifier: E5:4C:D4:1F:77:F6:D3:EF:69:8A:CF:18:35:F9:CF:7F:EC:7D:FB:46
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A4100447BA4F0513F6DAED3A731D1CF73AB197A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3602e80b-f946-45a5-8606-a5abae196dd7.roa
Signing time: Thu 09 Nov 2023 00:00:00 +0000
ROA not before: Thu 09 Nov 2023 00:00:00 +0000
ROA not after: Thu 14 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:41:00:44:7b:a4:f0:51:3f:6d:ae:d3:a7:31:d1:cf:73:ab:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2023 GMT
Not After : Dec 14 23:59:59 2023 GMT
Subject: serialNumber=a47955dddbf53f29137a65950ae13a825adf6f211dea4ae5083ae9e5a98a6b4e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:72:0d:8b:71:77:72:4d:e6:a3:36:8f:a9:
47:06:dd:9b:8e:4c:77:0a:e3:e3:3c:07:2c:c3:9c:
b9:3b:fb:d2:6d:47:5c:67:74:29:ff:0e:3a:2c:0a:
a6:4f:65:31:0f:e9:51:44:d2:35:c7:32:c5:43:bb:
5a:7c:af:3a:46:d7:94:49:f4:ad:3e:71:7e:69:da:
af:3c:57:35:3b:3a:24:d7:c9:02:05:bd:88:58:5b:
83:72:00:37:42:14:74:d4:20:e4:50:7e:90:89:89:
6b:3a:5a:96:35:5e:c7:ed:c9:3f:30:60:ed:87:a0:
f2:08:ff:40:12:c2:90:93:75:a2:a1:ea:b0:db:bc:
62:0b:e5:eb:89:ad:f8:50:5d:f2:de:f7:ec:ef:15:
f6:02:1e:73:40:f0:df:6f:26:56:a3:8c:26:9f:87:
6e:48:a6:8d:f6:05:d1:1a:5e:8d:ba:34:55:df:e0:
03:17:6f:6f:0c:5c:c6:d6:c4:3e:54:1d:f5:87:47:
96:09:14:ec:f0:01:b8:aa:f6:71:4e:be:54:b7:3e:
8f:58:b9:2e:df:c0:a5:3c:e1:90:40:cc:f4:ff:37:
47:81:f3:01:c9:36:06:99:9c:66:e0:0e:54:51:cb:
18:51:af:a3:b9:69:76:04:93:30:0f:1f:ab:ff:3a:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4C:D4:1F:77:F6:D3:EF:69:8A:CF:18:35:F9:CF:7F:EC:7D:FB:46
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3602e80b-f946-45a5-8606-a5abae196dd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3b:1a:b1:cd:45:64:54:95:39:86:c2:82:84:d5:87:58:e5:
ea:4c:13:f4:25:d6:c6:de:6c:f1:29:3f:1a:d2:c8:bf:22:54:
2a:2e:2c:26:2e:ae:19:6f:9f:9c:33:fa:4d:2d:49:bd:11:d8:
e2:38:c9:04:53:5a:70:38:7d:51:1f:3a:ab:6d:d6:e8:00:60:
1f:74:ad:cd:1c:6c:e8:e7:37:69:1b:19:55:93:be:5c:1b:2f:
60:48:74:60:ec:90:f9:42:9c:21:07:26:6f:87:60:af:01:bc:
72:a1:1f:9d:d7:fd:2d:85:a3:6e:f0:21:80:d7:44:9a:f3:df:
39:66:17:61:b9:64:9b:4e:a6:dd:ab:77:0f:15:de:3a:6e:18:
cd:62:03:1f:7b:f5:74:60:47:9f:47:cf:29:c8:ea:99:f1:ff:
d7:24:d2:78:24:48:6c:71:69:28:fa:d9:53:e1:b1:4d:b2:9a:
e2:ef:62:30:e6:1e:f4:f5:10:71:cb:d9:c4:4d:65:cf:57:61:
c1:8c:6d:8c:2d:35:15:54:a1:ca:7a:a3:02:5b:2e:a0:43:3c:
e0:b2:98:ea:3a:22:c3:f8:d2:7e:41:d8:3f:1d:8b:27:4b:dd:
6d:53:75:47:8d:5c:ad:f6:05:b4:30:40:67:e5:d1:71:bd:9d:
fb:ce:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:00 2024 by rpki-client on console-ams.rpki-client.org