Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3976ecbc-5d5d-4575-ae32-184aef745080.roa
File: 3976ecbc-5d5d-4575-ae32-184aef745080.roa (raw, json)
Hash identifier: DvSn+G1a7Mhaa/3AEGF+P7BbqBHNWS91GMLUEmAkAbw=
Subject key identifier: 61:09:91:1C:1D:6F:19:28:87:B0:5D:0E:08:42:98:8E:EB:16:EC:89
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 342873738DE2BEEEDB64D5FE40B8E0AACD8E7FD8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3976ecbc-5d5d-4575-ae32-184aef745080.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:28:73:73:8d:e2:be:ee:db:64:d5:fe:40:b8:e0:aa:cd:8e:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=becf38f1cf4f56972ad33039f88fee9ab4918c716634436eabaadc8bd9494de6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:4c:80:b1:6f:af:de:0c:9f:10:20:de:2b:
a0:78:91:2a:a0:bc:85:1c:1f:d8:13:5f:7a:17:dc:
da:0b:1a:c8:3a:ca:07:c3:55:a3:e3:3a:4c:77:97:
88:20:77:6c:38:b8:5a:41:1f:89:a8:06:8b:4b:80:
eb:50:35:06:fe:3a:a0:53:96:93:b0:76:a6:48:82:
56:bb:97:7d:c9:7f:2d:4f:d6:0e:97:31:fd:0a:0c:
fb:82:72:9d:9e:52:b9:c3:ad:d1:f2:95:9a:22:3e:
08:10:b8:74:67:4e:ab:d8:f5:e5:ac:0f:58:51:0f:
d8:1f:5f:d2:86:49:91:87:b8:4f:ea:e6:20:5d:e7:
ec:d2:ab:44:d1:67:e7:38:7c:0b:d7:e6:74:42:14:
6e:81:dc:d3:1b:31:e6:9f:94:fa:98:b4:aa:50:9d:
59:14:9e:9f:7f:ca:d3:ab:90:64:65:fe:9e:7c:fd:
0c:d7:fd:8e:e3:0a:c7:95:7c:56:72:6b:a5:0f:9c:
6d:b0:89:1b:76:21:16:ad:bc:15:49:1e:f8:93:f9:
7e:a1:64:b1:69:c8:2f:b6:03:ad:3a:cb:96:db:25:
85:2d:a0:57:49:9d:c9:89:62:d5:e5:40:95:80:5f:
82:c8:0e:94:7c:79:99:fe:88:69:12:56:26:6e:38:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:91:1C:1D:6F:19:28:87:B0:5D:0E:08:42:98:8E:EB:16:EC:89
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3976ecbc-5d5d-4575-ae32-184aef745080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1a:91:bd:f7:35:f0:e9:2d:ed:33:55:c3:79:60:47:70:37:
09:62:d5:4f:c9:72:b8:18:9f:f6:60:bd:89:34:42:81:fe:b2:
ea:68:09:9f:7c:be:47:39:b3:01:aa:82:7f:a1:62:0d:85:83:
53:15:d3:4c:2b:ef:2f:94:99:68:6b:b5:4e:b7:9e:3f:05:20:
a6:00:c5:97:b6:9b:dc:8c:dd:48:7b:9e:1e:8b:bb:eb:22:5b:
99:70:45:73:b1:a7:9b:b3:98:79:3e:a5:e7:97:cd:0b:71:4c:
16:06:31:bd:52:2b:ab:43:d6:78:03:16:6b:1d:3a:d4:5b:52:
1d:74:8c:d4:38:d7:e9:64:da:6c:d5:09:0a:d1:dc:87:40:6f:
90:d1:c2:18:e6:db:56:7d:4f:44:23:8a:a6:f1:1a:cb:6b:66:
14:09:2e:6f:c2:64:be:8c:96:00:47:09:8c:40:76:85:73:e1:
a9:5b:64:b2:c5:46:01:a6:1d:2f:ee:bc:b4:42:1d:b3:43:be:
25:67:17:d7:bd:e3:30:c1:1e:2c:a9:cb:5a:94:cd:b7:c1:b7:
82:3c:f6:63:14:46:b9:02:11:bf:42:46:44:2b:e0:d9:07:a6:
e8:21:86:69:6c:0a:18:3c:c3:04:ad:ca:1c:9f:02:38:bb:87:
06:bc:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:01 2024 by rpki-client on console-ams.rpki-client.org