Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ee361fc-3e25-4901-8cc1-4234893bc2a9.roa
File: 3ee361fc-3e25-4901-8cc1-4234893bc2a9.roa (raw, json)
Hash identifier: viHtDC7MlVTjXcZ52bIDKI1NsaqXGgbKXgLMxqRtKU8=
Subject key identifier: 3F:9F:51:F1:DD:43:0B:8D:84:69:F2:75:A6:0F:38:C6:29:97:8C:5D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6A98BFB4B7A0553971C57BC0E40A225925D86DF6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ee361fc-3e25-4901-8cc1-4234893bc2a9.roa
Signing time: Sun 08 Oct 2023 00:00:00 +0000
ROA not before: Sun 08 Oct 2023 00:00:00 +0000
ROA not after: Sun 12 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:98:bf:b4:b7:a0:55:39:71:c5:7b:c0:e4:0a:22:59:25:d8:6d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 8 00:00:00 2023 GMT
Not After : Nov 12 23:59:59 2023 GMT
Subject: serialNumber=f5a06f5e93295454919e4e3ce5fca2b04ad4946525c6018b0c1031de3dc8f1c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:b7:dc:73:d2:8a:f3:02:f0:1f:dc:d3:f1:
aa:cb:ff:50:99:d8:13:ba:ad:de:93:f8:5a:61:f3:
f0:89:eb:81:ef:78:ea:a6:e1:40:ed:30:6b:27:6c:
12:5f:5a:5a:2a:d4:4e:6c:20:fb:87:39:f6:c2:8a:
c3:3c:5c:ba:a7:69:01:05:ef:ec:ad:86:ec:aa:8d:
c0:59:23:ff:db:29:cd:53:c2:3d:45:42:a8:b3:66:
20:9b:dd:93:1b:36:2a:45:81:7e:9f:51:ce:40:8c:
25:5a:6d:c9:85:27:4a:0e:57:79:9c:5b:05:8d:1b:
65:9e:ec:ec:97:95:02:79:87:0e:ea:75:e7:c3:7a:
20:c5:05:a1:85:6a:e3:ab:fb:55:bf:f8:64:91:4b:
4f:55:a5:06:d1:6f:c6:34:9f:f7:1e:4a:5f:b1:36:
f8:a0:aa:22:53:93:db:5b:11:f2:3a:9e:db:df:27:
7e:f3:41:c9:72:e1:34:b5:67:57:03:1d:ac:6c:b0:
c9:63:16:0e:53:48:51:6f:0d:49:b7:13:7c:1a:93:
e5:78:6b:84:00:a8:8c:cd:0f:e0:d1:19:80:5b:b9:
e1:94:70:7a:d9:1d:29:69:39:6f:ee:97:c1:09:19:
a3:63:7a:81:2d:eb:3a:de:e5:61:2b:a5:8f:f1:6d:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:51:F1:DD:43:0B:8D:84:69:F2:75:A6:0F:38:C6:29:97:8C:5D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3ee361fc-3e25-4901-8cc1-4234893bc2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:51:03:e7:b1:1a:64:76:4e:57:ec:c0:ca:a0:e3:84:2d:87:
b6:b3:f6:e8:54:92:8c:8a:bc:d3:8f:f3:bb:06:5e:7a:59:8a:
61:d5:56:f8:be:0f:63:e4:d7:8f:22:2d:c7:70:7b:70:6a:32:
1e:1a:95:ca:db:12:a7:26:ee:55:5f:f3:2f:11:6b:86:b1:28:
6b:16:89:0b:c8:a3:06:21:bf:8e:2c:7d:b2:89:21:65:67:eb:
72:03:b2:9d:b5:d2:f9:9c:6b:27:95:1d:bb:31:da:28:1f:a2:
a2:92:3f:d0:1e:72:da:bc:82:a4:8e:28:e4:cb:32:1b:6c:e4:
3d:7c:35:e0:36:40:d5:4e:28:e9:87:22:57:c3:b1:09:3b:53:
2c:4e:38:44:9e:00:cb:fa:a1:e6:b9:94:3b:e1:82:15:5f:99:
cf:20:81:82:c1:16:67:89:16:e4:c3:c5:04:fb:ee:29:19:18:
36:ca:aa:5f:ec:d3:6f:30:fc:e2:eb:cf:27:c3:44:32:83:6e:
1b:f5:2d:2b:24:70:c9:a4:de:fc:38:f6:35:d8:e3:89:37:4e:
a5:12:32:ff:ac:ee:30:e3:aa:c2:d7:80:92:4e:cd:e5:86:44:
96:3c:99:62:f1:1c:b6:00:11:cc:f4:14:46:af:b8:e7:14:1b:
eb:ee:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:06 2024 by rpki-client on console-ams.rpki-client.org