Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4424feb8-ee53-4353-bf98-1f6b0b22fcc1.roa
File: 4424feb8-ee53-4353-bf98-1f6b0b22fcc1.roa (raw, json)
Hash identifier: hFttdayS6NIaeU9kJoomtUUA+kwC3myQ1YklxenfHC0=
Subject key identifier: 30:4C:0D:C0:CD:AB:C0:75:6C:4E:9A:3A:74:8E:CF:74:CB:99:3D:31
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 47F1124D0E68CE040698593B24B1784E38EFD6B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4424feb8-ee53-4353-bf98-1f6b0b22fcc1.roa
Signing time: Mon 06 Nov 2023 00:00:00 +0000
ROA not before: Mon 06 Nov 2023 00:00:00 +0000
ROA not after: Mon 11 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f1:12:4d:0e:68:ce:04:06:98:59:3b:24:b1:78:4e:38:ef:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 6 00:00:00 2023 GMT
Not After : Dec 11 23:59:59 2023 GMT
Subject: serialNumber=3b0d27f0a5d33a38e345324eab2376bb701a09556553c8ea2808e9a29a101b9e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:cc:3b:01:6f:ce:86:8a:77:4d:06:18:22:
ff:ff:c2:bd:48:20:34:7a:96:1c:37:3d:bc:e8:0e:
d1:04:b3:c7:0f:00:70:15:f9:6a:dd:6b:46:14:03:
da:79:d5:77:c0:92:d9:ac:62:58:14:5c:17:9d:ca:
7e:04:f4:8f:40:6a:53:8e:09:ae:51:f9:6a:22:4b:
33:57:15:0e:87:b0:71:82:9e:9e:04:20:64:d1:df:
50:6e:73:7f:c8:64:40:dc:40:ab:ed:72:c1:55:5b:
cf:b9:23:ed:b9:58:7b:7b:88:5e:d0:ba:30:37:62:
ba:62:57:d3:23:a5:ac:90:38:7e:d9:5c:36:d7:03:
08:9a:f3:21:5a:f7:41:9e:64:ce:41:1a:44:75:c6:
47:e4:00:40:1e:3e:a9:dc:df:76:c2:50:2a:75:0b:
56:61:93:bf:16:9f:b9:a6:7f:a3:9f:2c:2b:17:0a:
35:ba:3b:a2:26:fc:39:64:8a:a3:50:5f:dc:ed:e8:
3d:38:49:c3:39:17:28:f7:30:1a:e6:2f:0c:58:f3:
72:7c:5a:65:3d:d7:4e:dd:f6:d2:ff:75:17:0a:a4:
58:10:08:68:b2:93:12:f3:dd:48:0b:ad:5d:1e:eb:
6d:09:11:98:35:08:ec:0d:0b:a9:4e:1d:33:2a:a6:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:0D:C0:CD:AB:C0:75:6C:4E:9A:3A:74:8E:CF:74:CB:99:3D:31
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4424feb8-ee53-4353-bf98-1f6b0b22fcc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d8:f6:fb:14:f5:de:26:ff:4e:ad:1f:43:d4:e3:7f:6a:51:
91:7b:2d:97:72:52:b6:ef:1d:c9:78:be:91:76:0e:88:fc:f2:
10:49:f1:8b:0d:6a:37:75:dd:6e:88:6c:66:2e:32:f8:a5:c3:
ed:00:83:92:e5:4c:d3:97:8d:9e:fb:fc:92:fe:46:a3:44:4e:
b6:de:ef:e8:75:7f:78:1e:77:6d:49:f3:3b:80:56:43:11:35:
ba:f7:00:cd:2b:3f:4f:24:25:19:7e:41:79:51:15:ad:f7:ad:
88:b6:8f:84:d9:40:5d:20:6c:5d:ea:c6:8a:f9:f5:95:84:db:
74:49:ba:28:e3:ce:b1:8e:a6:b4:c2:ae:ed:38:80:7d:30:21:
9f:9a:80:be:63:2b:a4:d1:37:8c:7e:90:9a:35:9f:f6:63:29:
65:9b:87:c4:1c:c3:94:c3:ce:b1:e8:f3:d4:56:e3:d4:f5:63:
78:ea:09:70:2e:b5:f6:f1:23:d0:4e:5e:3d:82:bb:86:2c:23:
9c:e9:6b:ee:e8:69:92:08:f7:a4:83:d4:29:06:c5:c6:65:f2:
be:2a:f2:40:ba:ba:83:cf:3b:23:3e:fe:70:59:a1:b7:52:af:
41:c6:e9:10:3e:bd:54:9c:ae:3b:93:e0:93:55:4f:82:fa:2d:
c5:11:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:07 2024 by rpki-client on console-ams.rpki-client.org