Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44d0b32b-fe42-4221-9c19-fa2bd254cf3e.roa
File: 44d0b32b-fe42-4221-9c19-fa2bd254cf3e.roa (raw, json)
Hash identifier: l6NkGjc3EyWCuXp6ndqkEB1jS16KKKxwHXNDLpV+QMA=
Subject key identifier: 86:F0:66:F5:83:34:96:F6:08:FC:97:CD:B5:E0:A8:76:F9:E1:CB:55
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 59D10932569E343E8DF8A89E9A695A986B8586B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44d0b32b-fe42-4221-9c19-fa2bd254cf3e.roa
Signing time: Mon 31 Jul 2023 00:00:00 +0000
ROA not before: Mon 31 Jul 2023 00:00:00 +0000
ROA not after: Mon 04 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d1:09:32:56:9e:34:3e:8d:f8:a8:9e:9a:69:5a:98:6b:85:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Sep 4 23:59:59 2023 GMT
Subject: serialNumber=1447184bdcc3b45dd30ab10a5192a84b1c07d3ec184b86ca5ea6c839b024b41e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:13:88:0f:4c:96:c6:a6:19:1a:fc:0a:40:
21:c2:02:2f:a3:a4:4f:21:4a:f1:b2:05:8e:09:85:
fc:3e:cb:15:bd:78:92:f1:6b:91:9d:41:c5:eb:d7:
56:6c:af:f1:e8:b0:e3:33:64:3a:4f:58:05:e8:ad:
eb:37:7f:6f:86:2d:39:b9:51:c5:82:97:7e:3a:f4:
24:96:d3:f8:a6:f9:c5:67:0e:d8:fd:3f:4c:65:cd:
42:6b:8e:3c:72:9d:13:2f:aa:a5:c5:d1:af:81:4f:
0d:b7:ea:f1:0a:1a:57:4b:be:66:89:40:61:38:46:
6a:a3:b5:f5:4e:e6:33:be:b5:ff:ca:e3:9d:e6:7d:
39:4b:35:92:a9:a0:56:47:63:c7:8f:60:70:61:11:
c2:27:89:d5:1a:bc:4c:b8:6d:8a:d5:28:58:c0:da:
53:bc:94:1e:d1:28:83:0e:d8:d5:0e:8e:34:5c:d6:
09:53:52:89:ee:18:f0:1d:cf:24:01:36:7c:f7:a6:
7b:ba:8e:1c:0d:c8:88:3c:6a:1a:d0:87:72:bd:8f:
93:00:7c:50:c9:6f:23:ec:ef:de:d4:95:83:0e:28:
ad:25:22:0e:63:3b:9b:dd:28:36:34:0f:ba:df:90:
5e:77:9a:72:34:2f:fa:1c:d6:48:4a:6a:03:2f:5d:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:66:F5:83:34:96:F6:08:FC:97:CD:B5:E0:A8:76:F9:E1:CB:55
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/44d0b32b-fe42-4221-9c19-fa2bd254cf3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:86:93:21:9e:97:97:22:ef:41:d7:d0:58:80:f9:9e:bf:32:
66:ad:71:73:52:0d:1c:92:1a:fc:59:c6:f6:4e:44:97:3b:15:
ac:fd:47:ed:4e:30:30:6a:f1:28:e3:47:46:8f:e3:14:b1:cb:
94:57:d8:ea:a7:9f:f0:8e:7c:28:74:50:16:46:ba:8f:4f:40:
76:01:fe:ca:04:fe:cb:7a:c7:53:53:da:0d:b8:78:77:5f:85:
ec:dd:d4:ef:4e:ab:5d:81:76:93:7a:f4:e9:f9:f4:ee:24:dc:
d7:50:9e:d3:2a:00:66:3a:c7:82:26:c0:ce:44:e5:ce:96:45:
5e:62:cf:17:08:a3:42:67:43:c8:3a:a8:69:7d:c9:4d:80:9e:
50:53:d4:1d:01:74:61:e7:2d:c1:e8:8f:be:07:6b:2d:5f:b2:
b6:12:c6:cd:3d:71:e3:9d:07:6a:eb:9b:89:18:27:13:52:b7:
7f:9d:4e:25:91:d9:cd:7c:25:79:f0:e7:26:05:06:27:11:f1:
50:86:dd:0a:c5:f3:ed:13:f3:d2:42:28:ba:05:06:eb:77:df:
c6:14:2d:69:ce:92:9b:f1:0f:b4:35:57:17:66:67:8e:e2:17:
5c:7f:79:f2:b5:29:f2:4b:55:e7:ad:1d:05:1e:8f:f5:89:34:
38:d8:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:19 2024 by rpki-client on console-fra.rpki-client.org