Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/477a49f4-7502-43e8-984c-4865467480a9.roa
File: 477a49f4-7502-43e8-984c-4865467480a9.roa (raw, json)
Hash identifier: 4lHh8hZ6xDk52gn5wpCwsYKLmtoYgDqziwaFlCE2FTU=
Subject key identifier: 35:17:CC:3B:AE:AB:31:AD:7E:3C:20:D0:B4:74:76:58:9F:AC:9A:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1E93F5E304A5D717424F5DF86AE0B9C7A99FA36F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/477a49f4-7502-43e8-984c-4865467480a9.roa
Signing time: Wed 09 Aug 2023 00:00:00 +0000
ROA not before: Wed 09 Aug 2023 00:00:00 +0000
ROA not after: Wed 13 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:f5:e3:04:a5:d7:17:42:4f:5d:f8:6a:e0:b9:c7:a9:9f:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 9 00:00:00 2023 GMT
Not After : Sep 13 23:59:59 2023 GMT
Subject: serialNumber=662799e662e4fac4c22e950be69f124e3dbea6d96428bebe9b113ca85e1524b5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:9e:14:96:03:60:1a:36:60:e1:14:b4:f1:
5b:1f:0e:84:ac:28:bc:8e:8a:20:84:1c:3a:f0:a6:
fd:45:bf:65:9f:07:8b:45:28:11:d5:b4:7d:e0:91:
88:0f:29:4d:6c:71:aa:eb:f3:3c:e2:6c:44:b6:14:
0d:de:eb:c0:23:a8:41:c9:62:cb:1a:fd:07:d3:e2:
af:45:61:da:b9:6b:4a:84:ea:21:d2:e8:4a:53:3f:
1f:6e:6f:b1:da:20:78:9f:9b:f0:6b:ca:bd:05:5f:
38:85:95:2f:4a:9d:d6:1f:f8:5a:44:8b:f7:fa:60:
da:7d:90:3d:b2:ad:10:f5:5c:94:ca:a1:dc:fd:e1:
c9:35:fd:23:51:a1:6a:3c:b1:9a:ae:a3:be:1f:bb:
d0:9b:39:e5:e0:3f:e8:0e:e0:89:51:1d:12:0b:8b:
14:3b:44:02:5f:8e:b6:82:0f:c0:55:9f:2c:ef:4a:
e0:4e:4f:43:a1:c8:a2:7c:a3:38:95:46:e7:6c:95:
96:3c:9a:c2:e0:2f:0b:be:9b:e0:1c:b1:4c:3c:c1:
ef:d6:8a:0e:11:7f:76:4e:5f:39:56:94:0f:78:8a:
81:07:d0:18:cf:3b:08:57:d0:32:fd:43:b5:49:75:
b0:d0:f3:a4:2c:4c:e2:4b:98:f0:b2:d2:db:5d:75:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:CC:3B:AE:AB:31:AD:7E:3C:20:D0:B4:74:76:58:9F:AC:9A:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/477a49f4-7502-43e8-984c-4865467480a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:26:46:0d:3b:41:69:cf:1a:a3:c5:f2:bc:26:13:50:78:28:
5a:ac:14:4d:af:5e:e1:0e:d3:24:85:7c:e1:7a:be:32:70:8d:
b5:74:5e:69:f8:bc:74:15:06:67:59:be:0b:ec:a0:2c:5a:a4:
a1:44:70:eb:37:5a:77:df:4e:21:c0:ff:e2:50:3b:27:d1:46:
b1:98:25:69:98:1f:05:1f:f2:c2:11:3f:bd:1d:24:fd:ea:9d:
09:59:76:b5:2d:47:10:12:74:62:db:20:64:c1:df:fc:83:25:
3e:e3:b2:75:49:02:3e:34:4d:a5:9d:b0:e8:0a:e6:50:6a:7b:
d2:43:72:d9:4b:2a:40:15:b8:1d:1f:16:2f:80:ee:d6:25:1e:
b6:9a:5a:e9:2f:76:07:b3:7b:f7:d5:83:9d:8c:fa:d7:31:58:
12:2c:29:49:7e:14:73:7d:85:61:84:b4:e9:5e:fa:7e:bf:5e:
bd:8b:8e:cb:c4:ea:cb:fe:dd:f9:3d:93:a8:f2:28:1d:39:c1:
4c:60:24:5d:3f:b1:8c:46:f2:6c:a8:51:79:18:07:0a:33:2f:
1e:7c:6f:76:bd:72:41:69:9b:b8:26:0b:36:1a:03:03:b8:84:
93:e1:4d:cf:ff:34:db:67:a6:fc:a0:b2:e8:27:81:74:c3:77:
42:ec:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:25 2024 by rpki-client on console-fra.rpki-client.org