Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a62f74a-31e4-448a-a78b-64529b863836.roa
File: 4a62f74a-31e4-448a-a78b-64529b863836.roa (raw, json)
Hash identifier: 7rFtkEiZIUl4YJbbby1oFyziDoBFTCrt3GHTeSGtgeE=
Subject key identifier: 66:83:C0:DF:7C:6F:14:8B:39:CE:F1:1F:FA:F6:E4:8F:91:D2:FE:6E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5580B7070991495DBEB917246304FE6304EEA958
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a62f74a-31e4-448a-a78b-64529b863836.roa
Signing time: Tue 05 Dec 2023 00:00:00 +0000
ROA not before: Tue 05 Dec 2023 00:00:00 +0000
ROA not after: Tue 09 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:80:b7:07:09:91:49:5d:be:b9:17:24:63:04:fe:63:04:ee:a9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 5 00:00:00 2023 GMT
Not After : Jan 9 23:59:59 2024 GMT
Subject: serialNumber=ac40b1a1d34a18fcde0e863217d30b42e38625e6e75d31adba6ace0ef123bc1d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:0c:19:c6:a7:14:f2:23:2b:f2:22:45:dc:
4f:ea:cf:d7:36:89:ce:22:72:08:6a:4a:8d:03:82:
62:8f:52:27:fc:6e:92:f0:52:6c:d6:84:84:d6:13:
23:de:d0:5c:92:f4:e0:b5:dd:05:7a:eb:a5:a7:64:
47:fe:a0:ef:9a:cd:7d:e7:81:97:e1:e1:b6:1a:2d:
f5:32:b9:72:63:b7:05:b1:68:0a:b5:a2:ba:67:9a:
6e:ba:a6:84:e3:98:03:c4:98:46:ed:94:fa:4b:c6:
f7:c4:c2:78:af:3a:68:a6:76:82:21:d1:b8:83:e3:
23:a1:c8:83:28:b9:ee:4d:4e:a4:c4:95:8b:ca:42:
b8:4d:c8:4b:11:f7:eb:18:55:8d:1d:63:a3:ae:ad:
bf:e1:29:55:60:bf:7a:3e:8d:72:ba:ec:0b:8c:f4:
62:fe:50:21:3f:4c:23:86:c1:23:3d:ff:3b:ed:7d:
ab:1e:21:0d:88:4d:9a:10:85:0a:e1:f2:f7:ad:06:
98:ae:52:11:35:7d:7c:80:be:ae:99:04:51:18:9b:
f8:16:7e:31:95:be:ed:b3:e8:90:15:b9:6c:ed:2f:
44:3a:97:d7:c1:3d:56:ec:6d:7f:70:aa:88:e5:e7:
f5:ac:80:78:5a:ab:ae:d6:58:ee:89:e7:34:e7:ba:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:C0:DF:7C:6F:14:8B:39:CE:F1:1F:FA:F6:E4:8F:91:D2:FE:6E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4a62f74a-31e4-448a-a78b-64529b863836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:dd:98:5b:53:aa:9d:11:5d:f4:5f:56:f7:20:c4:ed:3b:48:
ed:d2:63:70:7b:b6:ff:80:a2:47:f3:c3:35:88:fc:2b:75:98:
77:c4:14:fb:ab:dc:24:8d:33:a0:b4:17:0d:cc:fc:f7:e1:10:
75:ba:f5:dd:d2:88:df:39:96:ad:e1:8f:5b:bd:de:5c:51:5a:
0b:4c:97:bf:d0:14:36:c4:40:9e:6d:a6:9e:b9:60:d2:23:4f:
b3:68:e5:d7:27:42:e8:f3:3e:e6:dd:88:c5:b7:6e:e5:04:f2:
7f:d0:f2:1a:4e:41:c5:5f:11:9d:1b:33:a8:35:3b:89:4e:b6:
5a:64:ab:8f:88:3a:eb:77:e6:9e:52:bd:8e:e5:88:e1:8c:2d:
9c:d5:a8:0f:99:95:9b:66:ac:ee:d3:c4:f3:13:ca:f6:07:d1:
8d:b2:b6:04:ed:71:d8:29:bb:bd:7f:a9:c6:2f:84:b5:31:2e:
6b:89:5c:05:1d:ef:73:65:29:5c:fb:17:5f:e5:42:cc:d5:b7:
dd:46:40:a4:1e:8f:b2:9c:5f:c8:60:94:1f:fe:ed:05:9f:f1:
b9:80:10:c0:ff:ac:be:b6:9e:b1:b7:01:97:ab:00:f0:83:11:
8c:e7:59:d0:e6:9c:63:a4:49:7d:94:d0:84:82:67:ad:53:46:
2f:c7:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:26 2024 by rpki-client on console-fra.rpki-client.org