Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5153128c-5364-4d93-a0b4-d9d36794c37d.roa
File: 5153128c-5364-4d93-a0b4-d9d36794c37d.roa (raw, json)
Hash identifier: JTjE1QNnfrHmBjknY3utqEEMs3oHXVKi7f32CQB7+qY=
Subject key identifier: A3:BF:60:5E:8E:00:67:8A:1D:15:33:48:A4:5F:A2:2D:9F:9E:6E:F1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 56AA1DAE94FE51B26E2522B4A3029B6F8E1D89A2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5153128c-5364-4d93-a0b4-d9d36794c37d.roa
Signing time: Mon 04 Sep 2023 00:00:00 +0000
ROA not before: Mon 04 Sep 2023 00:00:00 +0000
ROA not after: Mon 09 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:aa:1d:ae:94:fe:51:b2:6e:25:22:b4:a3:02:9b:6f:8e:1d:89:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 4 00:00:00 2023 GMT
Not After : Oct 9 23:59:59 2023 GMT
Subject: serialNumber=80adb143151f78c9175a8e4c91e68f35ea49b2005ce4214489b294558dee43a7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:1e:ec:ac:42:88:62:2d:46:73:34:8f:47:
30:9b:fc:ed:67:d2:70:c0:36:52:bd:98:91:fd:6c:
41:43:67:e5:83:7c:b9:33:ba:51:4c:08:29:e2:9e:
e6:b6:1f:8d:08:5b:78:37:db:f0:9c:e7:c9:8f:4b:
b8:a3:3e:4a:1b:f1:94:8b:0b:bc:45:76:d2:75:91:
2e:f1:fd:23:20:0f:b0:28:dd:6f:ea:1a:df:93:69:
a5:ca:f3:67:24:98:c5:02:60:18:74:93:16:fe:00:
f3:88:04:b0:92:d5:52:53:e1:e5:28:11:e3:95:a5:
ed:16:73:e0:47:94:b4:6a:19:5a:c8:62:fa:41:75:
1d:fc:55:b3:d5:03:c2:43:bc:58:67:23:19:36:ef:
2d:c2:b2:36:53:e7:b8:b4:a2:08:c0:df:c4:b8:81:
e5:34:e5:54:e3:7a:b2:99:68:3d:1f:d4:48:f9:ac:
c6:6d:c2:77:e5:a6:93:05:9b:20:1d:6b:77:40:53:
cc:2f:15:33:68:57:bf:78:4a:03:62:f3:c3:69:b9:
67:0a:0a:a8:d0:cb:e0:ac:9d:94:85:eb:a3:bd:a9:
44:e0:b3:bd:e3:a4:4a:15:a6:ae:f5:f9:06:5e:69:
d9:62:08:79:65:ad:9d:78:ce:53:1b:a9:a7:4f:e4:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:60:5E:8E:00:67:8A:1D:15:33:48:A4:5F:A2:2D:9F:9E:6E:F1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5153128c-5364-4d93-a0b4-d9d36794c37d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e5:ce:ee:96:65:e9:b9:4c:b3:f1:b2:d8:56:33:8e:11:4f:
38:39:e2:01:d6:b1:64:a5:69:61:f6:c0:34:53:b9:0f:61:4f:
8a:0a:45:51:8d:84:c1:7e:fe:65:c0:4e:20:a4:d2:13:71:36:
25:02:6b:f4:ee:00:d0:bd:d3:d5:c7:80:03:06:41:f1:22:4f:
cb:c3:ea:9f:08:e3:a7:b0:7b:bc:c4:40:73:e3:3d:64:af:76:
4c:a6:b6:05:01:bd:1b:8e:7e:e7:69:14:09:85:df:a6:f8:47:
9a:93:a3:4c:3c:41:f3:ce:0e:8f:a6:a1:c4:e1:50:6f:4d:87:
a6:1a:e2:55:7d:43:a4:0c:da:12:59:02:b7:40:45:85:f6:a3:
08:4d:e8:9b:ba:9d:7f:fb:b4:b1:8c:f1:fe:22:65:60:35:4a:
48:3f:70:43:34:15:48:fe:ad:4f:3d:a0:29:66:e8:ba:10:61:
5d:1d:34:84:10:99:f2:2a:b7:ce:55:b2:0f:6d:39:30:75:6c:
d5:b0:3d:5b:f2:22:37:04:63:11:c2:71:f5:11:ed:ea:c5:65:
f6:4c:e9:d2:9c:c9:59:91:33:80:c1:8e:17:85:3c:a9:c3:d4:
f5:80:22:5a:55:44:c0:46:37:c8:fe:09:56:2e:73:a4:01:28:
a0:58:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:27 2024 by rpki-client on console-fra.rpki-client.org