Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/578dd070-d158-4c98-bc36-c456aa79a06c.roa
File: 578dd070-d158-4c98-bc36-c456aa79a06c.roa (raw, json)
Hash identifier: 9TDpvqBIcrZg7PpojJW0427OYtd5kkPRU0sauGFoYr4=
Subject key identifier: 42:58:C8:5D:9D:C2:3E:08:8A:DD:96:FD:4A:42:D8:B5:A5:92:43:08
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2CC3DDA963C48329215331BAACBFC1A9E80B8325
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/578dd070-d158-4c98-bc36-c456aa79a06c.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c3:dd:a9:63:c4:83:29:21:53:31:ba:ac:bf:c1:a9:e8:0b:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=86a45e1758409cf53b00a7d2c03f66c4e2dd585c53fdd192999c86ef81ea650a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:ae:41:eb:7c:72:a5:26:f5:8f:ff:34:32:
09:55:54:87:a6:42:5b:33:ac:55:50:96:2f:e2:43:
56:69:fd:c9:f9:a5:7d:3f:fd:4f:8c:16:d6:79:9d:
56:ac:b0:de:4f:19:a1:f2:92:c1:0d:66:4f:32:6a:
16:67:24:d4:d6:2b:59:5c:a1:a2:4b:1c:a0:16:37:
ea:90:9b:23:d6:ef:0e:4a:d4:34:ef:c9:32:06:bf:
af:2d:16:71:93:eb:54:b2:8f:06:61:15:74:c9:b2:
d6:31:b0:24:54:ad:ac:65:11:b0:9f:96:0c:73:ca:
94:e6:64:ce:87:63:52:b7:5d:47:30:4d:23:ff:77:
45:c8:65:c4:d8:eb:82:5c:97:9c:92:7e:69:65:34:
f6:2d:ed:3a:42:e2:92:49:8a:7b:d8:41:52:cc:0f:
dc:bd:79:27:cf:c8:e0:68:ca:c7:50:ee:5c:79:c1:
29:fe:13:16:af:e8:bf:9a:bf:c2:3e:fb:fa:cb:dc:
79:3e:89:d9:ff:c8:73:c8:b5:55:e6:ca:be:a9:f3:
52:c9:36:93:68:ec:13:e4:2f:67:6f:69:b5:08:d4:
ab:23:9a:07:e6:e4:db:d0:2a:5e:b0:81:88:9c:79:
51:de:89:4b:81:6e:1a:a2:3b:d0:c8:e6:72:49:ee:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:C8:5D:9D:C2:3E:08:8A:DD:96:FD:4A:42:D8:B5:A5:92:43:08
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/578dd070-d158-4c98-bc36-c456aa79a06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cc:71:97:86:30:df:57:0e:7d:48:df:a4:18:6e:4e:3f:4e:
d3:ad:ba:01:51:8e:48:de:4a:9c:ad:07:3e:d0:fb:86:f0:9d:
70:89:14:7d:a2:49:2d:7b:bd:af:83:b4:50:0b:9d:f6:db:2f:
1e:82:81:8d:69:25:ec:2d:26:ae:1b:73:a4:72:b5:e3:32:d9:
f8:7e:30:43:10:06:ee:5e:65:0d:63:ba:ab:02:40:28:fa:da:
21:43:35:34:76:e4:e6:f1:92:02:62:7d:8a:05:a5:b9:e1:33:
62:a5:14:d6:8a:c5:f2:9b:df:ce:9f:13:b1:8c:a8:bb:f3:0f:
73:40:12:ba:ac:9d:b0:91:5e:32:ed:46:e7:9d:c6:f9:d0:1d:
99:a9:75:54:18:c4:3b:0f:25:f8:60:a4:e4:e6:2d:b6:6a:bb:
49:2c:78:6c:96:e1:94:46:f7:02:f3:46:45:b3:f4:d1:53:fa:
6f:51:1d:c2:76:e4:d8:35:b1:54:de:41:93:a6:52:8b:32:e9:
7c:db:58:e4:d7:75:7a:29:38:10:c2:3b:07:9d:a4:ef:6e:7a:
8e:d3:a3:d7:98:8a:9f:dd:65:29:74:11:b7:63:dc:b2:63:ee:
49:4c:08:8e:2f:e1:96:c1:fb:2b:cd:79:73:af:cd:04:df:2f:
95:87:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:47 2024 by rpki-client on console-ams.rpki-client.org