Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58d75690-525e-4304-a816-c8a7789be201.roa
File: 58d75690-525e-4304-a816-c8a7789be201.roa (raw, json)
Hash identifier: HqOCN4pojrUHW/d3u/qupbJqq2/ki2LRwJJ6phUFHlc=
Subject key identifier: 11:FC:81:F1:E0:46:B5:00:82:4D:76:2C:C2:4F:9E:A6:72:35:1F:42
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5F1C14D35EDCB66AAE48AC4CD7E879F69F20AA08
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58d75690-525e-4304-a816-c8a7789be201.roa
Signing time: Mon 03 Jul 2023 00:00:00 +0000
ROA not before: Mon 03 Jul 2023 00:00:00 +0000
ROA not after: Mon 07 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1c:14:d3:5e:dc:b6:6a:ae:48:ac:4c:d7:e8:79:f6:9f:20:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 3 00:00:00 2023 GMT
Not After : Aug 7 23:59:59 2023 GMT
Subject: serialNumber=f80cb763662d0a633891a2ce0f28209c83802a634ec50949bef48166e3a051f2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:28:cc:1a:cd:13:18:66:f0:5b:32:b4:6f:
cf:ea:96:5f:1f:d0:ec:75:76:1c:c5:e6:2c:15:7f:
4d:b6:4e:c8:6c:15:8e:71:9b:3e:f9:be:f4:2f:a5:
dc:d1:81:91:cd:13:8c:28:a1:e6:14:35:25:d9:54:
d2:aa:e4:62:76:43:d6:ac:ec:e9:1b:8b:78:3c:b9:
04:45:ca:e0:29:b3:0a:8a:9d:d1:0f:17:40:1a:48:
dd:35:4e:67:6f:9c:30:11:4e:de:0b:15:5c:1e:10:
dd:ce:d5:1d:33:d0:18:0d:2d:cc:43:31:93:24:53:
71:40:37:ad:01:57:a3:39:12:19:a9:e8:9a:8e:e3:
48:25:e0:8d:bf:f3:9d:e8:3e:4f:b4:2b:48:6e:ce:
07:89:1b:ac:9d:a4:de:2b:04:66:7e:ef:5b:4e:74:
bc:f8:c2:75:77:e4:0b:b2:f1:f1:e4:4d:b5:8e:cb:
1b:5c:9f:02:e7:c9:86:84:9d:9a:95:a9:06:95:75:
fb:74:f0:9e:6e:df:31:3a:e2:98:2d:48:aa:99:1d:
a7:49:db:ce:da:41:89:af:d0:45:40:eb:dc:a7:2e:
77:c7:b2:51:30:af:2e:53:28:25:41:a4:e2:d0:31:
c7:5e:6b:3c:48:28:14:fd:f9:3a:b3:2b:6b:e4:4d:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:81:F1:E0:46:B5:00:82:4D:76:2C:C2:4F:9E:A6:72:35:1F:42
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58d75690-525e-4304-a816-c8a7789be201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5e:51:b6:f6:ab:8d:d8:dc:b0:67:48:1e:ec:56:6b:e4:f6:
51:07:9e:ad:93:55:9d:b3:12:a1:bb:3d:e6:8a:77:c8:f1:4c:
53:bf:37:47:ab:1f:2a:0f:69:ad:b8:6f:b8:6d:42:d7:7b:04:
cd:37:e5:f0:08:2d:a1:26:75:d8:67:85:ac:bb:72:bc:6d:42:
2c:6e:be:85:47:d9:7d:4d:e1:06:03:89:29:26:86:be:90:9b:
d1:2c:24:4d:e5:c7:1f:50:ba:54:be:e4:6e:10:40:48:43:e5:
de:05:60:81:7c:35:5e:26:5b:02:a3:5a:1b:4f:fc:f0:5d:ab:
f4:70:c4:ff:07:de:91:09:1b:e0:2b:93:dd:e0:cb:26:d8:30:
9b:b4:ef:fc:51:b3:4d:88:d5:53:14:43:e6:27:02:c0:f4:bc:
13:cc:da:7c:86:75:3e:07:cc:d0:26:4a:67:c1:58:fe:76:d2:
02:7e:ba:12:de:33:6c:2b:cd:81:c1:2f:05:19:aa:f7:d5:19:
bc:3d:df:25:05:4c:2f:52:90:76:e2:a1:5e:48:be:4c:d3:86:
71:29:b5:f1:7d:d6:d8:70:35:ec:86:31:b4:e6:7c:1e:23:ab:
65:0c:71:29:e7:7a:c6:a6:ee:f3:35:98:d4:96:f5:bc:78:64:
ff:33:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:47 2024 by rpki-client on console-ams.rpki-client.org