Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58dc2052-06e1-4248-801d-12ac7ccb7d9a.roa
File: 58dc2052-06e1-4248-801d-12ac7ccb7d9a.roa (raw, json)
Hash identifier: SjIoolMb7cCUQWE5hX7iTOa4TzXCSV2E0cG0euz12eE=
Subject key identifier: C1:ED:FE:CE:21:22:13:36:ED:9E:D3:42:3F:1F:65:5D:D3:F7:34:E4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21BBA1A6D2D62089314FD19B4A70EF4B442237E3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58dc2052-06e1-4248-801d-12ac7ccb7d9a.roa
Signing time: Thu 07 Mar 2024 00:00:00 +0000
ROA not before: Thu 07 Mar 2024 00:00:00 +0000
ROA not after: Thu 11 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bb:a1:a6:d2:d6:20:89:31:4f:d1:9b:4a:70:ef:4b:44:22:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 7 00:00:00 2024 GMT
Not After : Apr 11 23:59:59 2024 GMT
Subject: serialNumber=088b3e68ffa3905f3dc3148e5041cd47384cb51312ef30c6cd4d7fa4bc42edfb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:b6:3f:7c:b1:64:6b:66:01:5a:38:e5:63:
f2:31:7b:62:8a:c7:63:c0:90:e3:d8:e8:56:c9:28:
02:92:25:11:a2:2c:02:61:3b:9a:04:36:e4:b0:3d:
02:43:f4:7b:ac:8a:c7:0b:84:63:8b:41:93:7d:6f:
87:19:c5:62:24:65:34:0b:56:ea:98:d3:6e:09:40:
c1:7a:87:6d:69:cc:15:64:78:e2:fd:ae:c0:dc:df:
d5:c4:90:98:c6:97:17:ba:2b:5b:f9:03:4a:db:f8:
cd:2d:b8:7b:e2:9e:99:cc:d0:35:fb:ed:c7:f7:42:
b7:81:8c:65:a7:3d:1a:f5:ff:9d:d2:44:f9:63:06:
65:de:42:c8:bf:e0:5a:50:53:ac:d9:1b:59:05:3d:
61:7c:55:8a:64:4e:a1:a6:78:c6:40:72:46:2b:3b:
3b:3c:53:9d:3b:ce:e2:f5:4f:36:c8:d4:e1:62:33:
be:48:24:2d:28:5e:ac:64:12:87:35:26:59:75:c6:
81:f0:4d:5b:6c:b9:fd:ba:36:28:7d:31:fb:c5:95:
cc:f5:29:5a:57:bc:73:be:3b:95:5f:a2:c8:b7:31:
95:f9:c9:1b:25:a0:e3:f5:62:7f:f0:9a:e6:1e:d4:
03:9e:2f:2a:6d:6b:91:6a:d9:7a:de:65:7e:dc:3b:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:FE:CE:21:22:13:36:ED:9E:D3:42:3F:1F:65:5D:D3:F7:34:E4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/58dc2052-06e1-4248-801d-12ac7ccb7d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3a:92:d5:b4:98:39:86:eb:a6:91:ea:45:5d:f1:0c:9e:1c:
5a:f8:52:fe:40:79:36:13:c3:f3:5a:cb:6d:18:52:b7:c0:a1:
5c:b6:b2:40:d9:6a:4f:df:30:ea:34:b0:15:3c:1d:6d:19:3d:
9c:42:7d:6d:93:81:17:d0:83:56:06:b3:be:3b:fa:74:e6:b2:
64:af:82:9a:cb:20:11:84:16:78:1a:8a:23:c7:84:67:c3:8e:
19:cd:a8:34:e0:08:71:f0:15:75:26:55:b9:d8:9a:0c:7e:d8:
ca:db:21:42:da:4b:40:27:e4:27:2f:bf:94:9d:21:23:f5:96:
a7:36:83:cc:6a:8a:44:1a:b7:2b:5b:d8:ff:ba:c5:da:a3:57:
b3:62:76:11:b1:fc:6d:04:35:b5:85:03:2a:ab:f6:cd:e8:45:
3a:62:c7:ee:37:69:0a:97:82:68:ab:de:bc:0f:55:c3:0b:8c:
b2:73:82:1e:e9:5a:4d:ce:19:24:b1:ab:93:2c:7e:9d:83:ef:
24:29:24:fc:38:4a:88:74:69:52:30:95:34:5a:4b:61:f4:f5:
e8:38:6d:f8:e7:7f:32:6e:05:ea:43:e0:b8:ef:58:f3:b9:11:
06:12:7a:cd:9d:10:6c:e4:0e:57:fd:2a:52:08:af:59:7c:61:
7d:f9:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:47 2024 by rpki-client on console-ams.rpki-client.org