Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5941804c-327a-4e03-add6-ff527295671a.roa
File: 5941804c-327a-4e03-add6-ff527295671a.roa (raw, json)
Hash identifier: 3vI5trj2PzQaQ5PVxVD0HucwT1eAmO2LZcUhtNVXO/k=
Subject key identifier: A4:F3:E2:BD:8B:C7:B3:8A:8A:8B:2E:4D:E9:F9:80:15:A3:23:B7:F9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3DC2F6B260717EDEB1BF3F9FB79441410ACA70A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5941804c-327a-4e03-add6-ff527295671a.roa
Signing time: Mon 09 Oct 2023 00:00:00 +0000
ROA not before: Mon 09 Oct 2023 00:00:00 +0000
ROA not after: Mon 13 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c2:f6:b2:60:71:7e:de:b1:bf:3f:9f:b7:94:41:41:0a:ca:70:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 9 00:00:00 2023 GMT
Not After : Nov 13 23:59:59 2023 GMT
Subject: serialNumber=b968b1e917b2118a0a49d219aab9dbe404f3fcb18a55289e7b1ad1c8728237a6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:88:27:dd:70:8e:53:22:71:0f:98:f5:96:
f3:2f:91:af:67:0e:62:1e:37:5e:f8:28:97:b9:78:
a3:04:f7:ef:87:3d:4f:76:94:4f:7e:ea:65:df:c0:
4d:61:ab:2c:7d:94:da:33:5a:f1:52:bd:3a:b5:02:
18:16:05:7e:b4:47:15:c5:98:fb:d1:b3:f7:32:2c:
49:dd:9b:62:e4:68:e0:54:af:60:10:1e:fb:26:b5:
67:eb:59:46:9f:81:8e:8b:83:91:56:91:20:2e:a8:
69:da:a7:e5:03:6b:de:af:15:fe:12:10:6c:82:e4:
86:0a:99:b5:72:a8:6d:df:21:05:27:1d:82:98:ce:
fa:21:d6:a5:e7:4c:a6:58:db:69:20:df:32:6c:89:
70:e2:df:e8:5a:63:ba:bd:25:8f:6a:e1:e6:eb:3f:
e0:f6:69:21:f5:1e:4e:90:d1:ae:7a:f3:05:5b:77:
91:92:75:b5:48:4c:4f:27:b1:08:f6:44:1a:c9:26:
e7:04:e5:3f:73:44:51:2e:b7:ed:fa:f0:c0:ce:25:
10:90:48:9e:56:85:a7:7c:a8:6b:db:fb:35:02:7d:
c4:72:b6:4b:16:58:1b:fc:b9:1e:5a:83:43:08:1b:
4e:1c:81:eb:00:27:33:f0:da:f4:22:20:5d:d6:1a:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:E2:BD:8B:C7:B3:8A:8A:8B:2E:4D:E9:F9:80:15:A3:23:B7:F9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5941804c-327a-4e03-add6-ff527295671a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:41:f3:db:1d:d6:b2:7a:ad:47:e2:0a:6e:a7:b8:d5:9c:df:
4d:56:cd:41:f3:a2:79:4a:f5:46:81:62:04:1d:99:2c:0f:13:
41:35:04:dc:05:b7:d7:59:a8:03:f3:45:d3:81:e8:fd:bb:90:
2c:79:1d:d5:0e:de:fe:81:60:3b:0f:f7:0a:83:ec:e0:ea:41:
6b:fc:65:ac:1c:28:d1:14:b0:7c:37:02:19:94:0c:d6:a3:5a:
44:99:24:f2:cc:60:c3:ec:0f:8c:61:c7:2a:ea:76:4d:f4:ab:
cb:1c:4f:f9:04:b0:f8:9f:7e:64:0e:1e:1d:bc:f9:3d:52:dd:
b7:63:be:b0:5f:69:2c:6d:1c:e4:3d:71:ab:fd:ad:69:53:7d:
27:a8:6d:bc:83:7a:44:16:46:23:20:55:71:43:61:95:b2:34:
45:c8:a8:ad:3a:29:30:3d:60:89:d1:75:f1:5d:b9:ba:d2:ab:
25:01:7e:13:92:4d:97:71:6b:39:e9:2d:8d:55:df:d1:d4:53:
86:70:5e:d9:4a:c1:75:3c:a7:76:9a:2c:86:b5:10:5a:32:59:
3f:2b:b1:c2:a6:1f:3b:cb:24:f2:b6:6f:83:4a:49:58:87:47:
35:fd:1b:35:2c:c4:ce:b2:4c:42:42:7a:4b:81:d4:b7:be:dd:
95:01:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:28 2024 by rpki-client on console-fra.rpki-client.org