Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d03b082-94bd-4f66-8f3a-701ff4301e7c.roa
File: 5d03b082-94bd-4f66-8f3a-701ff4301e7c.roa (raw, json)
Hash identifier: wCBXp+ar7TVolq7AU29g4+vlh8SDgM5Xqc/R0YW8k9E=
Subject key identifier: BA:E4:0F:BE:FD:01:6C:DA:E0:37:18:0E:2A:3C:5A:4E:D5:E6:44:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 600F44EF434AAA8AD654100CB201AE728EFD99EE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d03b082-94bd-4f66-8f3a-701ff4301e7c.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0f:44:ef:43:4a:aa:8a:d6:54:10:0c:b2:01:ae:72:8e:fd:99:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: serialNumber=c3d33d1eabd294b414153022300da1fc2bc81f81b57c122a89e964b3ab33e36d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:19:91:57:07:e5:7a:e1:75:bf:05:e7:07:a6:
5a:e9:fd:cb:76:ea:fc:56:01:c9:71:da:21:ad:23:
8d:cd:b2:0d:70:18:43:c9:82:35:f3:c7:4a:d5:32:
29:4d:d7:52:2a:e1:73:92:aa:fa:e0:17:6e:c5:26:
c3:97:37:76:75:b0:4e:94:31:f7:0a:c2:f6:33:ff:
29:c9:22:e7:5c:40:df:e3:71:94:e4:35:d5:0f:e4:
04:3a:6e:3f:56:dc:13:a4:0b:50:38:2c:86:62:7b:
ae:3c:59:f4:3a:dc:ed:2e:61:9e:7c:8e:0b:0e:1a:
ba:bd:97:6c:b4:17:fd:d0:61:f0:13:00:00:a8:03:
40:c9:ea:ba:fe:06:eb:1a:24:d9:86:cf:34:ff:cc:
b9:c6:b1:41:3d:8c:c7:8e:15:3e:9a:d8:ab:9d:ca:
85:4f:36:f7:ea:c8:6f:79:88:06:63:ed:f2:a5:14:
ec:95:9d:f0:04:06:8c:10:69:ef:d6:c4:8a:4e:42:
8f:ec:d6:52:fa:1d:20:30:a2:99:01:9a:05:cf:ee:
a6:ad:52:36:83:9d:3d:56:22:33:fd:dd:4c:b3:a1:
99:d3:5d:f9:c4:53:9f:33:cd:67:f2:8c:6c:06:58:
13:7e:d0:35:58:4e:11:1e:07:29:71:c4:36:38:78:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:0F:BE:FD:01:6C:DA:E0:37:18:0E:2A:3C:5A:4E:D5:E6:44:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5d03b082-94bd-4f66-8f3a-701ff4301e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:27:f1:a5:a4:f7:7b:0c:1b:ac:f9:35:d9:c0:db:16:c4:15:
cd:be:d5:27:76:cd:53:e7:df:ec:c6:35:d1:6c:ff:24:b7:a0:
da:14:b7:b6:6a:fa:c1:6e:38:f1:90:f0:55:67:99:1b:87:01:
15:6d:d5:c8:02:e9:52:2e:28:a6:44:56:c4:ad:b0:06:d4:15:
28:90:1b:f2:08:0e:0d:be:47:b8:1c:5d:86:c7:ea:79:ba:94:
46:32:d5:e5:dd:42:01:6b:f4:f4:eb:29:84:fb:a0:ec:af:8c:
97:be:a8:da:1f:10:d6:1e:f0:ae:cb:77:9c:15:d2:8c:33:05:
4b:4f:05:81:01:49:d0:83:68:0a:db:17:16:97:4d:d2:ba:5a:
fd:59:a5:02:16:d1:9d:f8:93:f0:b8:78:03:24:f4:7a:7e:4d:
0e:1d:af:67:32:6a:9b:df:18:3b:0b:7a:d0:e6:32:53:64:1e:
7b:cf:e0:c4:9d:60:86:d3:28:78:26:50:bf:de:8a:af:7b:8a:
eb:66:86:25:b4:3f:98:74:0a:8b:b1:f3:da:71:b6:ce:34:50:
da:65:6c:9d:d7:46:d8:c7:20:58:26:78:2d:65:9f:8f:e7:9c:
0c:37:7d:d4:cc:4e:c1:09:4b:bc:a4:a7:23:c6:ac:95:9f:a8:
d2:99:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:48 2024 by rpki-client on console-ams.rpki-client.org