Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e5e6e8a-4369-46c2-b8e7-09efe44dd156.roa
File: 5e5e6e8a-4369-46c2-b8e7-09efe44dd156.roa (raw, json)
Hash identifier: eyyLjf23Lo0+fODfY+Mw4UK3UO1iudNi1wEBtKG/so0=
Subject key identifier: C7:3C:16:96:9E:98:4A:10:EA:E5:AC:31:59:49:57:6B:9E:37:E4:6A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 75DB59CD0ADC04FBA340712F46EE3C027DEAC7BB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e5e6e8a-4369-46c2-b8e7-09efe44dd156.roa
Signing time: Sun 06 Aug 2023 00:00:00 +0000
ROA not before: Sun 06 Aug 2023 00:00:00 +0000
ROA not after: Sun 10 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:db:59:cd:0a:dc:04:fb:a3:40:71:2f:46:ee:3c:02:7d:ea:c7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 6 00:00:00 2023 GMT
Not After : Sep 10 23:59:59 2023 GMT
Subject: serialNumber=c5533923978d83c63a43a0aef973fffeb86c42bb14dd8e71e88c2046afcb6768, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:e2:a5:59:ae:09:39:26:46:e0:52:0c:45:
44:35:44:cc:48:a2:40:ce:92:73:ad:eb:19:a2:41:
bd:35:00:ff:11:a7:a4:45:3d:34:49:46:cd:e5:0b:
b7:48:ad:49:ec:d9:f9:8e:21:66:cc:2b:21:8c:be:
df:0e:a9:0d:76:2d:f2:67:3b:68:2a:8e:ae:ac:30:
d6:fe:c5:f5:89:76:f9:f3:63:92:16:af:9e:4d:92:
99:75:b0:fa:e5:ed:69:07:18:2e:09:9c:84:86:6b:
bc:b6:a0:ba:ba:c9:10:7d:f9:ff:17:9c:64:87:1e:
f4:41:29:27:00:b0:37:65:f1:15:25:0c:78:36:3d:
bf:fc:ae:10:5e:1e:b0:4f:af:24:f5:4f:f4:82:9a:
1c:05:2e:80:35:5b:3c:52:2d:28:d8:c5:29:c3:b6:
9d:c1:33:d0:be:cf:a8:ce:50:75:62:0d:29:a0:2c:
27:5d:e6:84:c4:fe:0a:f1:54:37:29:24:21:21:5f:
44:73:e8:4e:05:29:ae:f1:8c:e9:ac:06:98:fa:a9:
04:44:b7:96:15:d6:a4:5f:69:d9:57:09:d7:85:1e:
05:73:90:0b:23:48:a4:d5:67:49:28:0c:f9:9c:d5:
a4:db:7f:95:45:32:ef:be:f1:99:5c:d2:39:8a:d7:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:16:96:9E:98:4A:10:EA:E5:AC:31:59:49:57:6B:9E:37:E4:6A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e5e6e8a-4369-46c2-b8e7-09efe44dd156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2c:d1:71:70:eb:a1:e0:0a:9c:a6:e8:61:b2:99:08:e6:8f:
3e:75:df:69:18:ac:ad:45:67:ae:40:73:3e:b3:8a:c6:0e:fe:
fa:8a:c2:d8:bc:4e:42:45:ad:4c:78:3d:79:8d:41:95:99:67:
ce:96:11:ac:fc:30:30:6e:5e:c9:8a:cc:a9:04:14:20:a5:a3:
c9:41:ac:43:23:bd:b0:5d:64:2d:dd:87:d9:78:5e:98:e3:6a:
f3:19:ac:16:e1:69:53:1d:80:69:70:16:0c:9d:46:d9:d4:c3:
b5:dc:02:d1:2f:45:ad:0b:e8:14:cf:b3:19:f3:08:e6:3b:b5:
5a:2f:98:7e:b3:76:1e:bb:97:dc:a9:f4:32:12:2e:4a:ef:bc:
57:76:78:f3:d3:b2:0d:5a:b2:2b:63:48:24:01:b9:b2:86:3c:
bb:85:da:05:3d:ef:50:16:cc:da:a0:bd:4f:29:85:5e:5b:e6:
f8:78:d7:0c:d3:07:76:1c:cd:8f:67:36:89:d0:07:cf:da:04:
71:b9:eb:2d:a9:84:d0:20:74:b2:4d:c6:db:12:20:7c:aa:39:
73:d2:69:35:f6:73:6c:4a:a3:21:46:17:35:ea:2e:f5:da:2b:
40:38:c2:c0:12:c2:12:10:ad:1b:ae:06:a8:b9:67:24:2b:56:
4a:94:71:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:28 2024 by rpki-client on console-fra.rpki-client.org