Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/639ffd31-0022-4d6a-88c9-ecf3375346ef.roa
File: 639ffd31-0022-4d6a-88c9-ecf3375346ef.roa (raw, json)
Hash identifier: ojvamxbiMBlAnAIlf4FPXpDCqOFLCdpoA5XQglwX3Ys=
Subject key identifier: 24:69:00:D1:06:E9:DC:A1:0E:BE:8D:5D:90:56:B0:60:9A:90:06:AD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 73F70AB3123CBB02C939B404AE81A36C888D6F14
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/639ffd31-0022-4d6a-88c9-ecf3375346ef.roa
Signing time: Wed 28 Jun 2023 00:00:00 +0000
ROA not before: Wed 28 Jun 2023 00:00:00 +0000
ROA not after: Wed 02 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f7:0a:b3:12:3c:bb:02:c9:39:b4:04:ae:81:a3:6c:88:8d:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 28 00:00:00 2023 GMT
Not After : Aug 2 23:59:59 2023 GMT
Subject: serialNumber=ec820ad62986daac89a6771ec6bfaaff790711ca243ca766862e66bc31c53d19, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:cf:9a:b9:6b:02:c5:43:44:24:17:44:a1:
b7:68:67:73:4a:4a:eb:7f:60:05:74:39:f8:87:a6:
7e:5a:55:c1:8e:28:5e:6f:2f:2a:b0:3a:bb:2d:46:
db:af:97:f3:2f:61:9f:05:b1:57:a2:ce:6b:23:11:
ae:74:ed:fc:eb:53:8b:99:85:d5:20:42:9c:03:16:
0b:ee:46:e3:ca:6c:6f:e2:57:47:5c:a3:e0:d6:9b:
69:37:15:9d:5d:ef:22:2d:d8:d0:24:2b:05:07:c9:
52:9c:9a:6b:53:b5:23:14:9e:ed:46:7a:56:e8:c8:
c9:8f:7f:b1:86:a4:b0:0d:ac:00:15:3a:1e:91:74:
f5:17:ab:a9:4b:dc:15:1c:6c:a6:ff:12:39:d5:b1:
5c:c7:41:d9:58:65:e1:e4:c9:51:79:93:6d:43:e0:
ce:85:6a:f8:d9:2e:40:bd:59:ac:ee:08:f0:94:0b:
d9:3a:ad:1f:5f:7e:05:4a:03:7e:c3:92:34:07:c4:
e8:b1:82:68:6b:29:6b:22:fc:e1:a7:07:d4:38:95:
ab:79:d9:b3:63:0e:26:46:fa:f7:fc:4e:a1:d4:c9:
52:49:a4:f6:77:ac:dc:b6:a8:15:c5:c2:16:b3:4c:
fd:a8:86:71:5c:6a:a6:dc:50:7e:3e:9f:5a:f3:49:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:00:D1:06:E9:DC:A1:0E:BE:8D:5D:90:56:B0:60:9A:90:06:AD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/639ffd31-0022-4d6a-88c9-ecf3375346ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a6:b8:7f:e8:83:34:f3:51:e3:91:ab:f2:18:b7:33:aa:be:
e1:55:15:91:bc:68:4c:d3:29:b4:b4:2f:04:89:34:cd:1f:6f:
f4:a7:36:94:47:9c:47:a4:2b:b0:6f:07:3c:63:0a:de:2b:39:
ec:9f:a3:d2:ba:3b:e5:a6:f1:bb:3f:fd:47:7f:07:50:28:0e:
d1:20:01:06:f9:77:4b:65:aa:ca:33:8b:6e:b2:ea:33:06:a0:
75:ea:f5:7e:6d:2c:a7:3d:89:f6:4a:47:9c:d9:04:bf:cb:62:
71:5c:9d:84:fe:f3:80:35:fd:bf:11:2b:4d:96:a2:ea:43:bf:
16:ec:22:82:01:e6:f2:36:1e:3b:39:93:2c:24:b8:ce:00:d0:
c1:a2:b8:23:3a:22:dd:10:5a:69:f5:6c:32:7e:1d:50:df:d3:
30:8b:48:76:7d:1a:0e:6f:9f:91:dd:dc:57:1a:9f:6f:1a:92:
bb:ff:4c:1a:17:e9:ca:67:00:1d:6d:0e:78:5c:f9:33:0f:ef:
a8:15:e9:d4:5d:03:4c:36:62:b3:61:04:9c:7f:59:8c:9b:e4:
07:83:ab:95:85:ed:f8:b6:47:fc:39:26:91:c0:b4:00:26:03:
67:87:32:ed:c0:30:cc:56:d9:66:e6:fa:e0:51:14:61:00:82:
ce:c3:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:49 2024 by rpki-client on console-ams.rpki-client.org