Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/656a91a8-3e98-40cb-b269-e9f2432d375c.roa
File: 656a91a8-3e98-40cb-b269-e9f2432d375c.roa (raw, json)
Hash identifier: pwDqv1ft8IprwPXyK8LUqhVFclDOFpljLo61+nvhPEc=
Subject key identifier: B2:55:9A:6E:35:14:16:5C:B3:2D:28:4C:BF:4B:AE:6A:41:48:50:31
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 565895F7689B3837147B609B591203E31BEC42EA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/656a91a8-3e98-40cb-b269-e9f2432d375c.roa
Signing time: Mon 08 Apr 2024 00:00:00 +0000
ROA not before: Mon 08 Apr 2024 00:00:00 +0000
ROA not after: Mon 13 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:58:95:f7:68:9b:38:37:14:7b:60:9b:59:12:03:e3:1b:ec:42:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 8 00:00:00 2024 GMT
Not After : May 13 23:59:59 2024 GMT
Subject: serialNumber=1ac1b8427c7489d0cd355e0caf1ba81748d3b1a736ab93f5c042f976e360618b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:6f:b8:47:d6:57:84:1c:22:ac:3f:91:b2:
85:55:e1:4b:36:58:65:34:01:94:16:86:82:25:42:
bd:a4:95:fc:81:71:14:ff:cf:51:bf:fd:e3:8c:fa:
c7:1e:80:e6:a1:e8:35:22:82:31:09:15:ef:0b:d6:
6f:28:3e:b6:48:b7:54:42:b1:6a:3e:59:40:6e:56:
aa:93:1b:d4:9a:8f:ed:3e:51:c2:72:13:9b:e7:be:
c5:8f:a4:51:51:61:20:0f:21:ce:d9:19:a8:1c:9e:
61:b2:89:1f:ff:b4:9d:6c:8e:1b:95:13:a1:8a:b6:
89:f2:f4:cb:20:fb:e0:c6:a5:9a:9a:3b:16:e2:9e:
bc:d2:94:5b:b6:cc:1e:63:01:89:0c:9a:cb:11:7f:
54:30:e3:f4:ca:33:8f:4f:5a:b3:00:c1:56:16:65:
30:60:28:71:93:e7:c3:13:ac:4d:c9:c8:02:03:e1:
5e:5e:81:9c:08:6c:fb:df:e6:3f:79:df:9a:c1:0c:
ba:c5:aa:93:da:49:4b:a4:ec:56:b1:75:df:a1:8c:
c3:f4:2a:89:f9:b8:75:f1:87:b8:4d:94:ea:29:f0:
48:99:b4:97:ec:8e:38:c5:38:cc:ac:eb:80:c9:4d:
14:96:2f:76:a7:c9:90:6c:a9:22:5b:26:54:03:f5:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:55:9A:6E:35:14:16:5C:B3:2D:28:4C:BF:4B:AE:6A:41:48:50:31
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/656a91a8-3e98-40cb-b269-e9f2432d375c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f3:d5:1d:bf:88:a1:e6:48:9a:09:9a:ea:a2:d8:40:21:18:
46:9a:ef:cf:98:e6:49:68:51:62:25:c5:23:6d:80:08:d0:d2:
85:83:ad:f6:43:5c:5e:27:56:b7:7c:e9:d6:3a:d3:1c:70:b6:
82:45:43:05:90:4f:0b:8c:2d:21:5d:02:08:36:14:ae:3e:8f:
49:6e:49:76:e3:b7:d5:94:e0:8a:97:03:ee:36:bb:b9:b3:4b:
fc:03:c3:fa:04:79:5e:e8:23:d3:d6:d2:ce:08:cf:0a:1c:02:
fd:41:71:fb:b7:5f:4d:72:f8:e0:ae:42:ea:04:e1:e4:42:73:
71:44:ec:4c:00:72:c1:e5:b4:95:a5:a5:5a:72:9b:81:58:a6:
18:c3:c8:b9:e4:35:f1:47:0b:28:38:24:fc:3a:53:2b:f6:21:
f5:d1:ca:b6:a1:8b:a4:3d:54:bf:c4:fc:07:2e:44:07:ba:d8:
53:c8:ed:06:4c:11:ad:15:72:60:6a:e4:98:00:26:48:72:bf:
c8:db:6e:f9:58:ea:4d:b4:90:cd:ef:51:2f:0c:47:78:b4:ee:
ad:51:e6:45:53:69:ad:bc:2f:e8:68:72:37:f9:21:6b:91:8d:
4d:02:82:b1:22:d3:06:1a:b5:b1:84:20:f0:da:56:b5:61:97:
b5:02:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-ams.rpki-client.org