Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/675a6a70-b4c4-42dc-a867-a32dda4ff9c9.roa
File: 675a6a70-b4c4-42dc-a867-a32dda4ff9c9.roa (raw, json)
Hash identifier: zU1xvnlq8/GeOqRusYFpdSNTtwa/rjxXXbFEWC529q0=
Subject key identifier: 4C:F8:63:FD:8A:36:60:F3:97:9D:EB:72:F6:F6:05:CF:9E:6E:71:01
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 737147BF3278DB4E449688B79795B1CDA924A00C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/675a6a70-b4c4-42dc-a867-a32dda4ff9c9.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:71:47:bf:32:78:db:4e:44:96:88:b7:97:95:b1:cd:a9:24:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: serialNumber=319998644318f89351b36c1387096d1683b57a2fade53bb63f6ac3047b8cba2c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:c3:4a:b7:2d:11:da:99:96:90:94:40:8a:
a3:18:02:cf:1b:16:15:ce:4f:c8:d6:6e:f9:77:3b:
d9:65:98:f2:57:32:e0:5c:c5:47:17:a0:a0:4b:0c:
36:ef:51:4c:6d:8a:4d:50:9c:8d:b8:36:22:48:b5:
ec:0d:65:d8:c1:75:68:09:4a:c6:90:44:72:55:28:
bc:38:02:c2:18:97:e1:d4:39:81:48:7d:89:02:af:
01:5d:0e:f4:a3:d6:a9:f7:bd:43:d3:70:45:7b:5c:
04:58:8a:bc:f4:17:62:78:e9:98:3f:fc:25:25:2b:
94:58:5e:b8:3f:2f:c9:94:35:a5:08:97:3f:f4:13:
4c:5c:7c:21:ab:a3:e7:b3:bf:34:12:80:68:bf:55:
b4:f4:af:f3:60:d0:f8:2a:bb:7d:df:dd:df:d4:f3:
bc:b3:6e:c8:f4:26:d9:7d:04:8c:8b:47:be:90:96:
62:c6:7d:47:8d:6f:a8:19:95:62:a4:aa:f8:cf:a6:
c4:ce:1b:61:1a:90:1d:f9:40:92:eb:49:52:b6:98:
e0:e0:51:77:f8:15:d3:10:10:d9:12:8e:73:d1:ad:
aa:a7:43:f4:5b:0b:7c:d2:2b:4c:db:04:a1:23:09:
f3:72:8f:65:61:f0:9e:6e:29:df:45:8e:76:7b:bd:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:63:FD:8A:36:60:F3:97:9D:EB:72:F6:F6:05:CF:9E:6E:71:01
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/675a6a70-b4c4-42dc-a867-a32dda4ff9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:1d:bf:0b:90:ec:8c:80:9b:97:00:8f:20:c2:38:42:5f:
11:2c:79:eb:89:e3:59:ca:6c:43:58:9a:b4:b3:a7:ed:d9:c5:
69:29:d1:62:87:02:ca:dd:5e:8b:bf:1b:60:0f:ff:e6:4b:2b:
a2:3f:7f:cb:6e:52:c7:dc:ba:96:bc:74:1c:79:7b:bd:be:f8:
59:a3:1a:e5:47:ce:9d:b8:cd:fc:97:e8:30:fa:d6:a5:56:c1:
aa:36:4e:c5:b6:81:61:96:61:41:06:8a:ec:2a:67:5b:2f:76:
10:11:93:d3:fb:67:97:ce:a0:1f:be:34:ef:0f:a9:34:ef:a8:
4b:d5:c8:61:0d:a1:25:9d:94:17:3e:28:4d:d6:94:40:04:d9:
b3:e9:ca:5b:a0:37:f9:f1:3b:9b:5e:d5:33:34:5d:84:f1:6f:
45:c3:60:56:e5:20:9b:51:e9:44:34:99:7b:b1:0a:ba:b8:43:
c9:2d:a8:13:bd:3e:0b:02:6b:49:a7:98:7c:76:9b:c4:b3:cf:
a3:10:9c:6c:bf:16:20:60:fb:1a:0f:3a:1e:80:43:9a:2a:d6:
3f:e3:f6:51:23:74:e0:a3:a2:10:3f:d0:17:1b:d0:a6:f6:d5:
50:16:69:88:d5:c3:fe:31:0e:a3:f5:27:3d:a1:49:7c:37:71:
50:32:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:30 2024 by rpki-client on console-fra.rpki-client.org