Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c420a43-2bff-4978-ace8-8ad0293e14d8.roa
File: 6c420a43-2bff-4978-ace8-8ad0293e14d8.roa (raw, json)
Hash identifier: zLkkrm/Lf52qBhLlNwSh8qx2fiO2WEaVMe+KzcwSDfw=
Subject key identifier: EF:7B:AE:75:16:5B:A2:D5:25:94:22:03:2E:E0:F2:87:2F:88:44:61
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 30E1D3FEA6E2C55D30955C29BCA7FD7AEDBDC762
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c420a43-2bff-4978-ace8-8ad0293e14d8.roa
Signing time: Sat 01 Jul 2023 00:00:00 +0000
ROA not before: Sat 01 Jul 2023 00:00:00 +0000
ROA not after: Sat 05 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e1:d3:fe:a6:e2:c5:5d:30:95:5c:29:bc:a7:fd:7a:ed:bd:c7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2023 GMT
Not After : Aug 5 23:59:59 2023 GMT
Subject: serialNumber=8a1a31919ca921010139247bca41d4a4bd5e3304e1458abe90ccbad325eafa3d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:12:59:e1:4e:a3:a7:a0:14:1e:b9:54:ae:
eb:de:98:a1:27:cd:52:22:3b:7f:d1:84:0c:1a:a7:
04:be:23:e6:31:19:11:b3:a4:f5:51:5e:67:a6:4b:
69:51:94:9d:0f:21:af:2f:9f:91:ca:0a:87:e7:92:
46:a8:35:a1:57:cc:45:83:f4:39:15:61:5d:da:03:
bf:02:bb:61:d0:20:c8:24:81:8c:95:52:a5:15:26:
ec:12:71:b2:68:a7:5d:94:ea:14:6f:54:eb:18:2c:
e3:d0:38:d0:21:6c:c4:28:ad:54:c9:96:3c:33:cc:
90:92:07:01:a4:5f:26:02:6b:14:9d:bc:da:04:f1:
cf:d1:30:6a:75:ee:7c:95:65:2f:7e:b4:6b:2b:59:
56:3a:1c:a5:b7:e8:c9:aa:88:e6:62:66:e2:ca:6c:
b5:85:c4:7f:23:30:e4:11:ac:85:8b:53:ad:58:52:
60:90:93:6e:66:e9:42:44:5a:98:f0:9e:cb:b9:84:
f4:97:23:87:06:79:d2:53:56:06:74:50:4b:45:5c:
2d:7a:71:75:29:d8:2c:24:7e:1f:b0:04:eb:b2:26:
94:b3:48:2e:6d:4d:cb:8a:62:32:ac:56:19:3a:0c:
65:b6:50:71:22:e4:64:76:d9:34:d8:a1:c2:00:80:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:AE:75:16:5B:A2:D5:25:94:22:03:2E:E0:F2:87:2F:88:44:61
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c420a43-2bff-4978-ace8-8ad0293e14d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f1:c6:c2:de:2b:26:83:8f:94:f5:ac:bd:51:fd:1e:de:ff:
2d:87:95:d9:c9:ee:cb:bd:cf:54:5b:b8:55:04:bc:36:76:a2:
85:57:9c:10:24:5e:d4:d5:b4:4c:32:f3:14:af:93:c5:1b:7d:
8a:cf:02:37:c3:da:7e:e8:a1:86:fb:0f:58:31:16:4b:d5:5e:
10:26:3b:6d:7a:2e:8a:fd:dc:ac:8e:cc:74:0c:92:1f:c9:f6:
4d:df:6c:55:dc:61:93:22:3f:0b:84:19:87:c3:a8:29:d2:1d:
ba:0c:40:9c:41:f2:71:0e:0e:4d:e0:0e:22:96:7e:eb:16:fa:
29:22:0f:fd:cd:5e:cd:81:99:28:de:6c:d7:e9:14:d3:cb:05:
ea:9c:6b:1d:90:6f:a8:18:4e:e0:b0:fe:29:2c:6b:d4:fd:e3:
00:e8:90:35:ea:bf:af:c0:70:6a:41:37:2b:09:f7:a8:95:43:
aa:7b:73:a2:d7:ba:5b:f7:c0:24:6e:7b:b9:ec:cf:d5:43:1d:
79:b4:e1:3e:5a:69:63:29:38:54:6c:6b:8c:13:3c:ac:3b:db:
a3:31:2c:c2:01:29:01:50:d3:98:07:31:b5:0e:33:58:b4:d0:
cf:e8:b6:f4:8c:f0:66:a1:9e:66:d9:64:61:fa:22:e3:9a:7e:
ba:98:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-ams.rpki-client.org