Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73453613-5457-49fd-9794-d69d4c154dcd.roa
File: 73453613-5457-49fd-9794-d69d4c154dcd.roa (raw, json)
Hash identifier: nY5W8r8HqjKbH3E7jVybOnQ4d5SrBRDdb4PngcEC11Y=
Subject key identifier: 42:A5:DD:DB:31:7B:9B:AB:5B:4F:8B:91:EE:AC:CD:41:91:BE:EC:31
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 163CC63832959C94DD3323F883E572157591A4E4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73453613-5457-49fd-9794-d69d4c154dcd.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3c:c6:38:32:95:9c:94:dd:33:23:f8:83:e5:72:15:75:91:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=2f7d2393319d4c16a92ff886d8c15e8a57dc72b4aaa9888f56f01911bc3bd869, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:2e:52:79:a9:ce:36:e3:3a:96:b3:f5:65:
34:04:6f:76:39:94:71:3b:b5:db:6c:65:99:9a:c2:
4b:2d:3b:b2:1b:cf:67:40:31:8f:26:47:af:4e:b5:
f4:d3:78:1d:02:ff:2a:87:1d:cc:f9:1e:8b:e1:ec:
7f:a4:33:80:db:ca:d1:c3:0c:94:ac:6a:f2:60:9c:
26:37:af:30:c1:04:fa:bc:96:e1:fb:0d:51:ea:a1:
14:ba:ad:60:17:3f:c9:1b:c1:a5:cf:c6:5d:86:ef:
84:e4:8a:3d:5b:0e:39:15:60:a0:93:7c:ea:42:be:
ee:4b:d7:00:e5:96:2f:61:5d:d3:f2:ab:a9:cd:64:
36:a6:1f:99:3f:1a:eb:85:d0:8d:33:cd:28:9f:e9:
20:04:d0:f0:c7:e4:88:08:d2:6a:97:27:45:eb:5f:
b6:04:7a:19:ee:9f:51:2a:b6:89:f6:a9:5f:67:c4:
90:d9:3a:53:99:b4:7c:98:b3:a6:2c:d0:68:ec:42:
e0:0f:f8:b9:bf:72:de:e3:47:05:a1:88:bf:4c:cb:
65:06:e3:ec:49:3c:98:1b:74:f5:5e:78:d6:7e:b0:
f7:2c:ec:d3:66:12:94:0f:64:b1:6d:7d:fd:01:9a:
a9:ea:26:49:2e:92:e1:a1:45:f7:5e:13:06:fa:fc:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A5:DD:DB:31:7B:9B:AB:5B:4F:8B:91:EE:AC:CD:41:91:BE:EC:31
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/73453613-5457-49fd-9794-d69d4c154dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:92:86:6b:fa:a4:8f:e5:6e:e8:b1:1e:99:50:36:2f:23:89:
14:3b:b7:7b:90:b8:cc:63:1c:39:33:ca:bf:b5:83:23:1f:6e:
e0:d2:f3:8f:f8:de:30:e5:9a:70:ad:f5:15:05:24:fe:a5:77:
cb:80:fa:6a:93:42:5e:cd:32:07:92:7a:1e:a9:39:f4:b7:99:
24:67:14:e6:af:03:9b:7c:b0:59:ab:47:a6:1a:a1:99:d9:af:
68:59:e4:10:29:d6:21:ff:c0:9e:65:25:38:d2:b3:5c:da:0c:
e8:6d:ea:bb:60:0f:66:7e:67:78:c8:10:4d:3b:80:84:19:d2:
22:c4:7d:c3:1d:29:3a:bf:72:c1:06:9f:d9:28:f1:52:9c:1d:
71:34:3d:20:da:14:3c:f5:70:81:c6:53:5d:fa:31:91:ef:c8:
af:69:7e:d7:56:44:d2:40:d3:94:9c:e0:4f:f7:5c:b8:2c:72:
10:65:37:c1:91:67:1f:af:a5:6c:0d:91:58:21:c7:1e:7a:e9:
1e:a5:c1:27:a5:fb:2e:5b:08:d3:73:18:00:e9:d5:fb:28:51:
76:1a:cb:12:65:08:65:e5:88:e5:37:cc:67:dd:98:79:d9:77:
98:6c:34:44:9b:66:57:af:6f:66:28:8e:c1:78:5c:a5:f8:21:
82:c4:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-ams.rpki-client.org