Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/75dbd7f8-4730-42ff-8663-91ab4bdce5b0.roa
File: 75dbd7f8-4730-42ff-8663-91ab4bdce5b0.roa (raw, json)
Hash identifier: lZSXaYhhb25Zbj0A4RxiRhBNn8PQKtzMTZagl1mhAmw=
Subject key identifier: 55:AC:2B:1C:09:F1:FD:7B:C9:7F:C7:95:11:06:7F:CC:92:65:80:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1579006F6753549F8CB312709C39809EA572FB46
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/75dbd7f8-4730-42ff-8663-91ab4bdce5b0.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:79:00:6f:67:53:54:9f:8c:b3:12:70:9c:39:80:9e:a5:72:fb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=c869c84596bd471fe1e7333d23a09f4ea3a0f9f4d0b82e20f0a93ebbf5b96d18, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:35:fe:ec:f9:2d:50:c4:ca:dd:96:d1:09:
54:94:83:51:45:47:8b:95:c9:65:26:96:d2:4c:2e:
51:25:1e:f6:32:8c:d8:bb:d4:ce:05:ce:86:00:bd:
98:2f:c8:be:50:f0:76:7c:ae:8c:cc:56:d1:cb:ae:
3e:31:ad:7c:d0:11:d2:a1:d7:bb:da:f7:6c:15:8d:
f0:f4:9f:ee:34:e6:5a:66:73:72:46:e7:e9:19:27:
54:94:e8:f3:71:a0:2a:d8:94:93:1d:3f:34:a0:50:
44:c8:38:bf:e3:bd:4c:56:f8:cc:77:e7:fb:cd:ac:
37:ec:ad:d1:3b:26:c6:d1:14:99:2c:1e:6e:d2:bd:
87:77:df:bd:12:81:79:6e:d3:c2:3d:b4:c7:54:14:
e0:83:6b:ed:81:e3:5f:31:67:ee:60:db:e0:da:d1:
16:b0:18:df:1b:5a:a8:9c:13:0b:e1:26:ca:3c:ad:
2d:ba:c4:53:15:41:3c:e0:e3:5c:2a:22:98:69:c2:
1c:ec:6a:d1:fc:04:63:b0:fa:52:35:dd:24:84:9d:
9a:8f:d9:af:bf:3b:b2:da:5a:f6:08:24:22:c0:dd:
2a:56:44:e2:b8:d6:b6:6f:e4:c9:2c:26:62:28:8f:
95:a0:c9:5c:a2:e0:a5:ad:1f:cd:39:13:84:e7:d8:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:2B:1C:09:F1:FD:7B:C9:7F:C7:95:11:06:7F:CC:92:65:80:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/75dbd7f8-4730-42ff-8663-91ab4bdce5b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a3:22:31:26:ea:ce:49:0e:9f:01:93:03:a9:c5:b7:9b:f1:
6c:40:cb:40:6b:e1:0e:8c:dd:c1:de:f8:52:7f:a3:f5:f4:82:
58:49:13:ac:d5:e9:92:7d:c5:b7:94:e1:65:b6:b3:94:80:b3:
bd:ad:79:84:fc:c5:d7:02:5e:56:51:69:8e:99:94:34:65:b4:
1d:2d:96:ad:2d:83:2c:8e:37:e0:48:4f:a5:e0:2d:b0:24:3f:
f5:28:29:43:32:13:95:8c:3b:52:1c:e9:eb:34:72:48:97:31:
32:40:bd:2b:4b:34:ab:c2:88:40:b5:05:61:b1:df:d3:16:50:
fd:9e:d3:53:ba:7d:af:0f:b1:26:23:8f:8a:0a:8a:18:3a:e8:
37:01:5d:b2:e4:da:ee:fd:ca:fb:aa:53:52:f4:af:ae:33:24:
e6:13:af:6e:2a:20:30:50:91:e3:13:db:b4:58:ee:07:20:08:
a0:59:9b:52:04:6b:83:51:9a:4e:03:2c:e2:93:a2:df:9e:6d:
93:c1:ed:28:28:9d:c3:db:f7:5d:6a:83:85:08:6e:28:20:d6:
36:4a:4c:b0:22:5a:f2:13:9b:16:c9:41:9b:1b:58:ff:a2:a0:
ff:93:e0:a1:75:94:68:75:80:49:c1:64:bf:76:3f:9d:cf:d1:
f0:07:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-ams.rpki-client.org