Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77ffc112-66fe-4815-bbaf-68344b982ffe.roa
File: 77ffc112-66fe-4815-bbaf-68344b982ffe.roa (raw, json)
Hash identifier: vA79T1g9zNMlhB7sbHPz9v07QsA2Nl/qcE++cY45ZuY=
Subject key identifier: BB:F2:E9:56:7C:61:9E:58:CF:49:09:6F:4A:D8:5D:B8:0C:10:58:1C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71E047369A3F8A7831FEE35B4F6CC6E734A975C4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77ffc112-66fe-4815-bbaf-68344b982ffe.roa
Signing time: Tue 04 Jul 2023 00:00:00 +0000
ROA not before: Tue 04 Jul 2023 00:00:00 +0000
ROA not after: Tue 08 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e0:47:36:9a:3f:8a:78:31:fe:e3:5b:4f:6c:c6:e7:34:a9:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 4 00:00:00 2023 GMT
Not After : Aug 8 23:59:59 2023 GMT
Subject: serialNumber=836d00acdb59449b9ceb701ac4fc0fd4bf77928fdd4d306831d167b5fea831a1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:79:10:b3:47:8a:d3:a3:88:b6:94:eb:b1:d8:
cc:c1:f4:1a:c5:f1:3d:a7:95:9b:49:18:e7:3e:36:
4f:ad:a3:61:21:b8:5a:7a:85:83:0e:95:dc:a8:5e:
81:8e:53:e0:16:80:dd:4c:f1:06:38:73:8b:30:a6:
c1:8b:42:6a:81:4b:67:75:ac:8d:d6:8c:ea:3e:8f:
91:18:60:60:ad:7a:31:7b:f6:62:b9:80:90:d6:4a:
4f:06:2c:66:c0:af:49:c3:5c:23:42:37:31:c8:01:
e2:92:9b:96:06:2f:db:a1:00:9f:96:62:17:d5:13:
67:6d:cf:a8:9a:a6:04:55:a4:74:5c:a6:73:74:23:
f7:cf:54:94:71:93:fb:4f:5d:6f:3d:8b:ca:84:62:
49:e3:a2:05:9d:c8:a2:1a:22:53:9b:2e:4e:86:31:
d4:95:67:d9:18:72:7f:0c:9c:16:fd:2f:d3:fb:08:
32:ca:47:02:0f:d4:ff:61:13:c6:2d:01:6c:9e:89:
c0:7e:ff:e9:a4:32:4b:0a:0a:80:f1:fc:c5:7b:05:
b6:39:c5:c2:ba:e5:13:de:4c:ec:bb:b3:b4:75:e9:
e1:c6:0a:f1:c6:04:d2:a0:4e:76:be:7f:25:1c:90:
1f:d7:34:01:fb:0d:55:b3:fd:2c:f2:d4:68:91:84:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F2:E9:56:7C:61:9E:58:CF:49:09:6F:4A:D8:5D:B8:0C:10:58:1C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/77ffc112-66fe-4815-bbaf-68344b982ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:8f:e6:39:fe:e8:e5:80:2e:bc:c7:d7:95:09:58:32:c7:bb:
74:95:49:d0:56:cb:95:a9:c9:09:cb:84:1f:f6:82:b6:fd:70:
a8:2b:57:81:fb:53:d6:ef:be:c9:f3:94:3d:8c:59:ca:c5:34:
3a:66:47:cb:1c:48:5b:15:6c:d6:94:04:7a:08:1d:05:4f:fe:
d2:5a:fb:68:bc:80:ca:93:c4:dc:b8:57:18:72:96:65:c5:24:
2c:e6:5b:aa:06:ef:fd:9e:20:0d:d6:9d:65:54:a8:ef:05:3b:
94:e2:29:b4:6a:93:ca:5a:a4:80:f6:a4:06:f1:6e:ef:76:ca:
73:02:a2:d6:18:8c:35:c5:c3:a8:1c:80:26:a1:a8:25:bb:6d:
c3:65:8d:60:0e:30:f0:e7:ea:f3:69:df:ba:8e:3b:33:f1:70:
34:ad:84:79:ea:c1:ad:d4:c5:81:9a:5f:8b:b2:55:a4:cf:14:
82:70:5e:84:e6:94:ba:d6:a4:50:81:28:0d:0a:e5:21:19:ea:
2a:8a:7e:20:d0:6a:1a:0c:3a:1d:48:0d:af:22:a3:e3:39:db:
e9:db:7a:d1:9e:9b:d9:b8:7f:81:06:88:8e:29:b5:70:e6:dd:
89:87:c3:b6:2f:d9:36:f1:5f:89:72:4a:39:86:96:c1:f5:61:
56:3a:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:54 2024 by rpki-client on console-ams.rpki-client.org