Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7aed6ef1-103d-4e04-ab35-dc06eae199ed.roa
File: 7aed6ef1-103d-4e04-ab35-dc06eae199ed.roa (raw, json)
Hash identifier: JFko8wuz8bhsu6PxTw+2iDbAYZ5dyfWNX+62Rrg3atA=
Subject key identifier: 8D:A1:BB:D8:EE:53:5E:FA:50:69:DA:96:E6:CC:EF:A1:3C:8D:AD:CB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0470E3C29DEBADD9FC3D2F872E22A1A486D57ADA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7aed6ef1-103d-4e04-ab35-dc06eae199ed.roa
Signing time: Wed 13 Dec 2023 00:00:00 +0000
ROA not before: Wed 13 Dec 2023 00:00:00 +0000
ROA not after: Wed 17 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:70:e3:c2:9d:eb:ad:d9:fc:3d:2f:87:2e:22:a1:a4:86:d5:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 13 00:00:00 2023 GMT
Not After : Jan 17 23:59:59 2024 GMT
Subject: serialNumber=511770d2bd5b7109a8cf69af15306e7ab44fd45311b34a202dbdf5d1c984f508, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:b0:5c:33:0f:81:7a:19:30:9a:4d:d6:d7:
99:3d:f3:32:c1:c1:f4:a4:42:26:f5:70:c9:55:e0:
8f:bc:0d:04:08:c1:c3:4a:e1:22:a7:ad:27:39:14:
4d:13:2b:f0:07:88:8b:aa:9d:8f:25:ab:ee:08:41:
be:be:33:10:5f:63:04:d3:53:71:f8:b8:cf:04:43:
fa:9a:b2:be:98:50:8e:3e:14:c7:fd:7e:51:9d:93:
1d:7d:8e:5e:4c:fc:0a:5f:04:90:d1:d3:bd:cc:ab:
ac:80:8b:63:ac:95:62:9c:f9:fa:4c:6d:a1:c0:47:
b1:e1:d9:4f:20:52:d2:83:94:82:cc:60:6a:e8:62:
cd:ea:58:ff:ba:6c:e3:d8:33:1f:72:59:e0:40:72:
31:2f:6c:e3:b8:36:e7:f0:53:57:ea:33:b9:68:61:
36:30:96:04:6b:a2:6e:6b:7a:a3:bd:36:61:ca:4c:
75:cb:a3:a2:12:0d:c2:33:33:0f:d6:1f:27:a8:dc:
0e:a0:8c:a9:dc:b7:87:ac:3e:47:a6:e3:c8:ff:99:
eb:11:a5:44:96:81:29:66:c5:39:3e:45:2c:68:b2:
fc:58:54:d1:e5:eb:11:dd:28:6b:09:be:53:22:0b:
9c:7b:71:ce:26:27:bb:3c:bb:cc:f9:c0:78:4c:7a:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:BB:D8:EE:53:5E:FA:50:69:DA:96:E6:CC:EF:A1:3C:8D:AD:CB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7aed6ef1-103d-4e04-ab35-dc06eae199ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e6:9c:ab:1f:6a:7a:d6:a7:be:3d:5a:46:a5:59:ae:84:af:
56:9c:f4:fb:c8:09:05:8b:c2:a3:cb:0d:b1:3f:ee:db:d5:59:
40:3a:4d:d2:cc:ec:d3:df:7b:af:14:77:2f:21:82:5f:a4:aa:
d3:dc:59:07:1d:8d:20:cc:83:27:15:1d:8e:a7:6b:cc:51:82:
64:16:20:7f:8c:81:2d:8b:72:aa:2e:fc:07:ca:31:f8:97:e1:
3b:d7:2f:99:e0:27:9a:ce:b2:02:c4:5f:b8:bd:8c:a1:45:81:
60:66:38:de:aa:85:0a:45:65:92:be:4a:53:bf:59:40:9f:44:
23:cc:9b:75:b3:3a:ae:e9:c7:b5:c4:05:3c:c6:c0:49:02:56:
ba:3d:26:f0:d5:80:96:24:a7:8d:4b:c1:e2:eb:51:9b:14:72:
da:1b:3e:0f:06:88:ae:ce:46:ad:cf:11:3b:d6:15:0b:d3:8e:
48:77:56:69:94:89:fb:23:42:7c:68:0a:62:43:d7:d3:e7:92:
e4:ad:c2:a6:5d:bc:51:85:2b:40:1f:ec:2a:1f:96:26:1f:90:
ce:a8:e0:fc:2d:f9:f7:8d:5d:eb:b2:22:48:1a:06:f6:ac:cc:
3b:d0:6b:cd:45:f6:18:5b:40:18:7f:bc:3f:17:17:23:53:a9:
95:56:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:55 2024 by rpki-client on console-ams.rpki-client.org