Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7cfb0eef-5b75-4640-8be0-d81d2d316772.roa
File: 7cfb0eef-5b75-4640-8be0-d81d2d316772.roa (raw, json)
Hash identifier: UklpQCfJnUu1NniRrqB5uWv3Ya8QwEkF3ezyQsvNU80=
Subject key identifier: D9:90:6E:39:94:B5:42:A2:20:A6:60:5A:7F:E1:A7:04:FE:6B:34:57
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4030FC25846702914FEEDD9915D50C9D2EC92FAA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7cfb0eef-5b75-4640-8be0-d81d2d316772.roa
Signing time: Tue 19 Sep 2023 00:00:00 +0000
ROA not before: Tue 19 Sep 2023 00:00:00 +0000
ROA not after: Tue 24 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:30:fc:25:84:67:02:91:4f:ee:dd:99:15:d5:0c:9d:2e:c9:2f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 19 00:00:00 2023 GMT
Not After : Oct 24 23:59:59 2023 GMT
Subject: serialNumber=1330dd13c38402b58adb5bf4163809e9d87c4f16a2156df0e954af1fd88e891b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:fc:82:70:94:1d:2e:bc:98:9f:07:4d:5a:
8b:d9:8a:aa:db:d8:01:21:37:bb:d7:cf:0a:c2:7c:
d1:fd:d6:4e:de:26:18:df:20:39:b5:ff:36:e3:97:
8c:43:c7:d5:2e:fa:17:44:03:98:93:13:b0:44:cd:
17:6d:88:79:c1:f4:62:b8:a9:05:6e:8b:84:13:a3:
a0:b5:c1:6f:fb:32:be:85:72:e4:5b:63:9a:95:76:
9c:fa:67:51:ab:aa:4f:fa:19:1b:36:2e:44:51:58:
86:ef:ef:b0:29:ce:e2:f5:3a:c1:c5:0c:80:c9:67:
6d:9e:d8:a5:d4:af:02:b7:1c:31:28:6a:f3:84:10:
1b:18:1c:d1:84:57:be:7c:66:e6:39:04:7f:e2:50:
db:44:91:13:9f:be:4f:5d:eb:7f:6b:46:a3:c4:54:
d5:00:da:ee:81:17:ed:46:f1:e3:7f:da:0b:89:b7:
7d:a0:c6:55:79:30:16:d5:a3:ca:5a:58:24:fa:05:
f8:af:13:c7:e4:bf:ad:b0:bc:35:a7:51:af:2b:93:
d9:82:6a:a8:58:cc:8f:10:13:80:f6:c1:6c:2e:e6:
ff:48:81:42:24:c0:b7:b6:6a:e8:54:da:ff:db:72:
2c:e8:04:3b:53:2d:e5:2f:2b:34:62:fd:36:cc:14:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:6E:39:94:B5:42:A2:20:A6:60:5A:7F:E1:A7:04:FE:6B:34:57
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7cfb0eef-5b75-4640-8be0-d81d2d316772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:59:99:ff:ce:cd:c2:60:85:1b:01:8c:08:24:0c:ed:b6:11:
c2:57:34:81:d2:7d:d1:e0:32:eb:a3:6b:26:5f:0f:c3:9d:62:
9e:2f:3a:41:f4:7a:71:3d:d8:62:7c:f0:ac:c8:cd:ea:8f:28:
01:98:6a:0e:13:c8:12:86:c6:ff:ea:da:04:f2:e6:c5:55:cd:
5a:bb:e2:9f:d3:b6:45:10:f0:1f:b3:e9:ca:75:61:25:97:54:
95:3b:3b:c5:73:15:83:71:65:a5:8d:b5:6a:f3:0f:05:57:4f:
22:b3:97:57:7f:04:c0:bc:04:77:cb:da:a0:f1:0c:21:b5:16:
fc:67:da:36:59:e4:8b:d7:82:f4:0d:1e:a5:50:b3:c7:b2:d8:
1e:d1:a8:fa:38:46:d0:fc:a6:23:38:ff:01:19:7f:b8:47:3b:
11:9e:ba:76:a8:45:10:f8:a9:8b:26:66:77:ab:b1:a2:5e:7a:
a5:5c:b5:0e:a4:1c:6b:b4:0f:bc:72:54:1a:32:96:d2:20:f4:
7a:7c:1e:28:42:e6:b3:bf:0f:ce:be:ef:98:c3:be:03:56:1a:
84:a6:00:43:8d:aa:75:70:77:a8:95:c8:fd:45:63:4b:fc:ac:
d7:4f:ca:09:93:19:0b:03:26:10:c9:a3:fa:4e:0b:87:32:b8:
77:8c:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:55 2024 by rpki-client on console-ams.rpki-client.org