Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/810d4913-014e-43bf-9b77-cf5207334ae4.roa
File: 810d4913-014e-43bf-9b77-cf5207334ae4.roa (raw, json)
Hash identifier: ABAwJakvKMZUMq4md4NB8PROvgbVQpGFnCmguvDbCWM=
Subject key identifier: CE:B0:6D:52:D2:F6:18:C4:9C:63:47:52:FC:47:12:C2:82:41:76:73
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AF6AED01277175286A8F85EFEA052FF329085
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/810d4913-014e-43bf-9b77-cf5207334ae4.roa
Signing time: Fri 29 Sep 2023 00:00:00 +0000
ROA not before: Fri 29 Sep 2023 00:00:00 +0000
ROA not after: Fri 03 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:ae:d0:12:77:17:52:86:a8:f8:5e:fe:a0:52:ff:32:90:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 29 00:00:00 2023 GMT
Not After : Nov 3 23:59:59 2023 GMT
Subject: serialNumber=37a05d82f2676799fb8f1cac67704257578f28deed5be08fde5264ec28f8c364, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:d5:9e:62:12:a0:17:f2:a0:f1:9a:41:dc:
04:35:07:34:f4:ec:1c:58:33:a7:00:df:43:d2:c2:
b1:f6:ec:a6:0f:a3:0a:b6:d9:57:5e:45:83:52:5e:
28:12:80:f2:01:0a:2e:5e:de:71:90:72:ec:93:8a:
c0:0d:15:86:b6:16:0f:11:dd:b1:fd:5c:df:bb:01:
7c:8b:6a:dd:6c:03:f5:82:36:dc:c4:f6:df:06:88:
61:be:f9:3d:44:a8:71:7b:86:4f:4a:95:dc:bd:01:
82:ab:c0:1b:6f:a7:b3:38:ae:dd:1e:1a:3a:94:82:
5f:ea:dd:1f:27:e2:f1:c0:fc:1f:88:9a:ab:f7:70:
b5:44:6a:c0:2a:a7:5b:ac:72:b6:07:e7:41:00:0d:
9d:80:25:10:9b:80:38:d5:36:bd:73:41:c6:21:4f:
60:22:1d:25:7f:b2:5e:ae:f8:fa:54:36:91:2c:40:
f9:a7:db:0e:36:8d:f6:f7:21:a9:40:2b:88:56:86:
20:fb:cd:b6:59:f8:d9:e2:46:f3:44:c2:37:fe:ec:
b9:1a:b4:7c:27:0d:0f:72:f8:bb:89:de:82:92:cb:
e7:82:27:3a:30:a4:10:5d:af:06:41:0e:33:00:52:
01:1d:e1:b4:a1:88:f5:97:f5:75:eb:d7:1b:25:c5:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:6D:52:D2:F6:18:C4:9C:63:47:52:FC:47:12:C2:82:41:76:73
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/810d4913-014e-43bf-9b77-cf5207334ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
40:19:65:4a:13:24:b9:53:43:5a:a2:e9:f0:71:47:04:c2:7b:
86:84:0d:2c:fd:f4:7a:b9:4a:fc:4c:4e:2e:ab:ff:4b:4e:4b:
55:12:ca:35:fc:a7:11:d2:6f:d4:aa:29:f8:c9:f4:6c:d9:3b:
3b:68:80:d1:2d:8a:9c:36:8d:b4:21:bb:6a:5d:96:38:de:45:
34:75:39:0f:77:12:f3:57:bb:af:5d:6a:f8:b5:27:ad:b2:2b:
8b:9f:ce:99:cd:ab:d0:33:12:dc:fa:ba:b9:a9:e2:92:0f:8c:
40:f2:1c:c9:0e:0a:4b:6c:09:e7:2d:e8:90:6c:85:4c:b5:c3:
af:dc:ee:b5:9f:80:d0:9f:4d:7e:fb:ef:34:a6:ec:29:d6:2b:
88:58:3a:da:c8:a8:f4:f9:2d:ce:a8:cf:0a:87:96:95:e8:be:
2c:9f:72:bc:ad:d9:ea:95:6d:4d:cf:5d:77:8d:fd:5e:a3:89:
40:b6:de:85:f3:a4:bf:32:3e:46:de:8a:66:55:01:2c:20:36:
47:24:40:fd:2c:6d:d7:39:1b:a5:14:b7:9f:87:6e:67:8a:f3:
58:9b:1f:dd:89:a3:03:97:4b:e3:cc:b3:f9:a8:8e:b2:ee:5e:
3a:ba:d3:54:4b:5a:02:c8:92:0b:27:b1:82:c7:f9:3b:e3:3c:
e3:2b:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-ams.rpki-client.org