Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81900947-8802-46dd-b591-8eb1eddda525.roa
File: 81900947-8802-46dd-b591-8eb1eddda525.roa (raw, json)
Hash identifier: mQCR8SFRA/8V08vUOqExB3FDrx0F6OnVwIIajVdi0CU=
Subject key identifier: E7:93:27:AA:95:84:3A:70:5B:18:70:76:C0:04:7E:F8:B3:D4:ED:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3DE93AB7E583143B59CD52C1E34DA6C5A2760C69
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81900947-8802-46dd-b591-8eb1eddda525.roa
Signing time: Sun 29 Oct 2023 00:00:00 +0000
ROA not before: Sun 29 Oct 2023 00:00:00 +0000
ROA not after: Sun 03 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e9:3a:b7:e5:83:14:3b:59:cd:52:c1:e3:4d:a6:c5:a2:76:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 29 00:00:00 2023 GMT
Not After : Dec 3 23:59:59 2023 GMT
Subject: serialNumber=6d195119d623a53d0c4c189c61dcc81582e7ae553bdd3bc217068a59877cadc4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:d2:e4:03:b4:c4:a1:df:77:cd:9c:02:49:
51:07:17:11:92:69:68:05:d7:de:be:b5:2c:95:a1:
c0:bc:a4:05:22:24:27:b6:7b:4d:91:b9:28:28:35:
4e:72:1e:80:b0:69:3b:f9:08:81:7c:ba:3a:f9:35:
36:af:ca:52:27:3c:b0:14:31:a2:71:3f:2a:f3:1b:
24:53:49:73:74:6a:e2:63:f0:a2:9b:89:1b:0b:0e:
b2:e5:18:13:d3:9e:40:34:15:b0:9a:c8:a9:95:86:
d7:df:e6:26:59:ee:8f:9e:a1:18:8e:d5:fa:4f:db:
be:53:b6:eb:06:f2:45:ce:31:3d:98:1e:11:29:76:
ab:96:e8:e7:de:2a:47:41:fe:a8:a7:d2:53:54:ba:
46:25:bc:66:40:77:f2:7f:a7:0d:e8:fb:9f:b9:0d:
8f:d3:55:3e:d2:4f:f9:77:99:7e:ae:cb:e9:67:6b:
7b:10:53:0b:ac:a9:30:b6:88:f1:2c:c1:1f:78:e0:
32:9e:2c:21:08:5b:45:4c:66:4f:da:38:97:59:01:
ce:eb:33:2d:2b:7d:2f:9f:dd:10:73:b0:6b:56:8c:
05:21:59:ea:bf:c0:95:5b:97:98:b8:da:59:61:df:
aa:0f:6f:13:25:25:ad:58:fc:eb:86:b0:bb:cf:0d:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:27:AA:95:84:3A:70:5B:18:70:76:C0:04:7E:F8:B3:D4:ED:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81900947-8802-46dd-b591-8eb1eddda525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
68:2f:78:bf:90:ed:6b:95:46:0b:78:2b:b8:09:7e:60:38:86:
65:8c:fe:3c:08:69:b5:f3:31:28:54:7c:3b:79:bf:30:9e:60:
aa:a4:93:13:65:a2:6e:34:a4:cd:aa:98:8f:2f:70:ac:68:71:
d5:29:d8:3f:b4:f4:f3:50:e3:e7:47:19:be:e7:8c:8a:23:dc:
e0:f7:02:ff:65:99:c1:0b:8d:dd:ee:a9:0c:3d:c7:cb:33:2a:
96:72:2c:96:9b:74:6a:b4:9c:a8:d0:32:0e:6d:88:b0:ee:92:
13:49:68:f9:7b:47:1e:9a:33:57:25:d9:43:3c:67:e0:a7:ee:
2a:bb:0c:51:50:9e:b0:11:be:3e:05:53:9b:01:27:8b:89:7a:
3d:ec:ec:5b:bd:53:a2:39:a7:04:ab:bc:1c:8d:ed:f9:a1:6f:
ec:95:1c:57:d3:40:1a:18:86:3c:de:0b:ce:0b:2d:a6:30:87:
05:b9:6c:5b:02:26:05:85:4f:64:d0:4e:e0:cb:42:64:fd:9d:
55:b1:ea:7d:23:cd:e9:ab:ca:51:eb:06:bb:eb:18:7e:2a:4b:
0b:60:48:e6:0c:50:b6:ed:15:b9:0d:24:bd:5d:a6:cc:49:92:
d5:a7:4b:ea:68:f5:a8:cc:5a:47:a2:7d:90:71:c5:a0:24:44:
83:a9:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:33 2024 by rpki-client on console-fra.rpki-client.org