Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c01384-694d-4abe-9368-a0def45c8697.roa
File: 83c01384-694d-4abe-9368-a0def45c8697.roa (raw, json)
Hash identifier: bg9YkXZ6WdKzT45fF17bWoXTG1YDa7JfGe+G297w+/M=
Subject key identifier: B2:4F:57:41:EA:46:AB:0E:61:58:46:9F:5F:B5:C7:3A:E0:43:03:BB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B9478835E40767FBB9D26267047BB83E0EE83C4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c01384-694d-4abe-9368-a0def45c8697.roa
Signing time: Sat 08 Jul 2023 00:00:00 +0000
ROA not before: Sat 08 Jul 2023 00:00:00 +0000
ROA not after: Sat 12 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:94:78:83:5e:40:76:7f:bb:9d:26:26:70:47:bb:83:e0:ee:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 8 00:00:00 2023 GMT
Not After : Aug 12 23:59:59 2023 GMT
Subject: serialNumber=2611bbd69b33341b9e34042ceb3410c3f6a707fd1e926ea637eff9c73b63a218, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:7b:1e:48:52:74:cf:2d:0a:b8:80:2c:ba:
3d:d7:da:58:2d:89:99:d5:b9:bd:6d:ff:9f:3b:ce:
26:d1:cb:1a:ee:68:23:19:4f:52:6f:42:d2:11:d1:
2f:4e:4e:7c:6a:74:db:a6:16:d9:68:73:8e:d9:35:
d7:c8:20:be:4c:d9:fc:9e:9a:d1:b1:46:aa:11:7c:
88:d7:43:f4:de:7e:75:fe:79:11:cf:4f:12:31:ed:
35:04:15:2f:3a:e2:08:97:1b:68:70:8d:74:72:cf:
ef:1b:6d:78:be:3e:a7:4e:91:6e:ab:4e:72:6c:59:
c8:7e:5b:3a:89:49:17:96:af:d1:82:91:d0:d4:a4:
97:24:ea:af:97:fe:66:8b:01:5e:50:eb:ad:27:e2:
8c:dc:e0:bd:65:03:13:6b:cb:37:30:43:42:2e:e6:
10:86:32:d5:35:db:58:70:d6:29:e2:15:c7:b2:05:
00:3b:ff:99:1b:7d:8b:24:20:d4:77:36:f8:ff:41:
e4:5e:58:3a:4e:2e:da:55:84:cb:6f:2d:f3:0e:e8:
25:bb:95:0f:ff:be:11:b4:df:62:58:64:56:e1:01:
fc:0f:26:48:42:20:af:18:8e:6c:8e:8b:cd:3f:fb:
41:42:b7:f4:01:7d:a2:f1:22:73:98:6b:ec:26:95:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:57:41:EA:46:AB:0E:61:58:46:9F:5F:B5:C7:3A:E0:43:03:BB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c01384-694d-4abe-9368-a0def45c8697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0e:2a:d5:22:8e:a8:6b:f8:83:c9:70:53:16:8a:43:5f:16:
da:39:8b:f8:78:1d:fd:9a:dd:8c:ae:5d:25:e6:8a:6e:12:86:
e7:41:18:ea:6d:6d:79:0c:cc:51:9e:e6:58:04:2b:8d:0f:bb:
a3:99:63:99:a7:91:ae:5b:3b:4e:e4:23:e4:14:f3:70:a7:81:
85:77:b1:fe:7f:1d:d0:2d:c0:42:f9:53:3c:c1:dd:c0:4c:bb:
8b:36:e6:02:f7:d1:78:59:01:8f:74:90:e6:ba:cb:80:ee:dc:
de:22:ab:ee:36:c4:76:02:ab:9d:a1:75:79:c8:dd:cf:f7:5f:
66:a8:8b:cc:36:7d:ad:a8:5e:16:f0:30:9e:20:21:cd:43:45:
c5:6c:30:d6:44:39:38:c7:e6:89:35:7b:5c:f6:ab:2e:31:4c:
8a:47:d1:fe:ef:cb:ad:ab:66:db:ba:55:d8:d8:e1:56:92:88:
fe:06:6c:ee:72:00:72:d6:b9:cc:2a:f4:0c:36:df:42:99:97:
24:a5:b7:3a:1d:d0:90:41:35:98:ef:92:43:72:db:df:07:50:
23:51:54:76:af:65:29:87:29:22:72:91:cc:75:bc:99:4f:19:
2b:db:ed:b2:af:b1:5e:d5:e9:15:df:34:36:62:7b:1e:7e:6a:
ef:f0:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-ams.rpki-client.org