Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84380230-fa15-4dbb-9ff4-6da544f2a283.roa
File: 84380230-fa15-4dbb-9ff4-6da544f2a283.roa (raw, json)
Hash identifier: VK/3Lk6TDpNANeKTvA9QVGh+6INL1LQ6zZCyeQ+d+3E=
Subject key identifier: 10:57:D2:CE:A1:08:D1:6F:10:1E:22:F3:5C:7F:B1:A3:5D:9E:DD:0D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1E3CE26688D1E435D6975EE269393E2BEA85CC7B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84380230-fa15-4dbb-9ff4-6da544f2a283.roa
Signing time: Tue 29 Aug 2023 00:00:00 +0000
ROA not before: Tue 29 Aug 2023 00:00:00 +0000
ROA not after: Tue 03 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3c:e2:66:88:d1:e4:35:d6:97:5e:e2:69:39:3e:2b:ea:85:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 29 00:00:00 2023 GMT
Not After : Oct 3 23:59:59 2023 GMT
Subject: serialNumber=c3bb4bf0b4a660f05bf7a09c70a52898bffe4792d130675683b07e6e7744f2c0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:5d:50:d2:77:ef:0f:23:12:6f:ed:f0:90:
da:d8:5c:80:92:ff:cb:29:f8:61:8a:19:51:70:40:
32:79:d0:5c:c2:88:f2:82:1c:ac:40:17:c4:66:97:
ff:78:37:8a:99:0f:1d:f4:62:44:92:3b:c9:02:90:
3e:36:19:4a:f4:4a:0b:96:21:26:23:d3:e1:28:5b:
54:b3:4e:af:78:25:9e:04:83:82:50:3c:88:7e:7e:
ec:75:78:7e:0a:cf:cc:93:77:a9:3a:3b:4a:94:af:
57:8e:81:fc:99:39:4f:ef:7b:5c:f1:3e:29:77:0f:
6e:ce:29:55:75:7b:af:c9:31:81:0d:f5:8c:2c:6b:
29:bd:b6:73:22:f8:8a:d9:d5:01:43:13:e9:9e:4c:
4b:fa:e5:5d:d0:05:16:85:06:66:11:bd:7e:22:5c:
b9:62:53:60:d9:7c:c6:65:1d:d5:85:62:13:cf:6d:
af:2d:7c:31:32:7f:a1:a9:48:e9:9a:26:50:26:12:
df:95:52:eb:ba:79:1c:e6:f0:3d:d1:43:f7:b1:8a:
e9:23:c0:fc:af:5b:9b:f2:44:fc:af:eb:87:60:5b:
b9:bb:09:c0:5f:3d:b3:8a:35:64:69:94:2c:60:c0:
d5:9a:c0:b2:cb:d0:6e:a7:b9:20:f0:6d:8c:3f:c3:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:D2:CE:A1:08:D1:6F:10:1E:22:F3:5C:7F:B1:A3:5D:9E:DD:0D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84380230-fa15-4dbb-9ff4-6da544f2a283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:52:0f:a9:69:c7:bc:95:9e:9e:5e:a4:2b:cf:ae:24:39:0d:
28:bb:fd:88:10:a6:f3:5f:ad:0d:05:23:36:c7:91:c1:59:7e:
3a:a2:63:e3:20:c6:cf:ec:22:15:68:e1:e2:99:e0:24:fd:fb:
47:9f:c6:f8:69:61:58:62:47:6f:8c:19:e6:b5:1b:02:69:6c:
0f:89:0e:eb:f5:c5:6c:b9:ce:e0:04:2d:69:bf:cc:c6:3b:ef:
43:a6:49:57:3e:e9:ee:bd:1c:ff:e5:9a:e3:05:d6:51:83:85:
1e:78:30:a2:5e:5d:a4:99:10:3a:a0:8c:b7:35:b6:60:8b:b3:
d4:de:80:f7:7d:e9:79:52:cb:5a:27:0d:45:30:38:65:84:6d:
4f:de:6b:8e:4f:ae:e8:30:59:1b:10:5a:c1:b7:4d:64:e5:48:
2d:f5:f6:52:31:35:24:01:73:f9:c5:2a:1d:80:48:0e:50:56:
ba:7a:8d:0f:12:45:7f:88:b7:3c:22:6f:e9:3f:c9:10:45:6e:
33:20:1a:29:0a:0e:60:28:4b:fa:b5:06:91:76:0b:87:8c:ea:
a7:cc:40:27:68:cd:95:13:4a:05:90:5f:ac:6d:35:64:3f:10:
7a:fb:7c:b7:fe:12:f8:7a:ff:d9:68:ee:85:62:d3:a4:dc:4a:
9c:aa:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-ams.rpki-client.org