Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8661d758-66da-4e39-9d71-0de461bd0c21.roa
File: 8661d758-66da-4e39-9d71-0de461bd0c21.roa (raw, json)
Hash identifier: epO2MSTzTqV2hbZ/sO5nL7m90St9B+12oiQ+EGFOEUw=
Subject key identifier: 0D:3F:DC:59:28:1D:62:7F:4B:43:6D:75:DF:CC:06:60:93:3C:93:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D9D349D7F49F44A209A09DBD7FA247988095DE4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8661d758-66da-4e39-9d71-0de461bd0c21.roa
Signing time: Fri 08 Dec 2023 00:00:00 +0000
ROA not before: Fri 08 Dec 2023 00:00:00 +0000
ROA not after: Fri 12 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9d:34:9d:7f:49:f4:4a:20:9a:09:db:d7:fa:24:79:88:09:5d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 8 00:00:00 2023 GMT
Not After : Jan 12 23:59:59 2024 GMT
Subject: serialNumber=7f54f9c41f561971abe331abf5a3b0c76a1e93af7ef0217e3b3327f751fab8cd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:31:17:4b:99:16:56:54:80:70:00:ed:fc:
28:dc:46:85:e9:43:25:98:69:95:74:82:f7:be:f6:
de:11:fe:2f:c1:9d:6f:11:10:68:2c:12:c6:fa:a0:
16:81:5c:4a:97:d0:8c:25:58:eb:bb:ee:ee:55:ad:
3b:8d:f2:b3:f9:60:ff:98:7d:52:f4:72:d1:ca:08:
94:2a:f4:b9:f4:99:a7:8e:7f:3f:98:8b:cd:ab:ed:
2e:a2:0a:0b:92:1d:e9:4b:b5:f0:fa:79:a1:16:4d:
0c:0e:eb:4f:d9:a7:d7:7a:ae:30:97:1d:d1:44:b1:
b8:c4:6c:56:83:63:c2:bb:15:a0:1b:e6:7c:b4:f7:
f0:71:82:a6:6b:21:3e:61:ef:1d:a9:49:7a:1b:5a:
6e:aa:dd:b3:2a:a9:07:16:89:e1:97:3c:0c:ce:69:
3d:94:79:66:96:a0:95:06:76:70:87:bb:a7:9e:3a:
0e:c9:99:e5:19:84:2d:b8:cf:67:56:2e:0d:26:93:
2a:9a:72:d1:94:23:77:88:26:01:a4:22:a7:55:21:
10:01:6a:e2:49:a3:62:ef:4f:84:f9:ad:45:54:45:
e9:3a:f6:6a:46:d5:99:42:42:fc:a7:ab:50:2b:6a:
17:f4:69:49:e2:23:66:25:a5:e4:d2:bd:08:95:a7:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:DC:59:28:1D:62:7F:4B:43:6D:75:DF:CC:06:60:93:3C:93:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8661d758-66da-4e39-9d71-0de461bd0c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:20:44:a4:1b:9d:9c:58:85:ab:76:1c:ac:e0:70:68:74:a9:
ca:80:3e:75:38:cf:84:d9:91:07:1d:c4:b1:50:e0:67:1e:9c:
e8:fb:8c:d4:24:9b:2a:ee:2f:8d:9d:a9:cc:de:6d:1c:c0:80:
93:6d:5a:ea:d8:a9:61:c3:64:b0:09:f1:fa:41:19:e2:a2:4a:
bf:56:b9:79:13:e3:d0:62:6b:ae:43:bd:29:2c:60:d4:09:86:
c1:58:b6:9d:df:93:62:f5:61:f9:0e:fd:9b:9c:b5:d8:cc:67:
5a:34:fa:0b:ae:95:36:33:09:15:69:7c:76:25:52:22:5c:60:
00:8c:ec:1c:9f:f8:d8:fe:9e:f4:e9:6b:61:db:44:b7:cb:8a:
a8:aa:2b:4a:fa:c1:55:d7:4a:84:23:39:b4:5b:af:0c:a1:54:
6e:4b:ef:7c:17:d1:df:9b:b2:6a:f6:aa:09:7a:d5:8c:42:1e:
30:b4:96:85:e4:d9:8f:a7:95:50:94:0d:bd:e5:86:e1:84:d4:
2a:e1:4c:7a:c0:8c:45:0a:85:a2:aa:41:ac:82:06:dc:48:4e:
c9:7d:0b:3f:90:61:06:31:87:60:f1:7b:6e:e8:bb:ea:91:ae:
f4:62:6c:15:fb:42:74:50:e4:0c:64:6a:62:54:d8:57:a8:98:
d7:4b:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:58 2024 by rpki-client on console-ams.rpki-client.org