Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b1b4faf-60d5-4858-ad9d-279996a25789.roa
File: 8b1b4faf-60d5-4858-ad9d-279996a25789.roa (raw, json)
Hash identifier: HTwFTESJwxmJ/7ngs8iOYtNJmKm0QYcZSU2huz0O7X4=
Subject key identifier: 0D:31:E1:AA:E4:9E:CD:A3:D1:88:ED:CB:16:C2:C2:47:91:5F:4E:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 16EA555221E8D1558033FEFA2404307EB4A8D51F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b1b4faf-60d5-4858-ad9d-279996a25789.roa
Signing time: Wed 04 Oct 2023 00:00:00 +0000
ROA not before: Wed 04 Oct 2023 00:00:00 +0000
ROA not after: Wed 08 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ea:55:52:21:e8:d1:55:80:33:fe:fa:24:04:30:7e:b4:a8:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 4 00:00:00 2023 GMT
Not After : Nov 8 23:59:59 2023 GMT
Subject: serialNumber=f07daf98da279b9d5bf340b1c7606b91d082fd50ebfcac316654b2c81fe57d5d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:9b:c8:84:2c:a0:2c:bc:00:f6:10:ae:0c:
62:14:88:5c:6c:6f:a4:ae:81:02:da:09:23:89:0b:
95:7c:e1:ac:95:02:7e:b3:d5:86:43:54:06:49:83:
1f:b4:d4:1c:1a:05:67:41:88:6f:76:d0:ee:2b:ad:
45:9f:45:2f:f3:e7:10:bc:a7:46:43:2f:91:d0:86:
60:17:1d:5c:f9:19:98:bb:f2:73:c9:cb:75:a4:4b:
2c:68:80:ef:d2:48:29:78:f2:81:24:de:ec:2a:42:
68:c2:2e:dd:31:0e:05:1c:16:6f:b5:f9:81:c4:e7:
84:84:61:08:0b:f1:ff:85:d8:82:1f:07:c1:13:a7:
4f:80:60:1d:3b:20:4c:96:ca:4e:b0:d8:9d:e7:36:
f7:ad:eb:8c:55:fe:41:ee:a7:16:4d:18:59:77:7a:
90:91:74:7c:06:3e:c5:9e:52:4b:58:a7:b9:64:ce:
03:7b:bf:2c:8f:58:01:c0:45:cb:3f:69:ad:bf:e4:
7f:b5:c3:fa:40:ae:65:cb:fd:35:ac:c3:41:74:87:
2c:ff:90:50:d2:93:0c:c2:75:47:0b:82:d0:cd:c0:
f3:79:55:1e:1f:67:f5:b9:90:00:ee:b6:32:ca:28:
2b:76:4d:0b:fd:73:76:b5:4e:53:66:71:c9:15:bf:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:E1:AA:E4:9E:CD:A3:D1:88:ED:CB:16:C2:C2:47:91:5F:4E:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b1b4faf-60d5-4858-ad9d-279996a25789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5c:5c:ee:5e:3c:7b:35:c3:e6:47:dd:a9:e9:8c:a8:1d:26:
7b:ff:b6:b0:07:fb:ef:ae:f5:0b:89:18:a8:fa:bd:85:ea:00:
f9:00:08:92:af:4f:0b:66:9a:54:41:49:be:9c:f2:87:43:73:
91:39:4e:2a:3d:bb:2c:bd:e5:87:e7:8d:4f:47:ee:f5:b3:31:
96:8a:c0:0e:97:d0:c6:35:19:c1:49:03:50:73:9c:d2:52:e2:
85:66:3b:23:28:25:55:1a:e3:0c:87:18:16:af:19:d1:d0:9d:
83:33:be:35:9e:bf:fc:ad:ce:83:93:33:f0:8d:6f:46:66:56:
8b:b8:06:79:cb:20:fa:7d:59:ed:7d:dc:60:e9:5b:45:f0:d7:
de:9a:e7:18:85:42:7c:fd:39:27:ff:3f:af:59:22:54:e8:a9:
3b:a4:67:23:75:c2:21:c8:7d:87:05:33:20:47:eb:99:4a:07:
53:73:d8:29:34:df:43:66:3a:fe:d9:63:67:03:31:36:3c:d7:
a0:7e:39:af:b0:1a:87:57:a2:9b:88:b9:15:df:ef:7f:ce:37:
eb:7b:78:0b:59:39:27:aa:72:9d:d4:d8:e6:f3:1e:31:80:84:
06:8a:27:0f:6c:ab:bf:76:6c:09:01:39:52:c7:ff:74:06:1f:
33:ad:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-ams.rpki-client.org