Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b51b09f-d0ea-42b7-8840-83c63acb426a.roa
File: 8b51b09f-d0ea-42b7-8840-83c63acb426a.roa (raw, json)
Hash identifier: IoMWzTNXm07dAmT686PQcKZ9iApYYEwZYpA6YQSygfg=
Subject key identifier: B5:86:82:64:09:49:15:11:4E:32:64:50:6B:69:24:9D:99:72:F2:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 275E394FCDEB47BB08D60B7D9F5CC979E1FE7977
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b51b09f-d0ea-42b7-8840-83c63acb426a.roa
Signing time: Wed 02 Aug 2023 00:00:00 +0000
ROA not before: Wed 02 Aug 2023 00:00:00 +0000
ROA not after: Wed 06 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5e:39:4f:cd:eb:47:bb:08:d6:0b:7d:9f:5c:c9:79:e1:fe:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 2 00:00:00 2023 GMT
Not After : Sep 6 23:59:59 2023 GMT
Subject: serialNumber=b1908e2d126075e790ea6223a1a399e8a2ce3e8750b75abb836d916858830349, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:e3:c9:53:70:f3:39:b8:8c:8c:1b:17:d9:
1b:5d:37:43:d5:9c:60:5d:d3:97:4a:a4:be:95:18:
5a:45:83:6d:cf:bd:03:7f:98:c2:1f:52:3d:c2:e7:
51:b9:4e:d7:bb:83:88:81:ee:f9:4a:1b:05:b1:fc:
f7:42:bd:18:f0:6b:d8:1d:1e:89:aa:4c:46:8e:d5:
91:d7:17:b4:02:d5:e9:47:13:5e:2b:d6:9b:9b:3d:
46:83:b2:59:71:78:bd:42:fe:61:c6:7f:5b:48:de:
ba:ee:c5:a2:c0:34:ff:29:23:3e:f0:14:c0:8e:33:
5a:34:f2:4f:1d:d5:7c:23:3c:56:d8:1f:66:80:8d:
e2:e1:8b:ad:96:a3:87:37:f6:19:07:df:ec:5c:e6:
25:2b:fe:76:8f:63:be:b4:2d:e9:c4:2f:bf:9d:eb:
a8:ef:f3:0d:9d:d8:88:d1:3a:92:44:17:95:c3:86:
5d:7a:57:a3:f2:f9:88:7d:c4:49:f6:be:5b:c8:4f:
15:64:0a:65:a4:ef:b0:3b:f3:6c:ec:03:82:9a:d7:
72:35:01:6f:f7:07:3b:3d:b3:0b:01:f7:77:dc:fd:
39:0f:b2:e2:bf:44:5a:15:db:57:45:56:bc:6f:f6:
79:e8:e1:cd:1a:90:ea:c0:89:d6:e4:8f:f1:eb:da:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:82:64:09:49:15:11:4E:32:64:50:6B:69:24:9D:99:72:F2:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8b51b09f-d0ea-42b7-8840-83c63acb426a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c6:bb:38:2a:ef:cd:c5:3c:1d:57:76:e2:48:76:d9:45:3e:
1e:db:1f:f9:99:cb:61:08:ee:84:01:99:24:7b:42:1e:7c:86:
62:eb:d7:59:5e:fc:18:87:9a:3b:fb:2c:90:76:32:11:72:ef:
64:9d:ec:7a:5f:35:66:78:ad:f9:d5:15:ad:a4:7b:39:c7:fa:
be:cb:cf:0c:eb:2f:bd:c1:cb:a9:d2:56:92:23:f4:5b:54:50:
b4:79:68:69:c9:c5:b2:fc:42:9d:b6:45:72:ec:ad:4a:6e:52:
c4:e7:de:71:4f:5f:7e:e3:8f:5a:14:75:36:73:96:1b:f9:b2:
52:91:b7:5b:a4:3f:26:bb:fb:70:94:08:36:14:8e:39:13:5f:
2b:20:ba:f2:54:f3:9a:90:19:aa:5f:c8:06:29:b6:37:26:6f:
dd:80:ce:54:c3:f7:28:60:cb:a1:89:f8:71:72:cb:4b:09:43:
7e:a3:5b:00:bf:af:c8:bd:c8:ae:66:6b:7c:94:94:87:c9:78:
15:ed:cb:94:a7:98:42:ba:f1:e5:e7:87:39:be:67:d1:e5:ca:
36:22:94:e8:5d:83:1c:2b:5d:d4:b2:e5:79:25:66:ee:b1:0d:
9c:a4:0a:52:1c:40:e5:69:fa:a2:4d:a3:f1:df:bb:1d:3d:17:
0c:d6:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-ams.rpki-client.org