Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/90349187-31dd-4c14-a596-ec32307aef65.roa
File: 90349187-31dd-4c14-a596-ec32307aef65.roa (raw, json)
Hash identifier: dxyGXWubUofbQbkAEMFkQ+DrDVIbIDFXfLTEHzUIGPA=
Subject key identifier: 01:29:BE:75:A1:F1:64:CC:A3:6A:D1:D4:48:E6:24:56:A2:F6:23:5B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 186788B8CE3FC461BF01D275C2B82ADB806D9B1D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/90349187-31dd-4c14-a596-ec32307aef65.roa
Signing time: Thu 03 Aug 2023 00:00:00 +0000
ROA not before: Thu 03 Aug 2023 00:00:00 +0000
ROA not after: Thu 07 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:67:88:b8:ce:3f:c4:61:bf:01:d2:75:c2:b8:2a:db:80:6d:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 3 00:00:00 2023 GMT
Not After : Sep 7 23:59:59 2023 GMT
Subject: serialNumber=14131bc0902ac5154efdb3cd6444c67306d18f20605cda7e3c743f1e4b399eb9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:c9:d2:cb:bc:9f:b1:d5:15:4d:65:7b:9a:
79:f9:4a:17:38:ec:65:a5:72:f0:3e:a1:83:6f:6f:
bf:26:5b:50:5a:6a:79:4b:d7:82:ad:a4:29:19:06:
cd:0c:3c:68:0e:79:26:30:89:b3:38:69:45:9e:f7:
6a:ad:97:d1:2e:d1:92:0e:1f:9a:4e:41:7d:4e:60:
03:44:9f:48:37:3f:a4:80:fa:2a:fa:97:43:42:9d:
19:39:e2:00:8b:e1:be:8c:35:4d:20:a4:20:3c:e2:
18:c1:30:40:1b:56:28:52:9d:68:e1:01:81:9e:f2:
85:f4:e2:e8:33:d4:09:79:d9:fb:b1:f2:e4:17:30:
69:c7:46:42:60:2a:ac:e8:d3:d1:7b:65:1f:8a:97:
e7:8e:74:23:c2:5f:ee:b8:18:ee:41:b4:63:03:63:
e7:08:66:0f:65:a3:f0:51:9d:3c:7b:48:4f:8e:9f:
ec:1b:25:c9:54:06:2b:5f:5e:94:02:62:67:72:30:
64:fd:67:72:92:ed:4b:7c:a9:a8:b9:3c:02:b4:9e:
5e:48:cf:30:c4:8f:d0:ea:c1:05:c3:bd:10:20:c3:
fa:6f:7b:0b:55:09:f3:dd:0c:11:0a:35:55:a9:03:
c7:e7:bd:77:47:df:83:35:4a:63:2a:7e:3f:47:17:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:BE:75:A1:F1:64:CC:A3:6A:D1:D4:48:E6:24:56:A2:F6:23:5B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/90349187-31dd-4c14-a596-ec32307aef65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:06:a5:f5:45:9f:c1:52:6c:31:e4:5f:de:e2:47:99:d6:e9:
a6:ef:ee:31:05:5b:1a:8a:f8:df:7a:82:36:1a:cd:62:ea:67:
32:b6:5a:e0:6a:92:74:a2:b8:60:b4:26:c0:10:94:3e:1e:02:
7a:ef:97:6a:d2:c8:c5:eb:fc:ee:e3:fb:9c:a5:09:ee:11:36:
1a:74:0f:96:f2:7e:f8:46:43:68:b1:a6:56:89:65:e5:c8:d0:
75:ee:91:e2:37:92:fb:9e:41:10:98:aa:c0:83:fb:0d:2e:d2:
b4:e3:9e:bf:6d:ba:0f:82:49:3d:cf:a2:59:b7:aa:02:7f:a3:
fe:54:da:fc:2d:9d:ab:3a:5e:c7:cc:19:87:89:9e:37:99:0b:
d7:9e:1b:ee:43:9a:3c:34:f8:d3:b6:32:82:1c:f4:10:c1:b4:
d9:82:ca:4a:39:07:b0:84:b3:55:5e:ac:1e:8e:c2:f8:83:43:
c6:8c:4a:6d:0b:d2:b4:63:35:62:19:9c:de:bc:e8:dc:4b:a4:
b1:ef:a8:b9:85:8e:3e:f8:43:8c:a4:4c:33:e9:3b:be:d2:70:
09:fe:8e:67:2d:9b:a5:1e:9c:27:8a:73:13:a9:3a:0f:bb:04:
38:35:e9:0e:fb:bb:05:f3:2f:bd:3f:54:1c:7e:a3:dc:1b:89:
95:c7:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:36 2024 by rpki-client on console-fra.rpki-client.org