Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93aaf054-eb4b-4628-8c36-319d3fdf577c.roa
File: 93aaf054-eb4b-4628-8c36-319d3fdf577c.roa (raw, json)
Hash identifier: Y+8OpLV2sWX/o3ImVWyPiWeYWzPsCGEsqzR5k2rL20E=
Subject key identifier: 2B:01:D3:93:9A:E0:F0:7E:C7:D6:76:3B:ED:D1:31:27:56:0E:BF:A6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 013A7C08879E186BE185DF7094B2343224442898
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93aaf054-eb4b-4628-8c36-319d3fdf577c.roa
Signing time: Fri 04 Aug 2023 00:00:00 +0000
ROA not before: Fri 04 Aug 2023 00:00:00 +0000
ROA not after: Fri 08 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3a:7c:08:87:9e:18:6b:e1:85:df:70:94:b2:34:32:24:44:28:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2023 GMT
Not After : Sep 8 23:59:59 2023 GMT
Subject: serialNumber=c6f3e9a328c53be00e8cb275a289f2ba3123c8e198cf723e6a171b8cd5556ced, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:44:26:31:5a:ee:da:15:f7:53:20:43:1b:d8:
95:8e:f7:cf:f4:cd:c9:c1:8a:e3:37:2f:b4:bc:aa:
c8:97:b8:d1:60:9d:d4:79:b2:79:29:b1:69:86:82:
c4:79:0e:5c:e9:68:b1:d4:e9:f2:41:a8:e0:b1:44:
95:be:7c:12:ed:55:50:86:c8:05:fb:53:5e:42:44:
dc:34:27:9d:3c:8e:8a:b8:e8:af:6f:fd:92:ee:79:
a5:92:b1:d3:45:e9:63:f2:81:13:fb:fd:f9:70:1c:
94:e0:ef:47:02:67:de:41:cc:f3:92:8a:f0:67:45:
ce:2a:dc:79:a6:fd:5c:1b:19:c4:cd:27:c1:96:21:
a6:c4:28:62:15:ee:ff:31:8d:d4:0b:d0:a2:06:01:
04:02:77:c2:b6:45:d9:a3:76:1f:ac:1f:94:b5:45:
0d:1c:fd:18:75:7e:f2:b5:be:f9:42:7d:00:80:81:
53:d5:fe:89:1d:e7:88:35:af:28:7a:4b:f5:c9:cd:
f0:37:ae:11:c2:55:c0:3b:e6:97:e9:64:f4:ee:55:
48:99:19:89:61:9a:d1:cc:95:0d:7b:02:cc:64:14:
dd:14:77:6c:0b:9a:e2:6b:e2:e3:1d:20:fa:b4:ac:
4e:7f:ef:b9:42:0a:db:99:85:31:bd:dd:39:2c:1b:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:D3:93:9A:E0:F0:7E:C7:D6:76:3B:ED:D1:31:27:56:0E:BF:A6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93aaf054-eb4b-4628-8c36-319d3fdf577c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:95:a3:f4:4f:33:c5:ca:f8:0e:b4:e2:c1:64:60:02:1f:6b:
d6:0d:82:fd:48:4e:bf:af:6c:8a:c8:ff:e1:35:33:80:bf:8b:
2e:59:98:1e:9c:7b:92:30:63:d4:ca:50:db:90:38:7f:12:79:
c4:d7:3d:53:95:23:b7:8a:04:b8:c0:72:34:83:de:96:40:f1:
15:12:25:dc:a6:9c:21:b0:f3:67:9c:7f:d3:81:39:52:58:76:
69:a3:3d:e3:14:b6:52:27:9e:80:e6:9e:4e:fa:35:59:96:0d:
d1:82:88:02:89:ea:b1:61:e4:1e:68:c8:4c:6b:56:78:6f:b7:
29:75:3c:d0:de:8b:d1:52:2d:e4:1b:41:4e:45:89:fc:bf:36:
97:35:63:0e:40:7c:1d:78:0b:a2:c9:b2:13:80:d0:52:41:81:
e0:32:ee:83:68:8a:0c:d3:55:33:c0:66:58:3d:5b:b7:fd:20:
88:e0:62:28:ae:3b:cb:c0:bc:78:b7:09:9b:ec:7c:30:24:de:
64:ef:66:ba:8e:a6:92:cb:d1:55:67:92:64:dc:70:20:f4:37:
cd:36:9a:a4:42:1b:dd:2e:fa:f3:c8:b6:f3:00:a0:a1:78:61:
28:81:b2:8e:50:1f:18:4a:6f:de:b8:e6:81:8d:19:38:83:5b:
5e:db:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:36 2024 by rpki-client on console-fra.rpki-client.org