Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94671625-ad43-4151-8661-95b63b77167b.roa
File: 94671625-ad43-4151-8661-95b63b77167b.roa (raw, json)
Hash identifier: E4JQHT5aGOgDw4rfVqCd+n3S1LdE+HJhe9u4Seq1bm0=
Subject key identifier: 0A:30:A4:30:AB:92:55:E3:DE:75:29:6F:2E:9F:49:89:B9:81:76:D8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 32FA437D498D89A66597850A50F45399180E78AD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94671625-ad43-4151-8661-95b63b77167b.roa
Signing time: Fri 08 Sep 2023 00:00:00 +0000
ROA not before: Fri 08 Sep 2023 00:00:00 +0000
ROA not after: Fri 13 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fa:43:7d:49:8d:89:a6:65:97:85:0a:50:f4:53:99:18:0e:78:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 8 00:00:00 2023 GMT
Not After : Oct 13 23:59:59 2023 GMT
Subject: serialNumber=30e30664108791bc3f0439b4de972096e5360cad12790a86f0180ce8bb44f4d6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:25:22:9b:a3:1d:cf:9e:6a:5a:31:4f:2d:
7f:2a:84:ef:ba:6c:a5:fc:52:f4:c8:3c:c8:13:b6:
10:25:a3:52:0f:e3:ab:98:88:9c:53:7b:7c:81:3b:
3e:a1:5d:73:1c:f9:6b:cb:7b:8d:31:b9:a2:b2:30:
3e:18:07:88:7b:4e:a8:1b:cc:ec:29:ab:ff:34:e9:
3a:b2:31:cf:be:6c:35:45:2b:90:79:7f:5f:77:78:
2f:6d:0a:e7:70:38:f5:c9:60:38:fe:b9:2a:e2:38:
33:c9:f2:83:60:23:5f:e1:87:b3:41:35:a0:67:53:
6d:a7:55:f7:a3:a2:4f:15:81:84:c2:59:d1:d1:91:
01:93:65:4c:99:55:32:38:31:96:0c:16:34:ca:4e:
ee:20:25:08:33:7d:65:be:75:83:f6:2b:b8:1f:0f:
f4:f3:34:8f:b1:bc:4b:87:dc:0b:e3:4b:e4:e4:02:
1c:3c:45:cb:7d:ab:5e:dc:1a:58:34:c8:10:31:52:
42:df:2b:57:f6:78:a6:1f:a5:91:19:85:46:2b:f8:
cf:9f:b2:b7:70:4d:84:cb:a8:d5:82:d1:67:5b:6a:
02:58:12:cc:9a:87:bc:96:c1:da:17:e7:ee:49:58:
b7:ad:5f:58:b2:db:c4:c7:2d:30:1f:33:e8:3b:97:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:A4:30:AB:92:55:E3:DE:75:29:6F:2E:9F:49:89:B9:81:76:D8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94671625-ad43-4151-8661-95b63b77167b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2b:7d:39:20:ab:fb:71:5a:0b:80:26:bd:dd:c1:79:5d:da:
2a:b3:5d:08:26:e8:69:e8:60:06:3f:79:9f:b0:1a:1c:cb:97:
dc:75:f3:a7:bf:5d:a7:3d:91:7f:6b:63:59:55:98:78:fe:6a:
dc:5e:9e:d4:be:54:b3:f1:c0:28:00:42:37:1b:26:62:cd:4e:
fe:4f:24:af:39:6b:5a:c0:bb:6b:f4:81:0c:67:42:45:78:73:
2f:a7:28:a6:4f:62:3f:e2:a8:71:68:cd:c2:bf:2c:92:bb:7f:
64:b4:73:19:4d:d4:66:54:54:6e:04:e4:66:f9:52:e6:f8:3f:
28:cc:1c:ce:5e:2d:aa:05:2f:05:1b:4a:a8:43:7b:1c:bb:fb:
d2:48:49:6c:e6:06:ec:cd:f2:c9:93:56:c4:36:bf:b0:c3:a8:
0b:89:3a:34:14:2f:bd:73:e0:80:fb:ea:50:61:33:88:32:eb:
42:68:f1:21:a2:a6:76:7c:24:5e:10:7a:bf:03:a9:bd:b6:80:
88:27:1a:6d:78:57:7d:0b:00:42:ca:56:cc:87:ef:ba:22:f4:
87:7c:a2:a9:7a:4a:6c:92:f7:7f:98:6f:92:6c:c6:e3:7b:10:
53:f2:52:02:f1:22:e7:3f:b0:1c:52:40:f1:fc:88:56:ea:8e:
ad:8d:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-ams.rpki-client.org