Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94a415d7-0936-4aa9-9d4e-496d3665d9e4.roa
File: 94a415d7-0936-4aa9-9d4e-496d3665d9e4.roa (raw, json)
Hash identifier: Hr9/13ywVrx0vmbf+BYL7+CcvH2h92ReX2tBu4kET1c=
Subject key identifier: D5:4C:FC:2B:9D:75:A2:23:62:B0:E7:F6:CB:16:D1:57:FE:8F:0D:40
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1801B19C198DD8E746CCBA3F1939FD8491AC7AD2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94a415d7-0936-4aa9-9d4e-496d3665d9e4.roa
Signing time: Sat 04 Nov 2023 00:00:00 +0000
ROA not before: Sat 04 Nov 2023 00:00:00 +0000
ROA not after: Sat 09 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:01:b1:9c:19:8d:d8:e7:46:cc:ba:3f:19:39:fd:84:91:ac:7a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 4 00:00:00 2023 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: serialNumber=5ef2af10b3929e50d2b9e9471a1e4adee0f46ce0a8aa2abd0d550816f5b8d6e8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:08:65:83:8d:ba:3e:f9:54:10:7e:8a:0a:
50:16:a1:ba:86:00:b1:e6:3b:cc:2b:ae:d0:9d:a9:
70:28:4c:03:de:13:e7:2b:73:f4:d6:34:92:a5:94:
a3:ce:65:9e:67:5a:f7:cc:84:21:61:14:20:8c:bb:
8d:b8:e1:92:96:1b:94:54:24:ec:c3:d1:73:f9:63:
c0:c3:4a:47:d1:51:23:1c:5b:fa:cb:4c:20:97:18:
bc:ed:cc:d9:6a:83:87:17:d8:5a:7b:2a:e9:aa:a9:
a4:8b:b2:ef:85:f2:73:6c:a5:f8:e3:4d:f0:04:fb:
1b:b0:cd:8b:20:4d:b9:95:1c:40:eb:68:0f:5b:6b:
98:df:ee:13:48:f9:33:ae:d0:76:25:cf:74:ce:ea:
9b:1b:6d:71:db:66:e1:70:5e:fb:41:f4:3c:98:35:
b0:ba:90:6e:14:e6:d5:73:e5:14:b2:10:1d:52:5f:
1d:6c:92:2a:51:0a:66:27:2d:90:bf:bb:84:e9:6f:
01:75:4a:e2:b6:01:05:78:ca:8e:dd:ff:4e:15:a3:
92:d2:d3:74:cc:f5:04:46:6f:56:98:66:ab:3e:2a:
68:12:d3:be:f7:13:12:b1:d6:ae:da:3b:b0:e7:d8:
a1:d0:03:14:86:73:89:14:f6:04:5a:cd:90:e1:72:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:FC:2B:9D:75:A2:23:62:B0:E7:F6:CB:16:D1:57:FE:8F:0D:40
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/94a415d7-0936-4aa9-9d4e-496d3665d9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e8:f1:c8:03:68:66:93:8f:f6:48:c8:71:54:0e:98:6c:ce:
46:64:4d:75:6d:59:f0:ba:f6:29:40:01:c9:b6:44:16:85:9e:
7b:6f:f6:c7:1e:54:6f:02:23:95:62:3d:75:2e:ae:b2:93:67:
bc:25:cc:e2:a8:34:70:29:0c:47:92:f7:38:7d:4e:ea:64:09:
f4:f3:3e:f3:e1:73:c9:c1:8c:e7:a9:3a:42:2b:61:2e:37:f3:
a2:37:d1:16:42:91:37:9a:36:be:7c:6e:78:7e:07:59:3c:3f:
fe:e0:52:a5:df:05:77:1f:95:fd:f4:c2:c1:e2:16:5e:aa:47:
4f:64:9c:23:e1:73:89:a9:1d:70:cc:05:ad:d4:95:6f:c3:56:
e3:69:a8:96:5c:8d:a3:45:27:92:11:56:99:76:e4:58:76:7f:
67:d9:0b:ad:a4:f3:ee:1e:e2:a3:dc:9f:c8:6e:e3:4a:46:c8:
86:58:42:cb:bb:5b:f8:9b:9c:d5:d8:45:02:60:a2:08:57:b3:
80:be:9c:6a:18:3b:dd:a9:a6:ae:17:2f:e1:cf:87:b5:9c:3e:
62:94:91:bf:15:76:f2:13:6b:a4:19:4c:e1:b0:c0:9a:7e:fd:
ce:c8:c3:a0:d0:37:df:d9:ca:87:b9:b4:e1:4a:16:ac:4d:00:
87:9b:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:36 2024 by rpki-client on console-fra.rpki-client.org