Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9521ced7-deb2-4bba-ab8c-d41bfa87773d.roa
File: 9521ced7-deb2-4bba-ab8c-d41bfa87773d.roa (raw, json)
Hash identifier: 1Q4QjbTgOYQ04Bp9sR/sgnx1VtXdXJVgBO02ZYOu9q0=
Subject key identifier: 2D:43:D7:A1:8B:D8:ED:07:C6:9E:9E:FE:99:05:A7:D3:81:EB:22:44
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5CEB472D33E608930640ED709482057B929B017F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9521ced7-deb2-4bba-ab8c-d41bfa87773d.roa
Signing time: Sun 06 Aug 2023 00:00:00 +0000
ROA not before: Sun 06 Aug 2023 00:00:00 +0000
ROA not after: Sun 10 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:eb:47:2d:33:e6:08:93:06:40:ed:70:94:82:05:7b:92:9b:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 6 00:00:00 2023 GMT
Not After : Sep 10 23:59:59 2023 GMT
Subject: serialNumber=6d483834f730add377758deaff2c22c751d21c6197fd27aef90dac28a006447b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:93:c9:2c:c9:66:bc:d5:de:66:89:e2:d0:
34:26:fa:78:94:d2:b0:ad:57:c0:29:90:1a:28:0f:
94:cf:44:f2:27:d3:be:0e:79:35:9e:65:db:06:00:
e1:8d:09:43:83:93:33:a1:f5:46:b9:69:fd:cc:71:
10:6c:bc:f1:ca:e8:52:5f:86:c1:88:b0:cf:1a:d9:
df:6a:ea:b1:bc:0e:40:50:46:47:d9:fc:31:66:9f:
62:ca:6b:a5:92:16:dc:30:4c:87:da:9b:00:ef:4d:
44:d8:d5:7f:37:72:4e:64:52:f0:73:a3:b4:45:15:
7f:3c:c7:d0:1c:2a:6e:db:d1:22:55:7b:49:be:e1:
99:c5:77:fe:53:75:c4:5f:cf:39:f2:c5:9e:55:d4:
1d:27:91:24:94:be:9d:b3:38:26:dd:8d:6e:33:db:
6c:45:1c:03:64:48:54:88:bf:e0:98:fc:3d:87:60:
71:f3:df:66:8d:45:a4:91:71:74:c5:d9:08:71:a3:
de:a2:bc:cd:8d:9c:9c:0f:72:7a:85:b3:e0:fc:07:
e9:96:30:03:10:6e:6d:60:ab:ae:d4:77:bb:b1:2f:
d9:1d:02:14:28:de:bd:9c:4e:08:a0:a4:76:fb:17:
25:2b:e5:4c:95:87:af:af:c6:6d:a3:62:be:86:78:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:43:D7:A1:8B:D8:ED:07:C6:9E:9E:FE:99:05:A7:D3:81:EB:22:44
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9521ced7-deb2-4bba-ab8c-d41bfa87773d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:73:67:12:70:cc:95:b4:45:aa:bc:c0:18:af:4f:f9:7b:f5:
8e:57:73:f8:e5:fe:eb:f5:f8:aa:23:c2:04:eb:6f:a7:cf:42:
1d:59:fb:e8:04:64:ac:aa:3e:a1:fe:7b:51:8a:da:3d:e3:c5:
3e:cb:d8:94:f4:e8:f2:a5:d4:7e:ee:89:04:74:b8:be:cb:16:
44:51:75:99:76:86:d6:5d:36:a4:41:62:ad:cb:54:1c:e1:7b:
d4:14:63:b4:1c:fd:fe:25:5f:f2:72:93:2d:37:c4:47:c5:ea:
a6:cb:60:f2:08:5e:cc:45:53:36:c0:66:42:f7:a1:79:5e:12:
1e:6b:cc:e1:7d:0f:bb:a5:4b:8f:ea:c2:cb:70:ec:61:45:6c:
b6:91:12:e5:dc:83:94:a9:7a:82:8e:7d:b2:22:35:90:b7:17:
30:df:b6:63:5b:e7:83:ad:cc:47:7c:65:02:0e:de:b8:e8:ad:
26:f7:69:68:70:6b:02:af:38:e5:a9:d1:e8:fc:88:d2:c7:09:
35:f2:7b:0d:a1:0f:c8:bd:ed:1d:6c:f1:e6:30:17:90:d5:1b:
b7:8d:a4:31:d7:85:89:ca:c4:08:6b:79:20:94:d9:b8:d5:71:
54:02:38:31:a8:3c:af:19:0a:26:d8:d5:7b:19:c6:50:4c:4a:
54:20:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-ams.rpki-client.org