Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99bd6412-5224-449e-8f16-e67f41b55f83.roa
File: 99bd6412-5224-449e-8f16-e67f41b55f83.roa (raw, json)
Hash identifier: KPVDPjMbjjbjn1Vegkxx/RUzRDRYRVGslrShE5O85SI=
Subject key identifier: 6E:68:12:05:A4:73:4C:9C:E9:0F:0C:53:50:5F:6A:99:BB:F8:59:B0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 123E0BF69E9BEB7E8E0FA8A427DF2021B73219A5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99bd6412-5224-449e-8f16-e67f41b55f83.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3e:0b:f6:9e:9b:eb:7e:8e:0f:a8:a4:27:df:20:21:b7:32:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=75723d768a1d6e7f56491531183692c4733969ac75130b67ab061227e882b3b5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:ca:77:a6:0a:b5:67:49:19:47:0c:21:69:
6a:a2:28:04:31:a1:d7:52:0e:9e:94:07:d5:bd:34:
b7:49:97:10:6b:4f:12:af:f6:a7:bd:a8:ce:0e:6c:
82:cd:22:b9:27:76:8a:f7:82:71:bf:49:ec:5b:b7:
88:26:4c:c8:66:0b:2b:9f:ea:69:e9:5d:be:b7:e0:
2b:cc:93:98:54:6a:8f:76:89:77:15:55:30:e3:99:
b9:67:37:cc:db:8c:d0:20:0f:b7:a7:e2:13:a2:52:
47:88:09:9f:d1:33:36:71:3e:9d:0c:c8:5e:f3:15:
51:13:04:8d:46:e4:82:e0:74:0f:4c:ea:d5:bb:1f:
cf:c8:60:83:c6:5a:e4:05:8f:9a:c6:d6:26:69:d7:
1d:e8:18:a4:65:d4:ad:10:56:19:90:35:18:7c:a1:
47:e6:e6:9c:38:3d:e5:20:d6:09:37:8d:6c:3d:37:
df:cd:69:81:6c:83:dd:d3:7f:fc:52:65:49:f1:ca:
7b:b1:d7:d7:00:05:fa:78:ed:f7:e8:31:e6:15:c6:
20:7e:e7:aa:81:02:be:7c:00:89:6b:0a:3d:9f:ba:
c9:af:6a:e6:17:1a:92:2a:8d:58:6b:9b:b8:50:ff:
96:c6:52:64:2d:b4:5f:b1:4d:01:17:57:4f:d0:2b:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:12:05:A4:73:4C:9C:E9:0F:0C:53:50:5F:6A:99:BB:F8:59:B0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99bd6412-5224-449e-8f16-e67f41b55f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5b:4b:81:2a:47:e8:21:62:73:76:cd:dc:f9:d8:8f:fe:d7:
0b:98:37:34:e1:aa:ed:e1:8a:0b:50:76:aa:2f:94:5a:a6:34:
be:31:00:5f:cb:19:68:ef:c6:0d:4f:ae:1b:39:f3:ad:d4:98:
74:8c:67:19:f9:29:f2:99:6a:70:60:a6:f7:2e:dd:e0:42:dd:
d7:04:a7:55:61:6d:de:12:7d:20:69:cb:36:3e:a0:ad:cb:0b:
1f:2e:16:32:1b:58:ef:dd:2b:f5:3b:92:ae:d4:16:ba:dd:28:
a2:09:16:c6:77:08:1c:94:40:e0:12:63:40:5c:9b:6a:16:78:
60:c9:cc:2e:3a:8c:4d:f9:9f:ac:0b:e1:d9:75:17:ef:ea:55:
97:56:89:a1:f3:67:f5:87:c7:c5:31:33:08:23:c5:42:f3:2f:
be:6d:fd:57:86:ca:fa:b6:e3:8b:88:5e:e0:2d:95:18:86:11:
a3:bc:ec:b0:85:4c:5b:54:66:61:ca:ed:0c:fa:c8:2e:5f:c9:
70:bb:05:ee:e2:46:fe:a4:d1:6f:91:86:b1:d5:85:bc:1b:ab:
8a:7f:78:41:72:73:fe:f8:c4:42:9f:8b:5f:76:a2:78:47:02:
ce:fa:85:03:58:8d:9d:fd:39:7b:82:d3:2c:71:92:f8:7f:3e:
40:b5:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:37 2024 by rpki-client on console-fra.rpki-client.org