Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e618712-2c32-444e-8f63-2a6b3b5395bc.roa
File: 9e618712-2c32-444e-8f63-2a6b3b5395bc.roa (raw, json)
Hash identifier: +jgAYTHO5FoS6zrd97Y7atqFN2gFd5AnKBBq2DVHGZQ=
Subject key identifier: 74:DD:C1:F0:F8:12:6F:61:EE:C9:7B:15:18:37:AA:87:7B:78:F1:80
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 79FD39E830D65DCD3A3AA72B9FDD84373EF0FA8D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e618712-2c32-444e-8f63-2a6b3b5395bc.roa
Signing time: Wed 09 Aug 2023 00:00:00 +0000
ROA not before: Wed 09 Aug 2023 00:00:00 +0000
ROA not after: Wed 13 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fd:39:e8:30:d6:5d:cd:3a:3a:a7:2b:9f:dd:84:37:3e:f0:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 9 00:00:00 2023 GMT
Not After : Sep 13 23:59:59 2023 GMT
Subject: serialNumber=7b52bc077d3aa3be7142ee31239492268ad6f0584ac9a344fa40c751a85298b7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:05:d0:70:c6:64:e6:cc:a1:89:df:25:a6:
62:f7:c9:fd:8c:6b:32:0a:ba:cf:68:28:c7:fe:47:
41:85:cb:1c:20:12:d4:25:d1:eb:2e:0d:54:cc:cf:
52:3c:5e:52:41:35:66:83:88:ab:ad:03:db:5a:2d:
c0:82:f9:62:a7:6a:62:84:06:c4:64:0e:24:ed:8b:
50:6c:5e:b2:33:f0:94:f9:a3:25:d4:39:6a:86:5f:
58:b1:42:2c:d9:e6:a3:da:6b:98:16:c0:5b:f2:32:
12:8e:c6:5a:b7:6d:2c:83:51:ec:0b:13:c8:4e:e8:
5c:d5:1f:fa:2a:04:36:e3:15:89:75:c9:97:93:6d:
51:f5:4f:0e:e8:c2:cf:91:29:38:3d:0e:e3:fc:07:
29:1e:dd:05:ad:4e:56:5e:58:45:5b:d3:f7:5c:7c:
6f:39:28:a7:06:da:e4:5f:34:1c:59:cb:e8:1d:83:
7b:8d:d9:2c:c7:23:b2:04:b9:71:48:61:3e:dc:78:
06:6f:42:28:de:02:39:bb:1d:22:b3:0f:22:ca:85:
39:20:97:1e:3e:7c:a1:3e:9e:32:ac:3f:90:9c:1f:
ce:05:b9:1c:8b:97:9a:8c:52:07:89:d2:71:d1:2e:
97:33:fa:58:67:5c:3b:90:87:ce:c5:b7:19:00:5b:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:C1:F0:F8:12:6F:61:EE:C9:7B:15:18:37:AA:87:7B:78:F1:80
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e618712-2c32-444e-8f63-2a6b3b5395bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:49:87:62:9f:a0:ae:0b:88:30:78:eb:f8:9d:73:68:75:d3:
52:a4:3c:5c:c7:86:cd:1e:c0:b8:83:54:af:4a:57:10:f0:89:
35:ca:44:03:5b:4e:23:7f:42:2e:0f:b6:49:9e:71:1c:0e:db:
b2:26:52:cb:cd:94:91:cc:ce:a5:fb:29:17:70:3b:75:bf:e1:
d8:20:71:12:d8:7a:2d:cf:7e:36:40:3e:01:c4:89:22:54:61:
84:f4:36:23:b3:97:03:40:6b:de:8d:0b:f4:1d:4a:53:de:80:
0a:48:36:4f:4b:54:ab:a4:d7:a1:1f:be:88:4e:ac:b7:ca:99:
b3:dd:2b:6a:b8:8a:93:b3:da:42:9e:47:e1:7d:81:c7:27:1f:
40:b2:b5:bc:cb:73:2c:01:9a:b2:ee:f9:04:ff:92:aa:e3:05:
07:54:7f:76:c0:9e:07:d3:41:c2:03:92:13:95:6c:0d:1f:5c:
2e:60:db:3b:cc:4d:1a:2b:f8:25:49:7d:5a:75:7a:e4:8d:78:
47:ea:ae:29:48:34:b1:1c:46:09:74:8e:b1:b9:8c:a2:b3:a8:
c0:52:2d:38:22:d8:55:f9:1c:ba:c0:46:2b:ff:e5:25:1a:d8:
b7:16:d8:5e:ce:56:4c:37:45:d1:b6:27:2b:3d:80:9f:ef:56:
2f:25:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:03 2024 by rpki-client on console-ams.rpki-client.org