Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fe67f48-f44a-47dc-a295-3b29e4152f59.roa
File: 9fe67f48-f44a-47dc-a295-3b29e4152f59.roa (raw, json)
Hash identifier: m3t/7cfA9ZnG3qcjrnD9kRnWJXQp8T4ODgoGqaiBu6A=
Subject key identifier: A2:9D:AE:82:CA:88:5C:B1:BE:C8:6B:6E:82:2C:C6:01:F4:7C:D5:F3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 02E941AD7E044F01CE65EF533CA7456612610E11
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fe67f48-f44a-47dc-a295-3b29e4152f59.roa
Signing time: Fri 04 Aug 2023 00:00:00 +0000
ROA not before: Fri 04 Aug 2023 00:00:00 +0000
ROA not after: Fri 08 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e9:41:ad:7e:04:4f:01:ce:65:ef:53:3c:a7:45:66:12:61:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2023 GMT
Not After : Sep 8 23:59:59 2023 GMT
Subject: serialNumber=d07650271b1430ae3530aede5f89f17e56d58cfaddb825e49eba9d3ecc1be9c2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:e2:f1:7f:cd:97:7d:ea:d9:68:5a:7e:4f:
9e:a6:cc:69:f3:e4:27:ab:33:0e:9d:36:d6:8d:c5:
d8:06:5c:94:8f:4a:15:46:fb:2d:a3:2e:af:5a:cb:
92:74:90:99:96:1c:aa:8c:89:ca:d6:98:e5:6f:2a:
73:af:ea:25:16:2e:eb:5e:9d:1c:b0:ea:a5:a2:7b:
42:b1:35:1e:cf:06:e3:ef:24:6c:5f:df:38:8e:ea:
d6:3c:a1:86:65:af:a3:13:1e:ec:78:c6:9e:fc:f3:
e4:6a:05:39:28:61:d8:b1:df:29:92:04:eb:d4:4a:
2c:05:0b:76:64:20:81:e4:a0:0b:c7:93:dc:ba:82:
3d:5d:cc:7e:ec:2d:e0:af:28:26:22:71:26:4e:ac:
db:70:57:e3:1f:11:28:86:53:c8:65:3a:95:53:0f:
b6:85:cc:22:e6:c9:94:a8:d9:63:2e:3b:de:1d:8e:
98:3e:1e:1c:63:9e:a2:d2:8c:55:da:d3:03:24:49:
6b:34:a1:8b:ed:49:5e:79:b4:3d:ae:2c:7a:98:3a:
a6:ce:07:0b:36:f3:35:08:fb:9a:7f:bf:0d:40:dc:
4e:42:98:27:01:8d:2f:9f:09:c3:55:31:06:71:00:
33:4d:65:a1:a1:e7:e7:f0:cb:e6:81:ce:33:fb:24:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:AE:82:CA:88:5C:B1:BE:C8:6B:6E:82:2C:C6:01:F4:7C:D5:F3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9fe67f48-f44a-47dc-a295-3b29e4152f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:17:93:8e:95:78:5f:04:ac:2d:1b:2c:d5:a5:95:e2:13:0f:
31:ce:c1:90:b4:c5:33:72:3d:b5:c9:95:05:10:73:20:a2:d3:
f1:08:6e:f9:6b:9d:0b:f8:ce:da:2d:12:86:f2:24:46:fd:ce:
42:f2:01:2e:cc:9e:69:2f:ea:49:71:56:47:a2:42:1e:af:10:
49:fe:9a:dd:ab:55:e1:bb:53:5d:59:e5:be:b4:cd:83:73:bc:
e0:c3:b5:9d:6b:6f:7b:45:62:8b:92:f1:75:c6:f8:6d:67:32:
89:3d:b8:cc:43:e5:b0:61:ab:16:cd:fa:78:1c:8b:b8:cd:52:
44:02:7b:f3:63:89:d9:39:80:0c:cd:24:c8:1c:8d:df:f9:bd:
45:b5:51:9e:0c:c2:d9:04:c5:f9:a2:2e:c2:2a:47:2f:68:bf:
5d:cb:4e:92:1f:01:67:0d:4a:84:34:12:d2:9d:c2:85:1d:79:
d5:4e:f7:81:97:dc:7d:04:b4:64:47:15:c2:9c:17:03:7d:72:
84:2e:c4:12:f7:70:ab:45:dd:f7:a3:73:54:39:05:b8:b4:3d:
02:f7:8c:37:a1:27:bf:12:e0:5f:82:2e:f9:37:79:c7:34:97:
8d:55:23:51:51:0e:80:60:eb:8d:a1:46:a4:11:26:b3:78:49:
91:87:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:38 2024 by rpki-client on console-fra.rpki-client.org