Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0f89946-80ac-44f4-9416-e9c07c309b83.roa
File: a0f89946-80ac-44f4-9416-e9c07c309b83.roa (raw, json)
Hash identifier: DuLo3v/FhBB74UeUaQVNYGnTnnGQpDKakVcv1NGcm28=
Subject key identifier: D5:6F:D1:30:B8:3F:2D:C0:4C:F4:4C:67:7C:A6:C9:BE:41:78:FF:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1538FF632452840F7305BCEFDD053D4BAF488CBE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0f89946-80ac-44f4-9416-e9c07c309b83.roa
Signing time: Wed 08 Nov 2023 00:00:00 +0000
ROA not before: Wed 08 Nov 2023 00:00:00 +0000
ROA not after: Wed 13 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:38:ff:63:24:52:84:0f:73:05:bc:ef:dd:05:3d:4b:af:48:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 8 00:00:00 2023 GMT
Not After : Dec 13 23:59:59 2023 GMT
Subject: serialNumber=c0a852126374e0fa160191a2724f9ac8fcf26a51143a4c6816afa2e479bba3d6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:be:4d:b0:9b:d4:b6:39:5c:b2:84:52:77:
ab:df:2d:51:e2:f8:3f:ce:06:78:f1:10:b2:9c:9b:
72:a2:c8:12:d6:3b:9e:da:b6:8a:ff:7c:c5:53:a0:
eb:ea:4d:8d:2a:39:a0:80:e9:70:06:50:a0:f5:ac:
6d:37:37:12:19:70:85:42:db:26:75:5e:77:8b:b8:
89:4d:bc:74:ce:1e:9a:a8:e4:d7:3a:7e:54:cb:ae:
82:fc:32:9d:da:e0:9e:4a:bc:8f:36:0d:ce:2c:64:
5a:3e:bc:ab:15:46:95:03:3e:b0:7f:da:3c:4b:cf:
4d:bb:0b:ee:5f:7e:96:6c:9b:ca:c8:02:dc:5f:69:
a2:8f:b2:dd:de:7a:a5:30:15:4a:36:ee:70:42:86:
70:e2:72:e4:9a:d8:98:a1:80:80:52:ce:e9:4c:c8:
9a:0c:39:f7:88:6d:c1:66:77:61:75:9d:1c:94:e0:
9c:53:d1:5b:12:f5:76:62:9a:af:7b:0d:0d:3f:f0:
31:9a:18:01:62:64:c3:7c:7f:65:22:44:d1:93:fa:
3b:20:fb:5b:ec:24:8f:f2:f7:e7:59:a3:0c:d1:03:
01:4b:27:63:74:9f:df:1f:ae:6f:a1:93:c4:f1:1f:
6c:6a:b4:3b:f5:6a:e9:9b:4d:87:f3:12:1b:12:2b:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:D1:30:B8:3F:2D:C0:4C:F4:4C:67:7C:A6:C9:BE:41:78:FF:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0f89946-80ac-44f4-9416-e9c07c309b83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:aa:b2:d8:ec:e0:f7:b9:6e:14:f3:06:bd:19:93:4c:1e:89:
d0:ce:dd:9f:9c:99:ae:4f:de:ab:cd:b7:fb:6c:a8:81:8a:f5:
af:cb:99:18:eb:0b:2d:73:02:77:28:09:a2:bd:f1:19:e0:01:
fb:1d:2a:93:75:f8:1a:0c:da:1e:a7:e0:f8:26:14:c0:1a:3a:
3b:1c:a9:56:a2:2a:c0:a1:c7:40:6b:b5:68:c0:c8:7d:18:38:
24:3e:51:0a:5d:15:24:89:54:35:cc:4d:5f:2b:44:7f:1d:a3:
9a:c0:9b:f1:ff:aa:8b:2c:39:13:52:79:5d:12:ff:37:22:6d:
7e:44:c1:ec:44:3b:a2:2a:20:85:36:28:a3:4b:84:90:c0:26:
a9:82:f0:ea:5a:c6:d0:b7:f6:07:3f:f6:7e:08:52:ea:83:bc:
ce:82:33:43:5c:ce:e6:5c:66:15:5b:0a:33:70:41:7f:a6:0e:
0e:1c:e2:53:da:dd:e5:a4:1c:c6:4c:d5:e3:6b:be:82:04:46:
95:c4:87:cc:f8:93:05:8c:9c:bf:40:03:f6:71:8d:24:ba:87:
b7:6b:96:79:02:97:a7:27:cf:d2:76:75:22:f3:5e:6b:97:6d:
f4:75:ac:18:74:0c:e9:18:1c:75:73:52:6c:36:97:14:a0:e9:
17:a4:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:38 2024 by rpki-client on console-fra.rpki-client.org