Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1881373-9c18-435f-b9fe-8517674a261a.roa
File: a1881373-9c18-435f-b9fe-8517674a261a.roa (raw, json)
Hash identifier: 4VrTIwAAjCO7fL3njiYt5QmF9MLWDLFmybc75ix//YU=
Subject key identifier: 98:0D:73:8C:2B:DD:9E:6E:22:99:55:2D:8F:B1:DF:0E:0D:41:24:83
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3500290D143828A47F62F7CDCD03602A2125C6A3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1881373-9c18-435f-b9fe-8517674a261a.roa
Signing time: Sat 28 Oct 2023 00:00:00 +0000
ROA not before: Sat 28 Oct 2023 00:00:00 +0000
ROA not after: Sat 02 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:00:29:0d:14:38:28:a4:7f:62:f7:cd:cd:03:60:2a:21:25:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2023 GMT
Not After : Dec 2 23:59:59 2023 GMT
Subject: serialNumber=8d92a53bc1ac4b0d6b231d7ff50dd056454867dd33144c7d4752dc12cb81f7bf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:93:3a:6f:e8:c5:98:f6:37:a4:5b:98:84:
b7:b2:f2:65:a2:9c:39:7f:11:9a:84:66:c9:3e:a5:
b7:df:16:53:1e:bc:ba:de:fa:6c:a4:b5:a8:41:b7:
18:f5:fa:30:38:c2:3c:bb:3d:04:31:27:45:d9:a8:
85:79:b5:5b:4e:69:09:0d:2e:2b:d1:30:b4:f8:d4:
c7:94:9b:af:a3:56:a5:1e:24:b2:a3:09:fe:79:43:
90:20:9f:e2:c1:2c:ae:f5:1f:16:81:21:97:ed:da:
11:8e:81:2b:64:08:ae:be:ab:b7:5d:c4:37:54:79:
ff:92:18:29:94:5b:74:0d:43:c4:fe:ed:13:78:fc:
8d:8c:1e:9a:2e:5d:46:5e:3a:67:f8:12:45:ba:1e:
74:03:01:28:f2:32:03:d5:e4:a6:17:d4:6c:55:70:
48:23:0f:e7:5a:8a:70:41:31:77:59:dc:82:8d:eb:
16:e8:3e:b4:58:88:c2:ca:66:a9:74:4d:cb:95:24:
ce:26:9d:c3:e4:ab:6d:f6:94:6b:84:65:f7:e6:db:
07:02:db:fa:90:0b:0f:4f:1b:85:e9:9d:22:e5:24:
55:71:e9:8a:db:61:f2:dd:8a:b2:e6:0b:46:12:97:
59:00:8e:6e:e4:0f:57:3a:c9:84:18:b2:c5:1f:c7:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:73:8C:2B:DD:9E:6E:22:99:55:2D:8F:B1:DF:0E:0D:41:24:83
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1881373-9c18-435f-b9fe-8517674a261a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:46:b2:6d:c0:ae:13:76:e0:6d:b9:32:72:ea:3e:ac:dc:2b:
a4:a1:a8:60:d7:28:9b:fe:6e:07:0e:46:ec:ea:4f:1a:a1:65:
da:4f:cb:bf:97:45:e8:73:7c:9f:05:3f:58:41:4c:59:96:da:
c4:7d:9e:a2:00:fd:a8:96:40:d6:c3:48:e7:4e:b9:6a:dc:df:
15:b9:f0:e7:82:0a:df:98:87:9d:df:07:46:84:e1:b5:2b:46:
9c:4a:76:6a:4b:15:48:d5:cc:ba:86:9f:1b:c7:34:a0:41:71:
8b:08:5a:25:79:f9:2c:34:10:91:0a:92:e6:11:bd:24:69:f6:
73:99:a4:30:91:4b:35:b2:9a:15:9b:30:8a:22:f3:19:8c:49:
37:c0:35:53:9d:a4:bd:24:c8:ac:33:53:ef:aa:86:03:f1:3b:
1f:f6:7f:fb:99:e2:e7:4f:ff:63:0e:69:80:80:ad:2f:ad:09:
7d:4e:fd:d9:b7:41:59:b5:99:15:62:57:2b:2a:a6:3a:c4:c0:
64:05:ff:0e:b1:e5:8a:f0:0d:f7:f4:53:64:91:9b:67:0b:ca:
0b:a7:61:3d:0b:f7:fb:56:b7:79:4c:3e:d1:19:67:54:39:45:
e0:a3:e4:3c:cc:73:6b:c6:c3:a1:5c:9f:13:4a:a6:97:5f:97:
ec:97:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:03 2024 by rpki-client on console-ams.rpki-client.org