Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4b4ddd7-8d6b-42c2-b4dc-16e40c00f570.roa
File: a4b4ddd7-8d6b-42c2-b4dc-16e40c00f570.roa (raw, json)
Hash identifier: fadwistL4Pcfcl12QOi1TOJ1AyeXfkrcUvWPNc7jly0=
Subject key identifier: E6:36:3E:47:4F:08:73:AA:FD:78:EB:8A:1E:9A:D4:C5:E7:F2:A1:18
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 308A50EA5EDD61FA7ED92DC6C1E2F2C4D6C54278
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4b4ddd7-8d6b-42c2-b4dc-16e40c00f570.roa
Signing time: Sun 04 Feb 2024 00:00:00 +0000
ROA not before: Sun 04 Feb 2024 00:00:00 +0000
ROA not after: Sun 10 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8a:50:ea:5e:dd:61:fa:7e:d9:2d:c6:c1:e2:f2:c4:d6:c5:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 4 00:00:00 2024 GMT
Not After : Mar 10 23:59:59 2024 GMT
Subject: serialNumber=a04cb5bfbeb9f32882caabe5b270c2058727158328a113c94a2ca2eb40944092, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:df:0d:89:bf:ee:ef:46:2f:6d:77:3b:31:
f1:6c:05:73:42:77:b4:66:04:78:a9:bd:4c:da:d9:
91:82:93:8f:80:ac:38:0d:80:d4:12:ec:9d:ff:7d:
33:57:8f:ab:b1:35:c4:2c:3a:30:2e:ae:af:c5:66:
6c:31:ce:40:6a:02:b8:0b:3c:9d:93:dc:7f:7e:d6:
3f:96:92:ec:ec:06:e4:1f:9d:86:06:b6:6e:67:36:
23:a8:ac:c9:ce:6d:c9:24:ad:1a:36:4b:26:68:21:
6a:9e:d5:ef:e7:ad:18:43:f1:5e:2f:d4:65:b7:ed:
6e:0e:60:7b:ae:80:64:19:0c:ca:20:4e:58:f4:3e:
a8:8c:11:dd:3e:97:2d:8e:b2:24:28:19:03:d3:bf:
b8:92:eb:3c:d8:37:af:35:b0:dc:3f:c6:6e:42:7c:
d7:5e:c7:92:f0:b4:2d:43:3c:a3:24:5c:b9:93:e0:
a2:a7:32:e1:de:af:5e:fa:71:55:74:8b:f1:02:e8:
71:60:29:e8:24:c1:76:03:95:37:98:f0:c3:d9:98:
cd:f0:6b:22:a3:04:75:e0:c7:f2:6a:4a:60:d8:57:
bd:5b:ef:49:dd:ef:5a:2c:04:95:42:e5:16:ed:64:
7a:2f:64:02:18:9c:54:a0:44:07:8d:47:ba:ba:5e:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:3E:47:4F:08:73:AA:FD:78:EB:8A:1E:9A:D4:C5:E7:F2:A1:18
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4b4ddd7-8d6b-42c2-b4dc-16e40c00f570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7e:43:9d:30:86:97:eb:63:9c:ef:e0:73:6a:7d:6a:73:57:
04:c4:1e:be:87:a2:62:c4:b6:f4:6c:86:47:89:1c:f5:e9:24:
c8:3c:2c:a2:b5:8f:31:92:4d:88:7e:95:ef:2b:47:6c:c5:f3:
54:02:9f:22:e2:8f:26:8b:9a:4c:01:31:71:88:9b:10:41:ea:
e3:82:33:30:77:cb:68:f9:35:d5:c9:59:03:42:0f:cc:33:0f:
bd:3c:8d:62:a3:0f:c9:c1:7d:dc:90:db:74:92:9f:49:dc:6f:
9b:de:47:2f:aa:d2:a3:aa:c2:4a:1f:c7:17:0c:c4:a2:9d:33:
19:7a:d6:a4:43:0e:88:dd:fe:5c:f4:86:e4:b4:1b:04:30:cd:
90:29:d8:32:a0:5c:c7:d1:90:62:95:9d:d8:71:2c:6d:ac:1e:
27:fe:cd:a6:23:30:b7:71:06:01:37:b0:f5:12:e9:91:23:98:
e6:36:f7:82:41:ed:12:b2:f5:fe:01:dc:b0:29:f7:5e:a0:7f:
f2:80:a0:08:f0:a4:23:6c:29:db:33:54:e0:fe:bb:37:54:aa:
00:7c:5d:f9:3e:6a:3a:12:39:c9:4a:ba:55:a9:c3:5f:72:ba:
d8:de:69:af:bf:fe:a7:c8:ab:21:9d:39:71:01:cb:fe:db:d1:
9d:fc:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:04 2024 by rpki-client on console-ams.rpki-client.org