Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a59f6d4b-22e1-40e1-8b2d-b1c5ddef30ea.roa
File: a59f6d4b-22e1-40e1-8b2d-b1c5ddef30ea.roa (raw, json)
Hash identifier: EefPjA8FZVbJmwvbSpUYG+D4opduyrO7sCrwqmIjfKE=
Subject key identifier: 6C:F3:A9:89:C8:F2:EE:BD:A3:10:7E:EA:5F:70:3D:55:D1:91:8D:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3ED57AA51C9FFBE6F0F3569630F98D0886991DC4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a59f6d4b-22e1-40e1-8b2d-b1c5ddef30ea.roa
Signing time: Thu 29 Jun 2023 00:00:00 +0000
ROA not before: Thu 29 Jun 2023 00:00:00 +0000
ROA not after: Thu 03 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d5:7a:a5:1c:9f:fb:e6:f0:f3:56:96:30:f9:8d:08:86:99:1d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 29 00:00:00 2023 GMT
Not After : Aug 3 23:59:59 2023 GMT
Subject: serialNumber=a03c6d6f8b333b2635f6c03afe2d88966490f41c7733cbb7b168a662ecfd5e18, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:12:29:12:f6:e0:17:0e:b6:10:ef:63:03:
1d:ac:8a:91:10:0a:fa:d9:52:ad:0c:70:6c:b6:8b:
21:a9:da:7c:29:2c:41:16:ac:69:15:7f:cb:d8:cb:
fc:3a:34:ac:e3:b1:7a:2c:ba:45:52:be:e2:37:e3:
c0:ee:80:b7:ae:52:95:23:be:74:ca:2e:bb:21:15:
06:01:17:0a:7c:c4:ed:cd:5b:e7:a8:ed:30:f8:7e:
32:c5:97:7b:9a:8c:d3:cf:81:e7:cc:9c:1f:a3:3d:
6c:dd:fc:b5:b6:bc:70:d9:09:4a:08:1d:d6:c2:41:
e9:36:e7:7c:e1:b0:94:4b:51:dd:7e:59:9f:f9:24:
50:86:e6:09:c8:89:35:61:18:b0:fa:70:34:75:64:
94:0c:07:5a:e1:e1:71:ce:ad:af:4d:9f:4c:41:b2:
87:9c:e6:de:16:d1:d1:c7:ef:06:ab:b9:f9:72:b1:
ec:df:19:b6:33:53:24:19:9f:1f:39:fc:b2:90:0b:
c6:bb:49:af:68:d9:93:2a:96:1e:34:33:0c:a4:09:
8a:e0:e6:66:d5:13:6d:7c:74:be:44:07:63:6c:15:
fb:51:f2:ca:85:ee:1d:b6:62:10:be:1f:b0:b2:3f:
29:fe:44:6d:31:92:08:43:fa:9e:11:05:14:84:9a:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:A9:89:C8:F2:EE:BD:A3:10:7E:EA:5F:70:3D:55:D1:91:8D:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a59f6d4b-22e1-40e1-8b2d-b1c5ddef30ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:95:6f:fc:c6:c3:b3:bd:01:ce:fe:1c:46:54:91:82:da:ec:
27:5d:95:03:73:6a:99:1e:b3:fb:cf:9c:f1:5e:ab:ba:8f:4b:
ac:fc:2f:d8:7f:67:d8:db:3e:4b:35:87:28:e2:4e:bb:39:6e:
c9:35:ac:0e:2f:27:ee:f6:82:53:3c:3e:8b:c5:8e:e6:c5:1d:
44:d7:e3:d2:39:51:4b:64:7d:56:b6:c6:5a:b6:b9:c7:2f:64:
89:94:88:43:3e:cf:75:a3:3a:e8:29:a9:99:67:45:e6:8d:29:
26:47:1f:1d:9b:7e:1a:c8:5f:bc:8e:e3:f4:3e:7f:c5:c2:32:
f9:f0:ea:85:bf:6a:25:ce:9c:12:3d:54:70:03:b7:76:c0:64:
e1:11:a5:01:a4:55:71:d4:0f:ac:c8:ce:9d:87:5b:6e:e3:6c:
0b:3e:82:db:ea:e3:fa:71:74:24:fe:e4:3e:9b:c7:b8:9f:9a:
f6:2c:46:45:11:c5:e5:5b:a5:dc:0c:1f:1a:bc:db:25:b5:90:
b6:86:82:86:54:d0:f9:36:51:ac:d3:32:4e:9a:cb:14:fa:1f:
fb:f9:b6:7e:54:36:a6:b3:51:2e:3a:e4:ac:f4:bb:69:d9:41:
96:ca:83:1b:98:11:88:37:75:2c:eb:74:88:0d:6b:3b:f7:04:
b3:07:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:04 2024 by rpki-client on console-ams.rpki-client.org