Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6906e29-cfd5-48a5-90f0-4f89bdc09fcf.roa
File: a6906e29-cfd5-48a5-90f0-4f89bdc09fcf.roa (raw, json)
Hash identifier: rVEmumtTEMuuW/5pX/NCbd9O6eBTZYKPVruqef3Ih6I=
Subject key identifier: 5C:23:55:26:29:F4:AD:BA:8D:0C:11:25:3E:09:EF:68:8F:03:FC:22
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1E46048560013966018F3124BE44B5B40E175FAC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6906e29-cfd5-48a5-90f0-4f89bdc09fcf.roa
Signing time: Mon 03 Jul 2023 00:00:00 +0000
ROA not before: Mon 03 Jul 2023 00:00:00 +0000
ROA not after: Mon 07 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:46:04:85:60:01:39:66:01:8f:31:24:be:44:b5:b4:0e:17:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 3 00:00:00 2023 GMT
Not After : Aug 7 23:59:59 2023 GMT
Subject: serialNumber=67712ccaa1a184fe709101df94601b6674dfafabd398c6f344f5d77609c2318a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:18:a0:94:6f:63:56:78:71:81:80:41:cc:
5e:4c:f1:3f:56:e6:09:de:b7:dc:c1:b6:15:b2:e7:
03:81:7c:df:e0:17:db:0a:f7:a1:b6:de:9d:69:85:
df:18:04:9d:31:1c:3f:c0:29:13:94:fe:6f:41:fa:
75:5b:b0:d7:05:13:27:ea:ca:94:7b:da:63:3f:58:
c5:94:04:98:4c:70:35:d6:54:69:71:70:78:e7:a2:
f2:82:e4:f2:7a:75:b1:01:92:7d:b8:de:9f:b5:50:
3b:cd:81:c9:d1:55:84:d6:69:f8:3e:b8:a8:ab:03:
fe:80:50:4e:6e:4d:e1:15:e9:ea:c3:d2:78:4b:a5:
80:ba:62:46:cc:7e:80:f2:03:0a:09:0d:d5:8f:6a:
d1:a3:cf:34:44:14:39:d3:e9:a6:12:60:90:82:f1:
6b:75:dd:e0:4e:fe:a0:18:39:c3:b7:ba:88:43:5d:
0d:a7:7c:d4:b4:77:1f:ea:be:b7:2d:0f:b3:ed:42:
fe:ad:39:7a:cc:bf:ba:79:db:7d:02:00:de:40:64:
6d:0d:0d:6c:b7:0b:89:65:10:a2:c7:35:f1:78:8a:
42:c1:71:fe:65:bd:c2:9d:d2:78:12:81:19:ef:2c:
a9:58:9b:11:f2:5a:33:55:4b:be:a9:0f:f9:c3:2d:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:55:26:29:F4:AD:BA:8D:0C:11:25:3E:09:EF:68:8F:03:FC:22
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a6906e29-cfd5-48a5-90f0-4f89bdc09fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a2:07:ea:76:80:e3:4a:81:3d:0f:aa:eb:6e:ed:6d:72:71:
af:08:16:f7:93:47:30:2f:9f:96:e6:fe:a0:59:0a:18:95:5a:
43:1e:f3:ac:66:4d:0a:7a:f6:3c:b8:65:e9:00:2b:07:ee:18:
ad:e1:ec:2c:3c:0e:e8:ba:b4:e0:11:bb:b3:9e:6c:ef:52:56:
46:31:64:c5:0e:32:e1:04:6e:ab:ae:d5:2d:d3:35:79:1e:80:
b0:d9:1f:2a:e3:3a:fe:f8:92:70:f6:bd:dc:bc:49:b2:24:8f:
5c:c7:6a:18:af:90:d1:6c:27:5c:f1:20:79:8a:4f:0e:9a:7c:
ee:77:3b:95:a1:5f:0e:cb:35:02:30:0d:06:3a:e3:17:3a:29:
cf:06:70:4d:bb:b7:67:f9:24:e4:df:ee:a8:24:36:9a:3a:db:
56:b4:16:ab:eb:f8:b7:31:44:80:87:ac:a7:ab:01:02:d8:ef:
55:ff:9b:6c:1f:ea:20:4d:50:cc:6d:4a:cb:1e:f7:b0:88:23:
62:a6:41:ba:f5:9b:e2:c8:c4:31:ac:46:31:5a:e5:79:13:fc:
11:48:cb:b3:25:e4:19:ce:bb:c0:79:e8:b8:1a:65:1e:35:fa:
b5:48:86:70:08:7a:d3:71:3e:c0:cf:ce:3e:fe:95:5a:f1:f5:
0f:a5:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-ams.rpki-client.org