Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a74523cb-4aef-4d11-bb0f-8f649316307b.roa
File: a74523cb-4aef-4d11-bb0f-8f649316307b.roa (raw, json)
Hash identifier: S2pKxmog3TfWK90L21OMJfp869yc6n475aXc/DOf4s0=
Subject key identifier: BA:65:DA:57:7D:CB:30:5F:92:48:BB:D0:6C:EF:3F:7A:89:0E:68:27
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 458F603B0B59B923B233DE377C5F7B23D3F94719
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a74523cb-4aef-4d11-bb0f-8f649316307b.roa
Signing time: Tue 08 Aug 2023 00:00:00 +0000
ROA not before: Tue 08 Aug 2023 00:00:00 +0000
ROA not after: Tue 12 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8f:60:3b:0b:59:b9:23:b2:33:de:37:7c:5f:7b:23:d3:f9:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 8 00:00:00 2023 GMT
Not After : Sep 12 23:59:59 2023 GMT
Subject: serialNumber=8117fe646f30fda58d8aeee88b2797e9fba2369586c32b1f1637963822a7ef53, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:c2:17:53:d6:48:aa:4b:77:e1:e6:48:ea:
36:bd:3d:5e:22:06:09:07:69:d9:79:72:34:09:ee:
e4:f9:75:80:fe:6f:b1:d1:5f:13:1f:4b:66:4d:4f:
95:82:08:6f:42:e0:90:89:54:c2:44:15:a1:d4:57:
88:4e:0e:31:a2:bc:c0:7d:96:38:f3:e7:8c:46:99:
ed:77:0e:a4:57:e6:6a:c3:2a:65:4b:09:ff:b5:fd:
7e:36:37:a2:02:dc:49:64:ac:ee:1a:04:37:96:3a:
df:0e:ac:19:cd:bc:61:ce:16:d3:ff:10:6d:2d:1b:
0a:62:3d:47:93:69:38:a1:dd:f5:6b:5a:cc:10:c4:
5c:d0:1c:db:48:86:b6:31:88:31:19:a1:b2:f5:28:
03:de:49:b5:38:eb:18:16:90:49:d3:37:2d:9f:53:
63:fb:e1:53:f1:6b:65:0e:42:c9:13:a8:a1:ea:d6:
8a:ff:ed:c2:ba:8b:10:0c:e3:58:79:e3:00:e3:fe:
8b:12:c8:c4:d0:bf:ea:f2:85:1b:cb:86:15:27:da:
1a:7a:4d:97:9b:f4:cb:d7:c4:f5:1d:d7:63:5d:6d:
15:f6:e2:87:91:39:15:cc:e7:1b:2e:2f:ad:a7:69:
d0:8c:dc:a6:e7:3d:97:ab:11:36:0a:c7:3f:cd:5d:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:DA:57:7D:CB:30:5F:92:48:BB:D0:6C:EF:3F:7A:89:0E:68:27
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a74523cb-4aef-4d11-bb0f-8f649316307b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ac:dc:65:e6:ee:30:f4:04:90:21:1a:1c:4a:43:e9:48:9c:
12:cb:97:29:38:68:a6:67:df:7e:0c:61:01:a6:dc:a1:41:19:
60:68:ef:07:5e:15:06:d0:fd:45:3f:c3:24:7c:38:42:c5:94:
72:10:0f:c2:f5:dd:12:1f:77:29:37:22:c3:eb:12:1e:f2:69:
e7:45:5a:4e:33:c3:45:dc:79:7b:24:2d:2f:78:1c:39:da:51:
2b:ce:e0:55:f2:10:f4:cf:85:5a:a7:41:f6:e3:50:9c:ce:f3:
62:6c:f3:8a:1f:28:e3:77:1b:68:16:12:e0:0c:cb:ae:f4:08:
e2:a7:7c:58:81:9f:56:dc:6e:80:0a:13:4d:7e:2f:c7:0f:1a:
1a:95:49:96:7c:e9:93:36:d1:c0:58:e6:1e:6d:b9:57:cb:09:
b9:fd:11:9e:df:2f:af:35:f9:f1:db:82:d5:53:a5:44:85:ee:
b7:80:45:9a:12:68:65:07:e2:c9:b4:f3:5f:25:d2:32:46:c8:
83:e9:34:0b:ac:62:8c:c5:a5:a5:61:ed:4d:4e:c6:af:10:34:
9e:7f:42:d6:60:b2:97:45:8f:c6:a6:9f:4f:4f:33:5b:c9:f6:
c3:5c:5d:20:90:d3:34:9e:5c:56:dc:27:50:83:0c:80:91:d6:
f6:f3:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-ams.rpki-client.org