Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7885cac-25c3-4a94-8075-6a5b68bbd651.roa
File: a7885cac-25c3-4a94-8075-6a5b68bbd651.roa (raw, json)
Hash identifier: g19I4B2Znw7Kgzcho8myfPQ0dmh0yPvRFYBvmijcDOQ=
Subject key identifier: AC:A8:0A:00:3D:C4:20:1F:46:4B:46:6E:AA:B9:BA:83:20:05:96:97
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5265AF648B8D737236AD20AF49BCD54FA3ACFC5D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7885cac-25c3-4a94-8075-6a5b68bbd651.roa
Signing time: Fri 07 Jul 2023 00:00:00 +0000
ROA not before: Fri 07 Jul 2023 00:00:00 +0000
ROA not after: Fri 11 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:65:af:64:8b:8d:73:72:36:ad:20:af:49:bc:d5:4f:a3:ac:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 7 00:00:00 2023 GMT
Not After : Aug 11 23:59:59 2023 GMT
Subject: serialNumber=6837ccf0eb5d825f47f86941743015ca1db54c7226c388b7a1c944f232659c6b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:9d:dd:3f:75:cd:26:2f:b8:80:6b:46:52:
8d:46:36:9e:87:08:da:d3:8d:e0:f8:38:4f:20:7a:
a0:1d:0b:d2:ce:4c:f2:c2:55:0f:9e:4d:0e:4b:89:
3e:9a:7f:7a:4b:80:9d:e1:3a:d1:ef:b8:9a:9e:4a:
1b:db:30:b2:7d:7a:f4:0b:1e:e2:cc:4a:2b:83:e5:
ad:fe:96:33:df:7e:4d:a5:6d:b4:ef:cc:f5:22:b0:
23:17:dc:a8:be:28:53:c7:76:7b:17:b9:78:1c:26:
20:4f:b6:22:8a:9e:24:69:0e:ec:5d:e8:07:2b:51:
3f:88:8b:3f:38:57:95:33:a3:43:ff:53:23:dc:bc:
d6:30:08:83:fb:a2:39:a3:d9:8d:cd:a9:13:21:2e:
5c:8a:90:30:3a:ce:cd:6d:0a:b2:1d:00:59:52:98:
c2:5d:2f:a8:08:64:31:f5:86:b6:ce:3c:39:e3:5c:
e8:f5:44:f9:34:47:03:08:40:e4:6c:4a:bc:d9:6d:
53:21:d7:dc:fb:38:fe:f9:a4:29:18:d5:8b:f0:81:
a6:5c:ed:70:00:9e:5a:e5:09:1f:e4:83:ca:d8:ad:
5a:85:23:6c:b9:1a:60:fa:75:42:e8:30:d7:3a:cc:
73:11:d1:9d:9e:54:e2:45:6d:e8:bc:9e:5f:c8:5e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:0A:00:3D:C4:20:1F:46:4B:46:6E:AA:B9:BA:83:20:05:96:97
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a7885cac-25c3-4a94-8075-6a5b68bbd651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f7:80:79:93:00:d1:40:82:31:1b:87:25:77:a7:d8:90:c3:
17:06:1e:07:80:9f:71:56:34:ff:1d:9f:1a:37:f3:b2:01:a7:
73:04:89:11:83:88:f8:f7:88:8f:7a:6d:f4:f5:b8:d9:28:15:
63:3f:eb:8a:7f:8a:7a:6d:92:76:5d:d7:aa:e2:01:23:fe:a9:
52:44:eb:7b:27:b9:36:9e:ff:0f:be:03:11:5f:d8:d5:18:a6:
3a:79:d8:6d:86:6a:c4:79:a7:17:67:74:5c:8d:50:85:34:b3:
59:8e:15:e8:d9:7d:92:ec:dd:b1:5e:aa:fe:7e:e2:8c:ab:ba:
83:cd:ec:7e:8c:02:d4:f0:c1:31:94:fb:e2:45:a8:eb:73:f7:
02:f7:12:ef:41:40:79:bb:a3:c1:11:98:fe:a2:b2:33:d0:9f:
6d:52:e8:fa:91:ac:5c:7d:a7:43:d1:77:ad:89:7d:eb:80:f0:
f0:d6:f3:39:8a:8c:8f:2f:02:7e:84:18:c6:5a:e3:f3:b5:17:
49:aa:d0:68:db:54:4b:74:5c:52:56:1c:2c:24:67:23:e9:31:
05:b5:47:fd:f5:1a:9c:e1:57:d5:5a:be:ba:2b:60:f1:d2:b5:
0f:84:b8:62:30:38:be:e4:36:6b:30:4c:a4:07:96:22:43:69:
e8:3a:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-ams.rpki-client.org