Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aae9918d-e294-43a1-a179-2a671b8adce6.roa
File: aae9918d-e294-43a1-a179-2a671b8adce6.roa (raw, json)
Hash identifier: ndy9XPmmmlMbFKcQDtGMPUNXs4hQkXhM1LzNHGSZhfI=
Subject key identifier: 21:A8:E4:C4:A4:86:C7:CF:0C:BC:34:FF:98:B5:D0:B4:BF:93:1F:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 79F5218F058F8B4AA5A3367DBF025BCE2A8E77CF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aae9918d-e294-43a1-a179-2a671b8adce6.roa
Signing time: Fri 05 Apr 2024 00:00:00 +0000
ROA not before: Fri 05 Apr 2024 00:00:00 +0000
ROA not after: Fri 10 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f5:21:8f:05:8f:8b:4a:a5:a3:36:7d:bf:02:5b:ce:2a:8e:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 5 00:00:00 2024 GMT
Not After : May 10 23:59:59 2024 GMT
Subject: serialNumber=0b68523c74bf02030c8703f4c8078533ec45c7d737106278b533a76585344349, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:50:31:1b:31:4e:82:da:8a:38:c6:34:0c:
68:93:5a:a2:ca:14:3b:86:ae:49:3e:86:09:39:50:
c5:aa:db:99:c3:9e:12:0c:71:55:78:8c:43:98:dc:
18:56:4f:55:21:01:5b:f4:b8:e0:91:c4:f2:19:88:
cb:16:8e:2f:50:12:3b:cd:0e:9e:4d:29:a1:ef:31:
9b:e0:6e:73:21:94:bb:7b:0d:57:97:cc:f6:25:74:
b9:0c:52:cf:03:c5:9f:39:14:84:b9:58:ee:18:35:
2d:e8:a1:06:7c:39:a2:4d:ec:83:dc:cb:c9:17:0c:
63:28:18:4b:7c:53:22:f3:2c:b6:64:db:ca:22:3d:
88:72:af:53:fe:71:17:b9:e0:2c:7d:5e:0f:ea:ba:
91:f2:2b:9e:f7:e5:5b:7e:16:75:62:49:8e:5d:19:
80:5b:76:2c:9c:31:12:e1:8c:bf:69:30:17:d9:d7:
32:79:44:56:6a:95:a8:99:1e:88:d8:1e:9d:3c:7c:
8f:ff:ae:7c:0f:37:a2:03:ea:77:5e:a4:fe:02:fb:
25:53:6b:82:ee:2a:df:21:0c:30:ff:e0:84:db:21:
cb:17:55:70:49:8b:fd:fa:e9:7e:58:45:87:d0:33:
5e:09:cc:89:ff:7f:f2:b5:5e:a2:7f:84:18:b6:4f:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:E4:C4:A4:86:C7:CF:0C:BC:34:FF:98:B5:D0:B4:BF:93:1F:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aae9918d-e294-43a1-a179-2a671b8adce6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5e:45:64:c6:30:31:da:03:bf:6f:4f:25:40:2f:37:6d:e1:
08:00:13:be:2c:5e:93:63:ab:c6:0c:6b:83:24:ae:b7:bc:c0:
94:f7:88:5f:23:62:ff:c6:92:47:ad:96:d4:be:26:3f:ce:f1:
18:49:8b:0f:44:31:a3:7a:7e:3c:a4:2c:6a:00:99:7a:1b:9d:
c4:25:c0:f4:2c:82:4c:d0:c7:db:ed:99:77:e0:a0:79:06:8f:
5b:32:31:a3:e4:22:fc:e4:ab:d8:44:e4:4f:7d:03:22:ae:6a:
a0:03:21:e5:12:88:19:e9:2c:cc:aa:ae:c1:1c:83:89:d6:5e:
f0:0f:6c:07:17:d5:f0:ab:8d:e8:16:a5:fe:f8:60:3d:0a:47:
dc:25:e2:ec:3d:03:c5:9e:09:29:83:13:af:43:f9:77:3d:9f:
2e:d8:d1:4a:ed:eb:c4:fb:bd:6a:c1:b2:3f:76:dc:97:36:77:
a1:fb:fe:25:9f:83:3e:fa:be:7d:83:5e:05:a8:12:e9:54:80:
b5:f3:c5:7f:1d:c7:b4:a5:c8:2a:3e:4b:5d:f2:f5:6d:3b:02:
23:d1:c5:31:cd:31:88:60:7b:8f:db:70:34:3a:18:cc:f6:2c:
30:df:57:cb:e7:47:97:9b:7d:e9:b9:85:f6:92:78:eb:47:cd:
af:b4:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-ams.rpki-client.org