Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad40c174-08f2-49fa-910c-ed998ca09437.roa
File: ad40c174-08f2-49fa-910c-ed998ca09437.roa (raw, json)
Hash identifier: Tw4V/wSIP2Tb3VMx/Hu/8yvYBzt/UybgfidqgPf/6Ow=
Subject key identifier: A9:9C:03:0D:11:4A:8A:AB:BE:41:25:2C:95:A8:B6:3D:99:B7:BF:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27B5832BCF504304312067888B91D4426998D16C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad40c174-08f2-49fa-910c-ed998ca09437.roa
Signing time: Mon 26 Feb 2024 00:00:00 +0000
ROA not before: Mon 26 Feb 2024 00:00:00 +0000
ROA not after: Mon 01 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b5:83:2b:cf:50:43:04:31:20:67:88:8b:91:d4:42:69:98:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 26 00:00:00 2024 GMT
Not After : Apr 1 23:59:59 2024 GMT
Subject: serialNumber=936b9e0468115b5fe4c92ba4cdf7130ee0e054f21650f421aaf2384996036a25, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:ea:7c:58:a7:5b:ce:bc:d9:f8:1e:b2:f0:
67:e7:82:65:09:55:3c:1b:9a:b8:50:04:40:fa:fd:
cc:db:fc:41:bc:4d:21:7a:85:fa:7a:f0:c3:de:80:
47:2d:19:45:49:9e:0b:96:4d:72:67:6f:d6:c4:90:
2d:39:04:03:f4:b1:4b:32:38:d7:24:1e:7b:ec:5a:
e4:cd:b0:06:15:19:27:fa:da:21:29:01:b4:0c:3e:
ba:0d:b7:c8:bc:e8:31:32:e9:9c:71:0b:af:16:b8:
91:b7:c0:19:d8:fc:13:45:f6:1c:19:f6:3a:af:79:
5f:b6:42:32:f1:39:e3:cf:25:5c:29:6e:f2:f5:7e:
b9:7b:75:f3:f3:9c:b6:da:f0:09:e7:66:36:ab:86:
2f:62:e3:49:b4:8f:97:b7:f2:0e:bb:15:45:8d:48:
5f:00:01:df:55:7c:e0:59:a7:dc:2d:09:0f:73:0e:
8f:08:4a:a9:e2:ef:06:93:d1:e6:a0:95:4d:d3:66:
b7:b7:57:5c:cf:3c:a6:e9:75:94:b7:e1:fa:6d:00:
e7:11:c3:26:aa:54:12:94:ac:03:00:1f:c1:4d:74:
69:2d:af:ba:cc:76:d8:77:a3:b3:dd:31:fc:70:33:
03:c9:d2:01:e7:cb:a0:bb:86:2c:96:db:2c:7b:81:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:03:0D:11:4A:8A:AB:BE:41:25:2C:95:A8:B6:3D:99:B7:BF:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ad40c174-08f2-49fa-910c-ed998ca09437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:61:8a:b9:c3:79:1d:0b:46:52:88:be:f4:42:de:09:16:ae:
93:d2:73:74:da:59:1a:d2:c5:71:25:88:09:ad:64:7e:23:12:
07:c6:84:4c:aa:58:ec:13:e9:85:3f:05:f5:75:f6:ff:8e:6c:
a6:f0:73:83:f0:0f:38:12:54:12:40:de:14:9d:68:59:f4:bb:
88:8a:d0:eb:0b:c6:02:05:e0:5b:d8:28:8e:35:1a:5d:46:1a:
e2:89:44:c7:c3:d0:02:8d:8e:a4:fe:e1:c3:e2:cb:eb:4a:15:
cd:76:d2:aa:5e:88:fd:21:22:f6:70:fa:d9:92:3d:3b:20:27:
ca:8e:7a:a8:1f:f9:a7:5a:68:80:66:8c:ef:fd:dc:8f:73:b2:
e4:ed:bd:cd:54:6c:d9:63:e2:6d:54:c2:86:c6:ef:c9:91:f2:
a1:4f:22:44:ae:71:3a:ef:f6:16:d7:cd:42:f3:3e:53:02:cf:
f4:38:eb:3a:1b:23:35:b8:9b:b8:13:71:61:8b:f0:30:ab:81:
cb:1c:1e:9d:45:eb:6f:b6:5a:ea:c6:d9:45:87:a0:b0:2c:31:
39:d5:75:75:fe:87:41:2a:ed:1e:c7:9b:a5:78:94:98:af:ba:
da:b4:1a:61:bc:80:ce:1e:a7:49:84:1b:66:8b:71:9e:42:11:
84:30:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-ams.rpki-client.org