Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aeb5cea0-64ea-4ea9-9ce2-8b6d9571dd31.roa
File: aeb5cea0-64ea-4ea9-9ce2-8b6d9571dd31.roa (raw, json)
Hash identifier: 99Ue51UG59gVTJUWgl86MUI5fgq/FVfGHBUt1m3GkTk=
Subject key identifier: 00:7E:30:62:3D:64:4F:BA:E0:93:C0:3F:79:E7:98:78:C3:50:DB:99
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28F8AA8AC0E2C28AB4BE2C58857A90A3529BA23F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aeb5cea0-64ea-4ea9-9ce2-8b6d9571dd31.roa
Signing time: Wed 05 Jul 2023 00:00:00 +0000
ROA not before: Wed 05 Jul 2023 00:00:00 +0000
ROA not after: Wed 09 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f8:aa:8a:c0:e2:c2:8a:b4:be:2c:58:85:7a:90:a3:52:9b:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 5 00:00:00 2023 GMT
Not After : Aug 9 23:59:59 2023 GMT
Subject: serialNumber=b712552ed1ef2749e468499f9b6c4acfaa605cb3f1b1450f22d430f111ce95a7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:ef:fe:fd:cd:23:1e:d9:ce:bd:3e:6f:7f:
e2:ec:13:da:0f:5a:a4:a0:2b:69:32:90:0b:e7:98:
29:f9:b0:31:7d:73:1b:03:71:f9:3d:13:43:c1:6e:
1c:c0:24:97:ea:d2:75:04:17:03:2b:e7:82:d9:e4:
41:40:bf:0c:a0:ad:86:ce:75:67:ac:31:62:0d:8a:
a1:9b:f3:0c:61:60:b7:d6:b1:75:8e:0c:02:5c:51:
8d:02:2b:91:c7:47:22:89:78:6b:da:e4:f1:e3:6c:
be:7e:eb:6c:33:d9:91:1a:b8:ba:ae:62:d1:22:e9:
e6:2f:aa:08:e9:6d:da:dd:9f:0f:2d:02:bd:0d:f9:
6f:f5:65:ca:ec:f8:69:32:db:8d:a2:9a:81:46:0c:
e7:3f:38:0d:64:2b:27:3a:27:ff:94:b5:b4:2b:ea:
68:b2:6d:e3:e0:9b:ad:5e:30:5c:52:9b:77:2d:e3:
21:5b:7c:ae:4a:0d:5c:6d:a0:e0:9a:64:3f:73:7d:
47:74:6b:9e:d3:3d:2c:0e:b7:04:c8:3c:52:49:49:
19:29:ba:57:d7:e7:68:02:aa:f7:48:b5:20:a0:09:
b2:47:53:9a:e3:b8:f0:ad:20:c8:64:6a:a3:dc:e1:
11:70:90:6e:38:fe:b9:42:33:02:11:ff:d9:0b:c4:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7E:30:62:3D:64:4F:BA:E0:93:C0:3F:79:E7:98:78:C3:50:DB:99
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aeb5cea0-64ea-4ea9-9ce2-8b6d9571dd31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fb:5b:62:fa:dd:f7:6d:6f:c0:8d:50:a0:29:d0:c7:59:5a:
46:79:15:e7:4e:e8:be:79:ba:0b:9f:6c:f1:01:42:f9:15:83:
23:af:a8:2b:6e:bf:6e:f0:c9:f6:49:c2:b7:c0:1e:42:83:48:
1d:04:aa:1d:88:37:1d:61:4e:3c:3b:01:cd:21:ce:12:74:0b:
57:58:27:93:04:05:ed:41:17:c3:8c:d0:f3:fa:bd:11:b9:f0:
70:1e:20:1e:c4:7f:f0:62:8e:94:72:4b:aa:60:6a:c0:26:eb:
cc:4d:4a:58:7f:9c:f7:b9:13:56:7c:be:f7:a2:27:74:7d:53:
c1:22:b3:25:0d:7b:f1:59:00:4f:78:3e:31:ab:e2:85:3d:64:
a4:86:32:92:5b:41:47:3d:18:9a:05:30:92:a3:e3:52:ea:34:
c2:bf:32:0d:8d:e7:2d:c7:84:ec:a5:ad:8b:ce:bb:fa:bf:4f:
ae:c8:de:94:bd:74:2b:b0:b4:56:d4:1e:23:be:1b:dd:28:61:
19:cb:7c:fb:56:42:67:cf:b1:a7:e7:92:61:b0:ae:f1:3d:49:
9f:86:e1:74:07:3a:2d:09:34:18:e5:fa:22:30:a8:21:c1:5e:
0c:99:e1:ee:3e:15:81:6a:51:af:49:3b:8d:39:9b:c3:2c:89:
3f:44:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-ams.rpki-client.org