Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3d00cb5-d0c0-4081-84b3-760e0350efd0.roa
File: b3d00cb5-d0c0-4081-84b3-760e0350efd0.roa (raw, json)
Hash identifier: hJb4IKFf0Ga4mgD0AeDJon09M0ubjyXZIx5Om+O1QZc=
Subject key identifier: A6:E1:BF:02:8B:A5:BF:1D:74:B9:E3:C1:45:2F:DE:56:57:58:6E:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5ADC6440CB90D5DBE89575B1E4754CFD1F9C33CE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3d00cb5-d0c0-4081-84b3-760e0350efd0.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:dc:64:40:cb:90:d5:db:e8:95:75:b1:e4:75:4c:fd:1f:9c:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=ff90540ccee70828929582a4980826fa4857469ea5b5bdea1732651dde4e2933, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:4f:6d:7b:ba:99:e4:74:e9:a7:72:43:d6:
4e:24:35:c3:d3:c2:27:dd:4e:d1:80:6d:05:0a:27:
0e:53:ae:a4:6f:df:e9:25:f6:40:8a:67:06:21:1a:
d8:36:46:d1:ca:62:51:d3:25:b6:46:8c:3a:82:bf:
44:2b:2b:34:19:a0:37:5c:43:09:ce:d0:6c:17:7b:
97:18:fa:fe:e3:fc:d8:dc:73:05:ab:4e:12:44:dc:
4b:fd:32:14:a1:c3:48:0d:fd:3a:53:8f:56:db:45:
9e:27:ee:ed:48:58:7e:62:dd:88:f5:e0:ec:cd:6d:
a2:62:ee:6b:0e:c6:1a:88:f5:27:56:a6:51:9c:9a:
cd:52:2e:7b:5b:df:5d:e0:47:37:68:2e:21:b4:aa:
2e:0f:03:d6:a6:04:c8:7a:c9:12:ba:70:21:77:d0:
3d:32:d1:60:52:ce:c5:29:22:e0:82:6e:cf:17:ea:
86:e9:aa:c0:a2:41:bf:7e:b2:b2:ca:10:bb:ed:31:
0b:3a:ba:d9:9c:6d:5f:42:6c:56:4f:25:ff:53:5c:
31:0e:43:2e:bb:46:6b:ed:25:c4:1e:d0:f6:ef:20:
ef:07:c9:45:2d:ab:0d:55:f9:13:16:da:d9:4e:94:
0e:d1:dc:57:e1:3c:18:67:3f:13:c8:bb:fc:5a:4f:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:BF:02:8B:A5:BF:1D:74:B9:E3:C1:45:2F:DE:56:57:58:6E:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b3d00cb5-d0c0-4081-84b3-760e0350efd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
37:20:c4:50:8e:80:c1:c8:6e:7b:f4:66:de:62:4d:18:44:16:
03:17:16:c9:7b:0d:b2:8a:01:c0:2e:14:11:bd:a3:ab:7b:b0:
f0:bf:cc:f2:74:11:8e:8b:37:06:9e:55:28:0d:05:49:03:22:
e7:2a:74:b4:85:78:22:6f:c3:bf:8a:a4:19:81:5e:d6:d5:31:
1d:14:eb:30:65:a9:2d:e3:38:09:86:e5:32:82:e5:c3:7c:22:
33:cd:5f:80:cb:84:3c:20:aa:72:3c:49:15:8d:ce:20:36:ff:
f7:cd:d7:22:47:91:59:3a:7b:f7:7c:5f:d4:20:3c:bc:12:4d:
76:ad:56:8f:fd:b4:66:f4:f6:a5:5e:05:15:01:42:94:f3:92:
e0:e6:e9:40:03:ca:00:d2:a2:f4:b1:5c:3e:bb:0c:89:44:5c:
c5:fe:de:1f:d9:24:74:62:c8:58:55:48:11:86:e4:35:71:5b:
ee:b9:bc:48:29:2b:7b:a5:57:49:3a:d1:62:9f:a9:54:2e:06:
43:9b:a6:05:f2:48:9c:c1:e6:31:ef:58:66:8d:fe:e6:b7:af:
c6:b9:f1:d8:6d:41:38:71:b5:57:9b:fa:13:f6:ae:6a:70:5a:
5f:49:20:e9:9e:7d:70:80:39:5b:e3:0f:26:2b:8e:10:2e:89:
8d:b7:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:41 2024 by rpki-client on console-fra.rpki-client.org