Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9a01a4b-daac-4977-acd4-25409199ccb9.roa
File: b9a01a4b-daac-4977-acd4-25409199ccb9.roa (raw, json)
Hash identifier: I1UV5toO1DR1Pxm6xzI1zTK7kIRxlsoyhri7OsCjyDs=
Subject key identifier: 6D:70:5A:57:87:C5:3F:19:62:3B:51:08:02:FF:A5:42:65:86:44:99
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6DB341D28992B9485A90A4A1A15B4F2B8DB8CE66
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9a01a4b-daac-4977-acd4-25409199ccb9.roa
Signing time: Sun 27 Aug 2023 00:00:00 +0000
ROA not before: Sun 27 Aug 2023 00:00:00 +0000
ROA not after: Sun 01 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b3:41:d2:89:92:b9:48:5a:90:a4:a1:a1:5b:4f:2b:8d:b8:ce:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2023 GMT
Not After : Oct 1 23:59:59 2023 GMT
Subject: serialNumber=ff3ed1c2ea19fec6740dcf234d69ea432af4e0793ac7b5060ad2423779d11925, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:7c:ab:3a:47:89:1f:92:4c:a3:9d:a4:84:
55:a8:ab:24:2c:12:27:96:f0:e7:0d:65:53:01:82:
f4:7d:2a:d0:c7:4e:a0:aa:e3:f9:85:78:6d:d0:15:
8a:44:11:d2:cb:ec:d8:3c:e4:61:eb:41:10:8d:2d:
5b:a4:e0:9a:8e:b4:19:e8:fc:d6:e2:34:fd:98:cb:
b3:ba:bc:ad:a5:1e:23:e1:44:05:b3:e4:e7:8e:c6:
49:61:dd:1c:a4:14:a3:bc:ac:6d:d4:0e:e1:ec:b2:
8e:aa:81:b6:19:16:0e:7d:be:70:c8:c3:b0:8f:88:
4a:ff:08:4f:b6:09:8f:b4:69:a8:94:26:89:21:c1:
65:b1:63:78:fa:20:9c:48:22:7f:7d:05:b2:be:2e:
9c:00:c9:8c:00:2b:75:a9:a2:cc:17:62:fd:0b:63:
53:d6:f1:d4:0d:d7:a4:75:15:ee:2f:7d:83:cb:61:
80:1d:d7:d0:98:ea:75:d0:e4:b3:16:74:03:88:e7:
7b:65:b1:81:67:67:f2:ef:c0:7c:fb:15:87:96:a1:
37:42:e4:85:6d:a1:67:6f:14:30:e3:4b:03:f5:af:
11:50:3b:b6:09:38:3f:21:09:17:ba:7b:35:06:fb:
91:34:f8:ca:85:56:bd:1b:1b:d8:b5:c4:d4:53:bb:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:5A:57:87:C5:3F:19:62:3B:51:08:02:FF:A5:42:65:86:44:99
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9a01a4b-daac-4977-acd4-25409199ccb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:09:66:07:f2:6c:1c:71:98:eb:ee:c9:9b:c6:78:1b:e7:ee:
95:36:1b:83:f7:94:5a:58:92:79:b7:7e:01:fb:36:1e:af:cc:
7f:8f:f4:bf:d1:99:dc:7d:b3:d9:af:0c:b2:30:59:af:f6:32:
53:16:77:2e:92:96:17:87:62:fe:33:99:d3:ca:9b:5b:ce:5a:
f0:e8:a8:5a:6b:b9:6b:33:41:8c:1e:0e:de:b8:47:4e:75:cc:
0e:e0:c3:17:ab:cd:a8:94:1a:59:31:be:da:21:9a:2f:ea:40:
2f:4d:3d:c0:c7:ab:5c:d1:62:2f:83:77:46:4a:47:c7:fb:fb:
4f:d3:f2:3b:9d:14:fa:4e:db:46:a5:8f:1f:63:18:19:6a:b7:
9d:44:3b:5b:e1:9a:cd:21:ea:50:11:2a:d0:88:55:bc:d8:f5:
0e:22:ec:4d:21:3c:50:06:13:4f:3e:7c:91:bf:0e:70:ca:17:
80:b7:ce:b8:11:31:f6:fd:76:19:33:51:e8:67:b1:2b:eb:ee:
73:ac:db:53:bc:2a:8f:7d:a5:52:4b:bf:25:a7:a5:16:15:2e:
43:ac:a3:dc:0b:f1:b9:32:b7:11:2d:4a:7d:9e:49:05:dd:c5:
96:cb:f4:29:07:b9:b4:dd:bd:41:f9:d8:59:90:43:6f:fb:17:
16:dd:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:42 2024 by rpki-client on console-fra.rpki-client.org