Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bcd8ab8e-71df-4d46-8cc5-e76374a7a555.roa
File: bcd8ab8e-71df-4d46-8cc5-e76374a7a555.roa (raw, json)
Hash identifier: gKPPKwA/EPbSTLEcX1AgfT/7C6FglDQnI3wjFKm5tjA=
Subject key identifier: 74:85:58:67:6E:56:C1:D6:34:37:1E:96:99:DD:4B:C0:2D:99:59:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 647C6EA37AE579E47034CE4EA206697B16F0E578
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bcd8ab8e-71df-4d46-8cc5-e76374a7a555.roa
Signing time: Tue 05 Sep 2023 00:00:00 +0000
ROA not before: Tue 05 Sep 2023 00:00:00 +0000
ROA not after: Tue 10 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7c:6e:a3:7a:e5:79:e4:70:34:ce:4e:a2:06:69:7b:16:f0:e5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 5 00:00:00 2023 GMT
Not After : Oct 10 23:59:59 2023 GMT
Subject: serialNumber=34d221bd1ce8cf3cc14bf581d2537079aa7f60ea0e1e36a9cf511009240cb38c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:4f:16:bb:e2:cb:82:3c:87:b0:a9:a2:a3:
31:33:8a:cd:e4:45:bd:44:17:e6:5a:84:b1:2d:84:
a9:77:4a:be:45:19:eb:48:7a:b0:11:00:4a:85:3e:
14:71:4e:54:91:ff:1c:2f:b1:f2:03:89:81:57:ea:
8f:58:d7:66:ce:65:64:c1:49:35:c8:f0:43:6c:63:
a7:c0:e3:0f:f9:fc:0b:b9:ef:8a:03:af:4e:30:c5:
b4:38:02:d8:84:22:f3:98:57:b9:b9:00:dd:05:5d:
74:b6:4b:24:93:9b:48:ff:2b:db:6c:5a:8b:fe:e9:
49:6c:c1:88:be:9f:e1:1d:4d:b5:57:83:7c:9d:6a:
4e:87:5a:fa:1d:30:83:4e:12:15:79:ff:0d:e3:fa:
e5:a5:35:5f:bc:30:f1:da:69:00:46:6c:a0:1f:8e:
bf:cc:48:d1:3c:24:85:48:c5:7b:c3:10:4d:7f:a9:
5c:7c:b0:43:4b:43:8c:ef:27:2c:15:30:24:d0:74:
af:21:72:77:f4:25:72:4b:f9:bc:51:be:43:ba:77:
d1:96:46:0d:cd:94:b4:42:90:6f:d3:2f:da:19:9b:
8a:d3:a0:84:89:81:bb:1e:83:4e:ea:c6:3f:62:c8:
33:ef:f7:5e:5b:aa:55:96:1e:d3:72:bc:c5:f8:1d:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:58:67:6E:56:C1:D6:34:37:1E:96:99:DD:4B:C0:2D:99:59:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bcd8ab8e-71df-4d46-8cc5-e76374a7a555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9e:b7:9d:b5:84:f2:da:f6:30:5c:84:68:d7:b4:5f:c2:db:
6f:9d:3f:8c:d3:98:af:fc:ac:83:01:a5:c2:5f:ef:fa:d0:f6:
66:3d:09:b1:4e:8e:b5:56:64:7d:fd:96:e1:2c:d9:05:4f:59:
8b:0d:9d:4b:7e:90:57:39:94:6f:01:52:9b:4c:20:89:51:3e:
73:b1:18:a2:69:ca:56:af:2e:a9:51:86:19:a9:d5:df:a8:79:
7c:b6:17:66:a2:68:57:b5:c2:73:5c:76:9a:a6:71:32:ce:41:
4a:26:1e:2f:85:56:21:35:6a:a9:28:61:a1:d8:e4:e0:23:22:
d6:35:bf:5b:5b:27:34:c5:48:0c:0b:33:d8:fe:8c:01:6b:a7:
cf:7b:4c:24:bd:0f:43:0d:bf:9a:32:4e:8f:85:76:c6:26:2a:
58:77:19:ec:c9:d1:03:5e:dc:00:b7:af:fa:24:f9:55:ae:3d:
8a:f4:49:c8:cd:2d:27:ca:b4:f3:e7:10:3e:67:93:33:1c:f7:
b8:ff:d4:d7:43:f0:aa:05:72:be:21:c1:21:e7:18:a6:47:98:
20:05:57:33:90:b0:fe:07:e0:9b:75:54:1e:83:94:4e:c1:3d:
93:fe:60:ff:b9:59:8c:f4:52:58:44:6b:05:a5:8d:60:fc:3d:
bf:6e:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:42 2024 by rpki-client on console-fra.rpki-client.org