Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd2ce44b-7aae-43dd-984b-0a968b26c586.roa
File: bd2ce44b-7aae-43dd-984b-0a968b26c586.roa (raw, json)
Hash identifier: kddDCtOZ7MrBC+JcZ5YXR+Mpx+egX8zLx+Jd7NEZd08=
Subject key identifier: AB:28:8F:60:34:78:66:06:2D:16:9B:14:16:44:1E:03:CD:AD:53:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B4E92400E8ABB3467BD1969056A88B17372CCD7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd2ce44b-7aae-43dd-984b-0a968b26c586.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4e:92:40:0e:8a:bb:34:67:bd:19:69:05:6a:88:b1:73:72:cc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: serialNumber=9bdcf1a3638353dfc58a347ad6b3bce528e6faea8d2da4a1934014f3bdaf6eea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:ca:aa:33:b7:38:81:eb:fa:55:11:a9:f9:
89:6a:38:70:6b:49:ad:45:2e:ae:0e:20:35:c1:f9:
12:a7:e2:33:d0:42:63:8f:d4:fd:2d:70:10:28:74:
7c:68:9e:bc:21:15:24:17:fd:a4:5a:f0:e0:69:cb:
6b:c6:06:32:71:56:50:c3:18:49:3a:a7:00:24:39:
b0:39:31:bb:4c:d4:49:53:0a:67:2e:0e:75:a4:d2:
8a:c8:d1:a5:76:d5:d6:de:a8:7c:49:ba:65:94:0f:
a1:12:36:a6:ea:55:3c:e6:1b:3a:fa:96:8d:45:6c:
8b:14:0d:bf:7e:b2:cf:e1:03:ae:8d:72:34:a4:9b:
30:2f:41:44:87:6d:4d:4c:05:ab:47:22:94:f6:dd:
df:e4:1c:b0:85:9d:c7:48:3e:04:ed:12:be:29:fb:
74:7c:56:42:36:8a:22:4b:f6:d7:0e:ce:af:e3:ea:
f2:2d:fd:06:b6:97:29:f1:66:b3:33:17:99:7a:2d:
e0:28:f6:93:a0:15:a6:bd:b0:7c:f6:1a:5b:51:a3:
66:b4:a5:58:16:dd:9f:70:c7:89:6a:89:c9:16:f2:
77:f4:72:31:51:68:79:88:f0:ed:98:03:65:61:84:
53:d4:50:3b:16:39:90:4f:78:8e:b5:f3:d7:b3:80:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:8F:60:34:78:66:06:2D:16:9B:14:16:44:1E:03:CD:AD:53:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd2ce44b-7aae-43dd-984b-0a968b26c586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:1d:71:cd:6d:89:cf:ca:b0:85:e4:bb:de:8d:36:58:75:
68:bb:c8:94:de:c2:30:ce:4f:f4:07:ea:b9:f8:f9:64:a6:9b:
7b:8a:3a:c6:8a:36:ef:56:bc:15:ef:53:e6:f3:11:f2:1f:ab:
a2:77:8e:34:91:d8:d9:9c:49:e0:eb:3b:d6:91:f4:7e:92:1c:
cd:74:cb:d4:d5:90:f4:85:e5:e8:f4:53:6a:71:be:2d:e1:b1:
f8:ad:b0:7e:94:11:a1:ac:c9:30:bd:87:5a:30:e0:de:c7:2d:
a1:ac:cb:9b:a7:78:b7:16:a3:27:04:1f:75:6d:23:bf:1a:ac:
ec:00:55:a6:22:b0:f4:eb:a3:56:86:62:33:26:d9:f5:a7:53:
5b:67:b0:98:40:be:95:22:9d:a8:a5:31:24:1d:4a:d7:fd:e1:
20:b1:e7:f7:c6:2c:ab:24:e8:aa:00:4f:fa:9b:85:57:fa:54:
1e:2e:7a:23:44:8b:f6:58:02:f9:b5:0c:a1:fe:af:c3:13:55:
06:1b:9c:1d:0f:51:b3:3b:84:83:8f:2e:1d:09:a3:d6:02:b6:
3b:7e:82:ce:9f:b2:a7:63:9b:9d:cd:87:75:9a:aa:20:69:9f:
ff:b2:aa:33:74:ee:2c:20:50:7c:25:97:37:ca:b9:93:5e:ed:
90:bc:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-ams.rpki-client.org