Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd3bdce8-88a8-4d91-99f2-d522d5ff585c.roa
File: bd3bdce8-88a8-4d91-99f2-d522d5ff585c.roa (raw, json)
Hash identifier: hIbdJ7M/66l/gSXekUEUSV2fb/FbO8LAJU+tj4FR05U=
Subject key identifier: 9A:4A:A5:E2:D4:AF:1E:4F:5C:97:E7:E8:A1:19:99:4D:86:7E:65:FA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 462B9FFCB68EFA72266F958829D6074B2D59C112
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd3bdce8-88a8-4d91-99f2-d522d5ff585c.roa
Signing time: Mon 24 Jul 2023 00:00:00 +0000
ROA not before: Mon 24 Jul 2023 00:00:00 +0000
ROA not after: Mon 28 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2b:9f:fc:b6:8e:fa:72:26:6f:95:88:29:d6:07:4b:2d:59:c1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 24 00:00:00 2023 GMT
Not After : Aug 28 23:59:59 2023 GMT
Subject: serialNumber=835194432ccb42d336704438fba7a661e8bd66a0f7621d296481428fa6108076, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:13:91:bb:b8:4f:d9:85:c4:ff:c4:b3:78:
bd:e6:0b:9b:b8:6f:37:d7:eb:61:0c:80:7d:b1:fe:
4c:3d:f3:3c:e3:49:53:6e:6d:23:95:c3:cc:f1:a1:
9f:ef:0b:c6:0b:d4:ca:d0:bb:28:be:d6:38:ec:0c:
c6:59:ac:2f:b7:aa:4b:17:dd:eb:29:86:6e:09:22:
11:f3:f4:b5:b8:a4:c4:6d:f0:6c:3d:1e:b1:3a:39:
79:59:f4:a6:e3:e1:7b:e9:dd:ee:45:c9:98:d9:9b:
a2:9e:32:1f:98:fe:a6:cd:2b:3c:1b:73:03:19:47:
12:13:9f:a6:ab:37:cb:8a:a1:15:bb:82:7c:73:01:
e4:46:32:8b:77:cf:02:5e:71:89:f1:82:5a:31:66:
7a:a6:90:a2:fb:72:41:56:db:e7:00:4b:51:ca:0b:
bc:04:7f:5d:46:6f:29:df:de:e2:8b:31:8b:93:cd:
d1:80:7e:9e:4a:44:00:8a:7c:3d:ff:9b:4f:b6:d1:
fc:88:fb:73:fc:75:02:0b:60:62:d3:b4:05:e8:ea:
ee:fe:99:45:f2:1c:6f:75:28:82:54:25:ad:8e:95:
dc:c0:35:5f:a8:84:c2:c7:05:5d:a9:9f:01:66:66:
32:62:96:81:aa:e3:bc:3d:4f:ad:08:d7:b2:bb:f1:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:A5:E2:D4:AF:1E:4F:5C:97:E7:E8:A1:19:99:4D:86:7E:65:FA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd3bdce8-88a8-4d91-99f2-d522d5ff585c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b5:9f:35:69:1a:20:63:46:c3:64:a5:81:8e:02:6a:6d:7b:
98:66:0f:15:b2:1a:a8:fb:b6:ce:0c:f5:e3:87:85:7d:8c:99:
a7:e7:b5:ff:7a:8a:53:b4:90:36:02:e2:fb:c5:0b:f3:9a:12:
0d:a8:ba:80:c8:44:65:77:00:b3:c4:8a:7f:31:14:9e:c5:32:
b4:0e:71:62:da:0d:c1:d7:c0:14:7a:42:41:57:71:bc:77:1a:
bb:d1:ad:00:ac:ae:7d:23:6e:20:25:66:00:f5:f7:4b:64:23:
50:75:96:09:61:c7:df:67:08:b8:ea:8f:d8:be:be:76:3b:54:
70:ab:aa:8e:e8:d1:6e:ee:60:e9:ae:df:90:29:04:aa:43:7d:
b8:34:84:50:3f:43:74:d3:a8:5a:d1:eb:9b:8d:bb:3d:cb:56:
08:ab:14:2d:56:08:a6:00:df:a9:ea:38:9c:a9:81:b8:e6:ec:
20:6f:8b:89:65:f0:af:1b:24:d7:79:8d:bb:47:0e:6e:db:2a:
0e:ca:d2:2f:26:d8:59:f4:f8:08:d7:d5:3f:e3:c7:80:a8:92:
39:a9:6a:9e:47:85:f4:c6:16:93:71:a7:ca:69:10:e9:32:dd:
aa:67:94:2d:61:60:44:bb:0b:58:f5:54:2f:25:19:6a:09:29:
eb:ad:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:42 2024 by rpki-client on console-fra.rpki-client.org