Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd695fd1-a9fe-4089-90d5-5d0d8d62674d.roa
File: bd695fd1-a9fe-4089-90d5-5d0d8d62674d.roa (raw, json)
Hash identifier: noBh+Hs17crDzl/7TdlRMIw/5Tmp+p18ifVSsCintL4=
Subject key identifier: 14:5F:27:BF:29:6E:7C:6C:F8:D3:08:B1:40:1F:EC:31:89:DE:95:49
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3AED58BB22B980BD64999C4F4C60051E05B4A0E1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd695fd1-a9fe-4089-90d5-5d0d8d62674d.roa
Signing time: Sun 09 Jul 2023 00:00:00 +0000
ROA not before: Sun 09 Jul 2023 00:00:00 +0000
ROA not after: Sun 13 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ed:58:bb:22:b9:80:bd:64:99:9c:4f:4c:60:05:1e:05:b4:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 9 00:00:00 2023 GMT
Not After : Aug 13 23:59:59 2023 GMT
Subject: serialNumber=95bedd1591e2b2f95ddfb31282393687cb3609bafb19faf8e7613de3449b0794, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:77:55:36:58:8d:db:3f:0a:19:03:f8:87:
b1:f4:e9:ff:03:db:3a:17:37:c5:ac:7b:9d:73:1f:
da:ea:4b:bf:b3:c7:8c:8e:80:c4:d6:12:01:d4:ce:
ae:87:cd:bb:37:3b:e4:23:02:de:38:f2:b4:f0:cb:
58:88:ee:78:a4:b7:7b:60:75:fc:8d:5e:d4:fc:f0:
18:ee:95:1d:64:4d:ff:ff:59:22:2c:91:ca:1e:9c:
0e:e6:77:39:00:2c:f3:a9:28:27:0d:a4:3b:e2:83:
70:31:91:1e:e0:87:0d:9e:7f:e2:7c:fa:6d:e4:ce:
d4:48:3b:2d:06:e9:a3:3e:ee:ad:47:66:50:5e:8c:
27:7f:74:67:64:16:41:d8:68:a1:2a:ce:4c:a4:ad:
e5:bc:dd:34:6d:76:e8:36:5e:95:f0:a5:17:bf:e7:
0b:e8:1b:54:26:3e:fa:e7:b3:e0:cc:9e:7e:30:47:
ba:5f:59:60:4b:82:bd:61:3c:bc:47:b4:2c:ef:ac:
77:83:91:01:cc:af:b4:8b:1e:10:96:d5:cb:ea:78:
cd:7d:a9:d1:c9:24:c0:56:38:5e:10:2e:51:1f:55:
21:59:40:eb:2b:26:4e:06:f0:4a:f3:14:0c:d1:3b:
d3:65:00:fc:2b:0e:8f:2e:5e:eb:5b:8a:6d:26:b2:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:27:BF:29:6E:7C:6C:F8:D3:08:B1:40:1F:EC:31:89:DE:95:49
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bd695fd1-a9fe-4089-90d5-5d0d8d62674d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
15:73:a1:2a:6b:da:42:3d:84:c1:a3:24:7f:b5:51:7f:13:f3:
7b:e2:38:ed:74:86:59:73:d6:ec:35:e6:c8:5a:9b:e0:a6:8c:
94:38:63:57:ae:6c:b8:49:74:fe:a3:ab:23:bc:c1:58:c3:b4:
65:37:e0:d2:7a:da:f1:53:a7:51:dd:ce:59:f4:93:f0:6e:6f:
d2:27:cc:6b:d8:d6:c1:5a:4b:73:31:94:b9:52:73:26:00:e6:
9c:87:f5:1e:30:a9:3c:82:0d:b0:fe:7d:04:a8:1c:60:fa:e7:
6e:d5:13:a7:8f:bb:5a:e2:76:9e:ab:08:48:4a:58:5d:48:cf:
24:b1:d0:c0:6e:71:d4:b9:6b:c5:41:e6:6c:70:cb:0d:b9:68:
37:60:4b:c1:ea:b1:b0:a2:33:d1:20:66:5e:fb:f1:59:2e:fd:
30:53:44:66:83:1f:1b:3d:f6:91:e8:e2:41:96:77:5e:ed:dc:
5f:3c:65:41:4e:56:bb:2a:04:bc:af:22:e4:c7:66:82:bd:6c:
e4:02:45:e0:d4:fa:69:a3:6e:db:03:c6:20:d5:df:7f:a0:11:
59:cc:05:0e:a1:aa:5e:ac:ad:56:68:c6:63:c3:ec:39:06:58:
57:cf:14:32:40:0d:a4:33:c6:73:1b:a3:1d:75:3e:0d:7f:97:
86:f8:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:42 2024 by rpki-client on console-fra.rpki-client.org