Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0e5860c-f393-4f0b-83ae-eb7d296fcbfe.roa
File: c0e5860c-f393-4f0b-83ae-eb7d296fcbfe.roa (raw, json)
Hash identifier: zNXJHZINnSMEsfJrjdWpe9WJbBRUNLjwJ9spEZTcxKA=
Subject key identifier: E4:6B:A4:71:CE:1C:A0:EA:11:CE:3C:56:D1:61:11:44:E2:23:FE:23
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 63F2979593EE2971E92BC9FE00F0F8EA59A4F432
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0e5860c-f393-4f0b-83ae-eb7d296fcbfe.roa
Signing time: Wed 01 May 2024 00:00:00 +0000
ROA not before: Wed 01 May 2024 00:00:00 +0000
ROA not after: Wed 05 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f2:97:95:93:ee:29:71:e9:2b:c9:fe:00:f0:f8:ea:59:a4:f4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 1 00:00:00 2024 GMT
Not After : Jun 5 23:59:59 2024 GMT
Subject: serialNumber=f815b3963a3b4d8b8e8a1c75238292409be9db3733b0f05e42e1b6ea9277b59d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:8c:fe:8c:91:24:7a:35:83:2d:ae:b9:97:
9f:0d:2f:7a:f0:32:ea:cd:bf:61:c5:1e:04:61:f9:
83:61:02:4b:2b:ca:41:58:11:4b:08:bf:93:73:9b:
cc:21:de:54:f4:dc:08:b2:6f:f8:28:07:75:26:d7:
ad:32:e9:80:36:3f:69:b5:7b:5e:6a:41:b6:46:a9:
15:05:1b:d8:6e:4f:fd:9d:e2:9b:de:9a:1f:5e:f6:
15:b7:81:e6:81:78:3c:4d:30:af:19:f4:9b:91:ac:
64:f0:00:b5:ec:12:cc:3c:dc:6a:57:60:6f:05:d1:
3d:1d:1c:7a:a7:8e:15:ec:c4:d4:d4:15:f8:55:f0:
94:48:17:8e:3b:9d:a2:0a:bc:3c:d4:dd:41:22:c5:
96:27:f4:74:09:0b:9a:1a:b6:5b:b3:60:03:3d:75:
06:86:0a:0a:07:55:27:85:31:63:94:ab:22:77:37:
cc:0c:90:49:21:0d:cb:e2:b1:e4:67:06:3b:40:c0:
fb:01:02:c4:4c:d4:51:0d:38:d4:21:9c:e4:71:9c:
dd:1b:5e:3f:e8:c5:7f:bf:da:a8:b6:e8:70:0a:29:
ff:c1:73:1d:34:b7:ee:e3:7b:68:fc:15:3c:69:65:
c8:17:01:ed:6f:04:29:ec:b9:a5:84:d8:e3:5b:96:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:A4:71:CE:1C:A0:EA:11:CE:3C:56:D1:61:11:44:E2:23:FE:23
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c0e5860c-f393-4f0b-83ae-eb7d296fcbfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5e:40:60:1b:a9:d3:a5:8c:69:31:7f:70:6b:1f:49:c2:40:
2c:6b:b9:1c:fe:f9:ee:f8:a5:69:b5:02:16:c7:65:97:2d:19:
8d:db:54:13:c0:a7:14:27:59:08:4a:85:98:10:f9:fe:20:ac:
2e:d1:df:33:3b:51:a2:dc:25:af:b6:ba:49:83:b6:05:25:7a:
3c:9f:28:69:5d:29:59:42:36:d5:31:a8:db:06:9f:63:34:2d:
73:cb:5d:d0:54:b2:5e:e9:7d:26:08:fd:e5:e7:23:37:dc:08:
e3:4c:43:a7:51:55:6b:6c:75:f3:c5:6f:dc:8a:7c:7c:3a:93:
8b:f3:61:1b:57:f1:81:eb:66:4b:3d:4e:9e:b9:82:8d:e2:5c:
32:fe:c6:df:19:bb:9f:c3:d7:b9:f7:92:e5:65:f2:a6:7e:ba:
08:65:f3:11:77:06:41:24:32:a1:1b:e0:f9:15:c6:e4:7b:b4:
79:58:9e:66:31:cb:ef:6b:37:89:aa:ee:37:c0:e9:25:bb:d6:
ca:a3:90:e6:a8:3f:c2:22:5e:8e:88:30:21:c5:42:52:94:f3:
f5:a9:47:67:07:1e:62:a8:0f:45:b8:73:03:70:5c:4f:90:43:
4e:2a:d3:0c:36:93:01:a9:15:e7:b4:ed:55:c4:ce:d3:8c:25:
f8:f9:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-ams.rpki-client.org