Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c29444c2-d216-4453-acd0-0f94d806e64c.roa
File: c29444c2-d216-4453-acd0-0f94d806e64c.roa (raw, json)
Hash identifier: ybiFHkX1d5lifk7NqflyYHzOD/kO/vEUoY3PqOj7QJE=
Subject key identifier: 3A:0A:88:72:45:C8:7D:02:1F:2B:A8:C8:98:85:64:AD:AE:0E:C5:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 019BA5BA918688F06A3BB58147AAF11FD15BC1D1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c29444c2-d216-4453-acd0-0f94d806e64c.roa
Signing time: Thu 05 Oct 2023 00:00:00 +0000
ROA not before: Thu 05 Oct 2023 00:00:00 +0000
ROA not after: Thu 09 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a5:ba:91:86:88:f0:6a:3b:b5:81:47:aa:f1:1f:d1:5b:c1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2023 GMT
Not After : Nov 9 23:59:59 2023 GMT
Subject: serialNumber=839e48466d623a1b56487187069dfd53be1894a1a9518113b88ae636d9a020fb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:f8:8f:c9:36:d7:7d:b4:92:5b:7b:c5:46:
f6:0e:a0:48:32:c7:31:24:16:a9:ad:89:f8:be:6d:
0d:e8:ca:be:7e:9e:fd:c7:90:bc:a6:06:3c:68:4f:
21:5f:c7:55:b8:60:6b:6c:f6:e9:0a:68:f3:a1:f0:
ff:3c:93:8f:dc:0e:ec:21:a2:38:97:89:49:9f:37:
04:ff:24:57:65:36:07:43:51:9d:21:65:8b:dc:d7:
c1:f1:89:84:9e:4b:3c:39:32:03:ea:ff:c4:fd:d3:
aa:ff:c4:5a:1c:d8:24:8e:fb:77:1c:18:da:b9:0b:
f0:77:e8:df:6e:80:e3:26:ed:86:3f:35:ef:df:68:
ef:a3:34:0a:03:d4:a5:92:38:e0:eb:42:2f:ee:e2:
f4:c0:d6:68:bf:57:3b:c0:a7:49:6f:60:9d:fe:29:
ad:ab:50:cf:9e:e4:0a:8d:ea:27:d3:00:76:77:2b:
6e:15:f4:ac:60:78:94:4a:f5:b6:1a:df:df:73:da:
31:cb:98:03:96:2e:f7:c1:db:db:de:6b:6c:88:35:
d6:d6:53:eb:18:d3:8c:03:78:c9:d1:99:cd:72:8b:
71:fa:4b:15:4f:e6:cc:0d:34:54:ca:69:d9:59:75:
09:b2:07:33:75:8e:41:03:2a:fd:ce:39:fe:54:46:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:88:72:45:C8:7D:02:1F:2B:A8:C8:98:85:64:AD:AE:0E:C5:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c29444c2-d216-4453-acd0-0f94d806e64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:58:bc:cb:b8:e7:3a:f6:05:23:53:e7:0b:ef:b6:0b:3d:1c:
d6:79:98:72:d8:40:18:4b:60:21:28:92:3a:ab:4e:b4:2a:36:
c8:59:3a:14:67:e0:64:eb:3b:bd:91:53:be:2b:c2:99:1a:33:
05:3a:66:33:c7:72:92:74:d8:b7:41:13:55:21:40:96:59:23:
f0:0f:02:77:d7:f1:33:1e:ac:fb:ba:eb:69:e8:0f:ce:90:7e:
2b:6d:0c:22:89:59:17:ed:28:ff:4d:f0:9b:89:ab:a9:9a:3e:
08:60:e4:2e:d8:f3:d3:f7:09:b0:64:06:e6:1d:75:45:69:08:
54:b3:56:c2:ec:87:25:16:a4:6e:e8:c2:fa:b5:30:79:d6:9d:
89:e7:c2:0f:e9:2c:52:96:cf:b9:d3:f1:60:db:74:dd:74:c4:
aa:68:fa:cc:75:b6:bb:05:14:0b:e9:04:8b:dd:d4:7f:5c:f0:
34:69:58:04:ef:c7:7a:bc:b0:5f:fe:d0:79:d3:c1:f8:df:dd:
b7:95:82:56:98:55:02:16:38:f2:27:67:5b:cd:51:c3:53:83:
2f:1c:5f:09:37:9e:41:19:86:46:08:c9:23:db:18:7d:49:b0:
01:39:81:15:01:79:e7:40:69:84:9b:5c:f7:ef:dc:3c:a5:55:
35:09:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-ams.rpki-client.org