Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c4626204-b96e-47d4-908b-2e2e3527b2dd.roa
File: c4626204-b96e-47d4-908b-2e2e3527b2dd.roa (raw, json)
Hash identifier: RAIAqD+9iu1ObxUkGvx4D/I9qTohbW/jYK7pBqvhOR4=
Subject key identifier: 4A:AD:A0:51:63:79:23:59:3E:AE:DF:00:CC:A0:3C:6C:4A:C9:B9:AD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 28EFED3DA842BF2F3B24EFA9ECDF3A97E028F75B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c4626204-b96e-47d4-908b-2e2e3527b2dd.roa
Signing time: Sun 31 Dec 2023 00:00:00 +0000
ROA not before: Sun 31 Dec 2023 00:00:00 +0000
ROA not after: Sun 04 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ef:ed:3d:a8:42:bf:2f:3b:24:ef:a9:ec:df:3a:97:e0:28:f7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 31 00:00:00 2023 GMT
Not After : Feb 4 23:59:59 2024 GMT
Subject: serialNumber=5f51255e1a84dd3409ca794ef4ae070ae71b9ea59f00b5f47c209872c550ae8d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:40:a3:23:f2:b0:f6:79:3c:d1:3d:b2:d1:
32:97:2f:79:98:3a:16:62:00:76:44:ae:1a:4d:6e:
97:2a:50:7a:3e:b6:4b:89:6d:58:f9:95:60:e3:8a:
e8:b1:70:aa:4c:fe:fc:06:a4:0e:6e:ba:63:f2:c3:
43:ed:69:56:f9:80:10:12:a7:39:53:f5:f1:73:75:
f8:a2:22:be:c8:8a:23:c8:b4:8b:51:c8:f1:86:ef:
c9:72:cb:32:8a:b0:d9:93:17:de:19:06:77:74:b4:
55:e7:31:27:2f:3a:0e:e1:65:fe:d7:85:a7:a7:03:
2c:f3:55:f3:3a:bb:90:0a:5f:d5:dd:5b:5f:bd:b4:
fc:4c:4a:b5:4b:a5:0b:d7:98:20:81:67:0e:6d:2e:
15:03:49:ca:d9:d1:cb:9e:86:f8:29:bd:6d:6b:24:
92:c2:18:5d:22:b0:a0:8b:b5:00:0f:e1:c7:31:8e:
a9:b3:1c:44:62:b4:15:4b:f2:12:2b:e2:08:7b:c8:
bd:9d:33:28:1f:2d:35:60:ed:3f:2c:cb:2f:b0:49:
08:d5:db:fa:c7:77:3d:c5:ff:4b:44:7f:b3:0a:fc:
2d:61:46:f7:2d:81:7e:33:65:34:6e:8c:37:87:bf:
39:ac:31:93:99:d0:17:51:79:13:a7:b7:0c:8d:d6:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:A0:51:63:79:23:59:3E:AE:DF:00:CC:A0:3C:6C:4A:C9:B9:AD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c4626204-b96e-47d4-908b-2e2e3527b2dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:97:93:4d:2c:ba:c2:6d:f4:e8:4e:32:f1:3c:77:ab:e3:05:
e1:55:e7:46:49:46:81:cf:f3:2e:31:18:37:b9:cd:70:50:ed:
e9:28:c3:ab:44:c8:10:a0:d4:c7:34:5f:c9:88:17:6b:15:5a:
35:37:5c:a7:8b:9e:e6:04:5c:7d:c1:4c:2c:58:cb:09:73:22:
e4:1c:d8:4d:71:95:9d:09:b2:5f:b5:4f:c8:ee:04:32:84:41:
c8:36:b9:a5:10:d2:05:0c:1b:d6:11:9b:54:e9:f8:b1:0c:84:
e5:d2:29:a0:e3:2e:92:39:66:8f:d8:5c:56:bd:03:c7:b9:bb:
fd:06:2a:ee:c3:c1:88:c4:54:dd:1d:9b:0d:2a:cc:34:6a:e9:
aa:c8:cb:45:aa:70:f9:e6:f5:c8:50:fc:6a:e7:e1:b7:ea:ac:
c1:d8:07:b6:b9:36:03:97:09:84:b8:d5:98:42:51:9e:44:c4:
99:d9:1f:75:d5:71:73:7d:3a:81:2b:d4:a4:37:c8:ee:7b:a5:
24:a2:94:01:fc:56:bd:16:9b:95:43:96:8f:7f:a3:4f:12:a0:
47:4a:dd:f8:d8:2a:d5:8d:9c:76:4a:4b:95:c2:a5:5b:7c:72:
da:dd:4f:06:51:d3:4a:ca:fa:42:38:04:b3:5a:89:be:62:d0:
18:2d:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:43 2024 by rpki-client on console-fra.rpki-client.org