Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c81e367b-b695-4e8b-8487-5554cfdec1e7.roa
File: c81e367b-b695-4e8b-8487-5554cfdec1e7.roa (raw, json)
Hash identifier: SeHYNEIPk7IlpOqej8Mwc0Q261BWjgZUCxsZLHl9+tw=
Subject key identifier: 4F:5B:72:67:01:1B:DB:A3:53:0A:BC:0C:A5:B7:22:74:FA:AB:6C:8A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5076FD4BC1E036CEF30727EE05603894CA9893BA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c81e367b-b695-4e8b-8487-5554cfdec1e7.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:76:fd:4b:c1:e0:36:ce:f3:07:27:ee:05:60:38:94:ca:98:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=c90aec872da8810e50b5fc49555e2d21a3555d47e6e0dac94dd9e4e51042a2c7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:fd:0f:f9:28:bf:5c:6c:c4:84:16:bc:77:
14:2b:ac:c6:8c:17:68:ee:ab:95:9f:f4:a8:b5:7f:
ab:99:24:38:6e:5f:f8:70:5a:16:3a:60:b4:5a:d3:
49:5d:b5:9b:55:a9:94:b8:56:ca:58:e0:8f:76:95:
64:cb:17:01:ad:83:72:cd:61:2a:22:e1:42:67:70:
ae:80:a4:ed:6e:70:ff:2c:4e:ec:12:29:51:8a:19:
25:76:d2:51:66:18:cc:8b:37:83:a2:55:48:7a:ce:
ee:b0:79:48:07:2c:53:24:e6:34:80:d1:4a:cc:14:
f9:0a:bf:f7:73:00:0d:da:aa:de:8d:53:ea:88:b7:
73:fc:aa:88:c4:9e:39:9b:d0:63:96:6c:49:b3:c9:
44:3d:9c:ef:ed:5f:a3:d3:a6:78:0d:4d:27:23:1a:
fb:59:f0:4b:15:93:e9:c5:c0:2f:d9:3e:16:25:be:
73:7e:78:42:e7:8c:ba:4c:84:ea:ed:87:f9:00:99:
cc:56:9c:20:a7:77:09:76:33:8a:a0:e6:fc:3f:44:
22:7e:b4:d6:f7:05:43:eb:96:e7:b0:a8:cc:22:6b:
a5:d3:24:7b:45:89:2b:26:e9:22:43:63:4e:35:27:
a1:72:c9:bd:ab:72:af:ba:67:8f:37:cd:cf:06:c1:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:72:67:01:1B:DB:A3:53:0A:BC:0C:A5:B7:22:74:FA:AB:6C:8A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c81e367b-b695-4e8b-8487-5554cfdec1e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6b:61:bc:12:21:1d:56:e7:e5:ab:77:71:f2:7e:30:14:99:
39:36:8f:82:53:aa:bc:ba:1d:e5:22:7a:21:8f:4f:86:f1:be:
1d:d7:02:0f:c2:62:b3:55:65:35:41:6c:99:63:d6:44:9b:67:
5e:6f:d1:39:40:f3:64:07:77:8a:a6:a2:fa:2a:69:25:6f:6b:
5b:c3:9e:cf:5a:cc:ce:67:e0:60:75:c4:9a:2a:53:24:61:66:
b2:ae:31:b8:c6:a0:6b:fc:9e:2a:b4:81:12:6b:79:39:49:e3:
f3:81:b5:4c:29:c4:14:77:b7:74:ed:21:38:ad:ea:5f:f9:57:
0a:47:3f:52:ca:ec:c7:f4:0d:84:12:f8:25:63:77:be:5b:26:
cd:80:45:10:4f:29:ac:4e:6a:3e:88:40:3d:2c:8c:74:d1:e5:
35:d8:46:b1:19:cc:14:56:bb:ca:a1:97:3e:cf:d9:ce:82:4f:
6c:72:1d:6e:f5:fa:e5:36:3f:55:a9:8f:60:75:e0:b7:ec:26:
26:c8:26:a7:f3:af:99:24:e5:64:7c:f6:c1:fb:82:ba:c0:56:
57:ca:f5:d7:ee:0e:17:0f:4f:97:cd:f2:ab:f8:cc:f2:38:bb:
f3:75:a5:bb:fc:b4:ae:30:3e:60:4e:81:02:94:64:a3:4b:81:
20:0c:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:19 2024 by rpki-client on console-ams.rpki-client.org