Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c8f8e755-f85e-44e4-9bc6-1737510da0d9.roa
File: c8f8e755-f85e-44e4-9bc6-1737510da0d9.roa (raw, json)
Hash identifier: 77zgn3rwza2deQ4APXbCwM96zxw4EDMWie+++gfSWYw=
Subject key identifier: CC:D6:97:06:13:F8:82:07:CA:FC:51:11:3C:6C:31:0E:8A:B0:33:BC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 35C8ADD971C38EE2B8BA08DEAD14D507EF1CE5DD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c8f8e755-f85e-44e4-9bc6-1737510da0d9.roa
Signing time: Tue 05 Sep 2023 00:00:00 +0000
ROA not before: Tue 05 Sep 2023 00:00:00 +0000
ROA not after: Tue 10 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c8:ad:d9:71:c3:8e:e2:b8:ba:08:de:ad:14:d5:07:ef:1c:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 5 00:00:00 2023 GMT
Not After : Oct 10 23:59:59 2023 GMT
Subject: serialNumber=53029653eb5e96ade6dcae91fc394e8188ed449425229b27bb050b053c4cf91d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:8e:2e:9d:8e:8b:1f:fc:0b:f9:0a:a2:ab:
65:fb:57:f4:1c:15:23:8d:65:78:1b:af:a0:98:4a:
ca:ec:1a:31:36:df:a5:ed:7f:c1:07:63:50:af:2c:
8e:56:ef:d1:99:ec:ba:5b:6b:73:6a:ca:b9:d8:a5:
0f:df:02:bf:17:ac:ec:cf:d8:31:e3:2a:fe:ec:87:
66:14:0e:d4:39:25:f8:c9:74:c6:f2:19:a1:f3:4c:
93:34:ae:3e:1f:ac:c1:d2:19:56:6e:e3:bc:ec:17:
d9:57:ea:34:c9:32:c6:46:82:96:29:50:32:72:66:
1f:df:f0:7d:bf:59:8f:ef:d2:b1:b6:e0:51:c6:89:
24:9e:b0:0f:d3:ae:40:8d:08:3f:81:ce:a9:ec:08:
6b:88:61:af:c0:b2:ba:7f:74:1d:23:86:d0:69:51:
a6:0b:66:aa:b5:43:ef:b8:96:4f:b6:c6:2f:40:8d:
5c:38:13:28:76:12:c2:78:09:8f:e1:79:21:f0:00:
2c:e0:ec:81:46:9b:43:28:75:f7:9d:72:f8:1e:44:
3c:02:7b:b3:55:f3:68:fd:9b:38:e0:6f:c3:22:1f:
25:44:3b:01:ef:45:29:ce:2a:c4:f0:a2:f0:c5:73:
52:3b:fd:23:2a:a7:78:25:46:8f:aa:ba:7c:5a:79:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:97:06:13:F8:82:07:CA:FC:51:11:3C:6C:31:0E:8A:B0:33:BC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c8f8e755-f85e-44e4-9bc6-1737510da0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
18:df:8c:75:9e:45:c2:be:61:e3:cb:f3:39:3c:36:72:61:a2:
3b:63:19:85:b4:b5:9c:ad:9a:7b:12:2a:16:5e:d6:69:2a:f7:
2e:1e:9d:f9:ef:06:a8:c2:5d:19:e2:8f:a6:b9:39:c8:6f:4b:
28:5e:5e:80:78:b6:eb:e5:6e:27:be:74:01:a7:45:5e:00:68:
d0:d4:03:27:1c:80:d9:d8:81:17:b3:d6:e3:1d:ed:a1:44:71:
f7:a7:2f:26:ac:a4:bc:e8:d1:78:7f:a1:2f:12:a8:1b:94:34:
3b:9d:1a:3a:9b:3c:9c:66:9c:01:94:d9:e8:0d:26:b3:67:10:
d6:3e:c8:77:ea:7a:e6:9b:10:fc:fa:6c:e2:06:0c:44:7b:c3:
86:41:b8:6a:5d:b1:00:6a:1c:56:3c:a0:29:1d:7d:08:52:94:
27:2c:37:35:8e:2d:32:6d:0a:f8:90:aa:b0:25:a4:ce:70:65:
d6:32:9f:f5:4c:d7:91:b4:97:10:61:14:60:91:c7:ee:6e:d2:
3e:75:10:b4:c4:8f:ca:59:9d:d4:3f:c1:06:50:5c:6e:9b:45:
3d:a7:f8:a0:a0:5d:cc:bf:1e:37:54:fb:8e:14:dc:05:73:63:
18:ab:85:0c:35:45:ca:0e:b9:42:22:16:6c:5c:4f:10:09:b9:
3e:f6:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:44 2024 by rpki-client on console-fra.rpki-client.org