Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca525cb0-45b9-408d-8efc-ae811ced6308.roa
File: ca525cb0-45b9-408d-8efc-ae811ced6308.roa (raw, json)
Hash identifier: W3BkLeLRMOp7nJ3JtDQ6CRpbiyCOw04DKAfmw5Cu4u0=
Subject key identifier: 2C:7E:E5:25:9E:3D:8B:D3:88:26:54:E2:99:C2:88:B5:9A:C7:0C:92
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 36FCB115A8BB4D5301E599822D20C1A138E4640A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca525cb0-45b9-408d-8efc-ae811ced6308.roa
Signing time: Wed 01 Nov 2023 00:00:00 +0000
ROA not before: Wed 01 Nov 2023 00:00:00 +0000
ROA not after: Wed 06 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fc:b1:15:a8:bb:4d:53:01:e5:99:82:2d:20:c1:a1:38:e4:64:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 1 00:00:00 2023 GMT
Not After : Dec 6 23:59:59 2023 GMT
Subject: serialNumber=a27c6c04d4fa6b9919cd0cb3b834a9049626f19e6e6639dd708bb18bcb3a122a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:8f:d6:ae:12:f3:f8:d7:ea:8e:f9:27:4b:
9a:a6:6f:9b:08:8a:f0:5e:a6:ac:13:2a:18:a3:1f:
cb:a0:3d:c0:0a:2c:8b:db:66:17:7a:c8:be:8c:63:
30:db:f8:e8:22:97:ef:e3:bb:f0:a3:c9:d4:0b:b3:
f3:ab:88:bf:e5:4f:9a:be:af:8d:7e:12:d5:41:80:
96:c5:38:4a:9e:b2:0e:6c:97:d9:9e:d1:f0:fa:9b:
fc:67:7d:8b:8c:6b:51:52:03:bf:d6:62:38:64:f4:
19:76:f9:b1:35:d9:f5:73:f6:a5:7e:1c:9a:cd:ef:
0d:eb:98:ed:73:93:fa:de:93:20:da:8d:a3:47:89:
f5:4d:da:24:eb:fe:5d:0a:e0:0d:42:f2:0e:4b:99:
b9:50:e6:73:3c:39:7b:f8:e3:91:8e:b2:91:31:fb:
7d:6f:dd:4c:02:40:5e:42:40:cf:d1:0c:b8:e0:19:
00:75:6b:56:13:95:04:b4:fa:6d:f6:ae:b4:35:7b:
4d:8a:f1:71:cb:6a:f9:83:92:80:41:26:66:f7:12:
c2:e3:5e:c4:d3:b2:f6:5c:e1:f6:70:a2:a5:34:ac:
2a:6a:b3:b4:1a:5d:f0:f9:c8:e8:0f:5d:e9:7a:b2:
ea:28:e4:33:73:0f:69:af:18:f4:1b:14:bb:f0:e9:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7E:E5:25:9E:3D:8B:D3:88:26:54:E2:99:C2:88:B5:9A:C7:0C:92
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca525cb0-45b9-408d-8efc-ae811ced6308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2c:f8:69:a4:1a:54:3e:33:56:6e:db:36:40:70:44:3d:6e:
e4:6b:e0:d6:c9:c0:74:d5:7f:75:5e:cd:d0:46:c5:01:c0:44:
86:54:f6:f8:df:63:d5:64:e9:e7:3b:cb:c3:22:bb:78:3c:93:
35:7a:be:40:a7:14:b0:22:f7:36:5c:d9:52:6e:bb:3a:59:12:
d6:3f:c3:bb:03:d7:84:32:41:ba:b3:d7:b9:4b:7b:1e:29:fd:
9e:f4:fe:af:d7:9d:0c:76:ab:81:fc:af:b2:37:f2:70:3b:f6:
f0:6d:4c:70:43:b5:f3:c8:2e:7d:4e:a9:f8:c5:29:0d:bc:e9:
6d:db:ac:7a:3b:a3:25:79:cf:f7:05:e3:13:8c:b4:74:27:16:
02:5e:69:ab:98:12:1f:a0:ad:71:6a:a2:6e:a6:98:f1:f0:d2:
9c:8d:12:97:e7:e2:af:7a:d1:4c:53:9c:b6:9c:8f:72:a2:23:
d2:2e:7f:5c:21:a0:fb:ae:41:0b:59:53:6d:f5:92:59:76:74:
25:75:7b:2a:fc:fe:95:a2:46:c8:49:5a:53:38:e4:7a:c3:69:
55:5b:7e:50:49:1a:a6:a1:99:ec:7f:77:7c:9c:5f:ff:82:73:
32:aa:f0:5d:91:db:c5:b9:62:cb:c0:8d:cd:41:9e:4b:b8:87:
2c:f4:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:44 2024 by rpki-client on console-fra.rpki-client.org