Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca7377ed-f87d-451d-98fe-2ecf0a8879da.roa
File: ca7377ed-f87d-451d-98fe-2ecf0a8879da.roa (raw, json)
Hash identifier: ljUjb01hvuTuAtvCJSpqUyrJGeTqEhgH+HjXSGiBc/0=
Subject key identifier: B1:80:A1:A0:86:39:41:3E:E5:FC:FF:CD:28:CE:06:29:BE:66:B8:C4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5915FBD8E0627645359D4ACCEA4CBA386C8B9FB2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca7377ed-f87d-451d-98fe-2ecf0a8879da.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:15:fb:d8:e0:62:76:45:35:9d:4a:cc:ea:4c:ba:38:6c:8b:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=5894fac86334bc7846e5b152f911b29bb74d5155cfb49e6d4061acd4c74a9b45, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:db:84:11:c8:4e:42:6d:71:9f:18:c1:27:
15:d0:d7:33:c2:9b:32:d5:77:e1:09:8e:03:7e:2b:
85:be:13:25:a2:89:fe:25:b2:bc:ec:33:9b:e3:df:
9a:da:be:0e:a8:66:58:a0:aa:9c:25:17:16:1f:27:
32:a3:02:a1:55:16:9d:92:b3:75:42:ab:2b:bf:f6:
64:5e:99:56:db:0c:2d:49:ad:be:8f:15:8a:38:5e:
50:04:4f:74:00:df:ec:5b:a1:a1:30:61:dd:0e:6c:
7b:e7:1e:49:c9:f9:ae:d4:8e:69:ec:1d:9f:2a:98:
2a:34:a6:b8:1a:ff:49:75:06:3b:0b:98:4d:84:1a:
59:d2:08:79:df:a2:43:3b:23:85:7b:a9:b9:31:dd:
7e:5b:c9:9a:4c:92:28:5e:27:89:77:2b:f1:c1:b0:
22:7b:be:d3:89:95:48:15:09:16:de:5d:31:c1:53:
f9:c0:cb:52:a6:b4:2c:0f:31:a5:63:88:1b:f5:06:
aa:a1:65:fa:8e:ff:ee:57:42:81:be:49:a6:ab:a3:
39:2c:f0:fc:72:b7:d8:39:e6:4c:16:17:6b:c1:3e:
57:3d:de:31:3f:6b:db:60:94:4a:98:46:21:ca:aa:
99:d0:4a:3b:b1:cb:cb:d6:53:9c:99:c5:69:26:7c:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:A1:A0:86:39:41:3E:E5:FC:FF:CD:28:CE:06:29:BE:66:B8:C4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ca7377ed-f87d-451d-98fe-2ecf0a8879da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a3:09:c0:75:2c:09:25:86:80:b1:e7:65:a1:b0:e8:0e:6b:
56:b0:30:2b:c9:59:bf:5c:af:93:01:28:95:4a:4a:72:a7:ea:
c8:61:39:81:cd:6e:0d:4f:25:47:0f:03:fe:7a:cc:66:f1:a4:
27:9d:be:eb:b1:cc:a4:fd:4f:40:a6:3c:a8:d9:f1:ec:d6:eb:
85:a8:41:c4:a5:8b:1c:f7:c1:eb:64:b5:fe:f7:d8:0a:a4:bb:
6a:00:7d:fd:31:6e:62:de:93:d9:6c:8e:00:b2:d9:2e:c4:2a:
e6:a5:ca:2a:e2:ed:6d:3a:9a:d5:f7:64:87:b1:16:eb:08:a9:
25:24:d8:f4:0e:88:19:96:eb:5b:ec:15:7f:47:da:14:72:e1:
df:0c:ee:ed:6a:f2:40:c4:cf:22:b3:49:92:db:95:cd:05:18:
e4:e6:30:08:be:21:4f:a9:31:b7:fe:3a:16:9e:9b:53:e4:7e:
80:a6:e8:e5:88:0d:4c:38:e9:78:06:bc:b9:59:c8:6e:85:d6:
4c:ad:ed:19:74:ef:7c:56:50:2f:b8:df:3b:92:58:14:f1:e2:
f8:31:75:34:2d:c3:ff:29:b9:2f:28:14:14:36:f6:95:0b:0f:
57:8c:34:81:79:f1:47:f2:16:f2:e1:0e:21:dd:b0:92:bb:c4:
7a:2c:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-ams.rpki-client.org