Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd1ed3d4-b722-4612-998a-815a953754f6.roa
File: cd1ed3d4-b722-4612-998a-815a953754f6.roa (raw, json)
Hash identifier: 5umwAMrPgLP3Xr6CwJPD9AfB1EKPk2AzBKCqER6HbqM=
Subject key identifier: 21:E4:76:E1:F1:CE:47:3B:88:FB:84:70:69:85:7E:A3:41:07:04:D2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E622316AD852193523AB3C3CD23A6B6EBB5943B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd1ed3d4-b722-4612-998a-815a953754f6.roa
Signing time: Sat 28 Oct 2023 00:00:00 +0000
ROA not before: Sat 28 Oct 2023 00:00:00 +0000
ROA not after: Sat 02 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:62:23:16:ad:85:21:93:52:3a:b3:c3:cd:23:a6:b6:eb:b5:94:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2023 GMT
Not After : Dec 2 23:59:59 2023 GMT
Subject: serialNumber=511a1c9d757ffe6ada606b31e9eaba825dfaab4f1386f6e5f45cdffbd7488ab7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:e7:bd:30:eb:1a:53:42:27:a7:09:68:fe:
53:74:5d:d7:16:ce:23:f4:43:d5:97:3f:9a:69:f4:
6b:1f:45:2c:3d:dc:81:28:18:78:41:d4:46:27:8f:
c7:9a:a4:a2:88:83:fd:a3:0b:5b:30:a4:bf:52:86:
ef:fc:c5:c6:39:f7:d3:36:49:e4:2f:97:17:36:2a:
3e:6a:5f:8a:0a:b5:a8:2c:4a:b3:a5:98:ec:41:8f:
9a:2a:e0:b2:11:90:09:a0:10:30:12:b8:16:2d:f5:
73:33:3b:56:c6:8c:39:94:d7:b1:be:3f:7b:b1:4e:
31:e9:15:62:0f:d1:98:e0:79:96:f6:67:0e:d6:0e:
c9:7e:d0:4f:bf:3a:45:76:89:a3:82:c5:55:01:ee:
ab:18:7d:51:51:d9:20:2e:db:61:1e:72:5a:b8:14:
3b:0a:61:f4:09:7b:1d:08:0c:69:dd:9d:84:2b:9a:
a2:84:99:2e:c6:08:f7:15:92:8d:1a:43:74:30:1a:
4d:fc:c4:3d:4c:09:62:fb:78:86:e0:32:4a:22:18:
82:af:7b:e1:7a:8e:89:cf:eb:97:25:18:1a:65:d7:
75:fd:77:86:b6:4a:10:4b:87:7b:be:42:84:60:c1:
d8:e7:b6:ae:fa:a3:df:c4:01:93:ce:9b:19:09:cd:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:76:E1:F1:CE:47:3B:88:FB:84:70:69:85:7E:A3:41:07:04:D2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd1ed3d4-b722-4612-998a-815a953754f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ef:6c:69:8d:0a:4f:b5:9e:ec:11:91:0b:84:0d:71:c6:0f:
dd:76:d9:3c:90:52:88:1b:db:a8:98:76:96:ab:69:b6:be:b6:
86:d3:3d:26:5e:4d:3e:b2:4e:de:fe:e9:23:2d:ff:1a:cc:8b:
ed:4e:5d:dc:b6:7d:8a:c2:25:49:f3:81:3f:7d:bd:ea:7f:08:
54:55:30:84:9e:e8:99:57:ba:5a:1b:68:f5:8b:59:a7:fb:d0:
40:2b:f2:01:97:d2:bf:62:f1:29:3e:a6:97:35:ce:56:73:c2:
c4:e0:18:01:ae:6f:b2:dd:8d:22:51:ef:49:81:33:98:7a:8e:
57:8b:3d:93:4f:98:b8:e0:da:14:77:29:83:3b:17:0d:f6:c0:
b2:b8:20:42:3d:07:37:9a:44:da:88:58:ad:7c:38:f2:77:be:
35:73:d7:72:38:51:f2:b7:36:23:24:fb:8c:7f:49:96:8d:34:
67:d4:74:d1:8c:5b:9c:12:35:31:d1:09:6d:68:76:25:55:ce:
fc:e2:38:13:f0:cb:0d:83:2a:a4:b3:9e:86:f2:55:6f:3b:2e:
c3:6c:2d:c6:89:02:20:8a:8b:6a:21:a0:f7:a7:fb:2e:5d:17:
2b:4c:1b:be:57:1b:bd:93:22:86:73:18:fa:55:b7:3b:2e:48:
3b:d8:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-ams.rpki-client.org