Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cebc52f2-b63f-4ee7-93ac-d4ad13839439.roa
File: cebc52f2-b63f-4ee7-93ac-d4ad13839439.roa (raw, json)
Hash identifier: 1y1yzmefs0pyKc6AMB7hJva6esdlZTaDrqIRacOsYeI=
Subject key identifier: FD:46:BB:9A:AE:E4:1D:FD:C7:A0:80:A3:FC:23:82:C4:56:B3:84:FE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 17B5F01017CB73FE7477E65A13A4BBB28548D5A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cebc52f2-b63f-4ee7-93ac-d4ad13839439.roa
Signing time: Mon 04 Dec 2023 00:00:00 +0000
ROA not before: Mon 04 Dec 2023 00:00:00 +0000
ROA not after: Mon 08 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b5:f0:10:17:cb:73:fe:74:77:e6:5a:13:a4:bb:b2:85:48:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 4 00:00:00 2023 GMT
Not After : Jan 8 23:59:59 2024 GMT
Subject: serialNumber=69a6266b85c4a70fa354a5b0c184a5d9e51467080e33f303fc56c0c7ce3251fd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:a6:33:da:75:5c:51:fb:3f:c8:82:27:1c:
49:12:7f:a6:65:c8:68:70:a2:e2:4f:1c:9c:cb:85:
4b:39:e3:b5:86:da:bd:0c:53:0f:ab:fc:41:00:f7:
7f:77:72:35:8c:da:3d:35:68:3f:1d:7a:8f:22:ee:
99:4e:e2:68:00:cc:20:b4:e9:67:3a:a0:7e:c8:79:
b7:58:4d:d0:e7:e7:ab:35:e9:81:ff:83:21:d4:12:
eb:61:79:21:ec:58:d3:75:14:c9:60:a9:22:85:f3:
61:78:38:ca:6b:d2:64:b2:71:c8:2a:2e:c7:aa:53:
74:8f:52:e7:b1:9a:07:c1:ee:5d:a7:9d:ec:84:40:
e3:97:e0:76:92:23:b4:28:89:1d:77:26:84:34:c0:
07:75:45:98:2c:a9:fb:79:02:10:c0:7b:c1:fd:ad:
e5:e6:f0:87:3a:21:74:31:48:27:a1:77:6d:1d:64:
8b:a7:8e:23:14:20:3b:23:9c:02:57:47:3b:f0:ca:
32:f5:ff:58:c7:99:03:d1:f6:d5:4e:49:40:c5:eb:
2d:a4:ca:41:fc:a6:ea:74:13:b9:ff:ae:69:47:e0:
b9:f3:bf:fb:c7:98:0b:ca:bb:e5:2b:39:fc:60:4d:
0d:f0:05:69:cf:d9:ba:c8:7a:82:43:d0:33:bf:17:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:BB:9A:AE:E4:1D:FD:C7:A0:80:A3:FC:23:82:C4:56:B3:84:FE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cebc52f2-b63f-4ee7-93ac-d4ad13839439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:dc:a0:90:b5:84:8a:5e:76:da:3d:83:be:6b:3c:c6:ee:d4:
2a:f8:41:95:fc:06:e2:35:80:b8:99:ee:fc:fb:8e:7a:22:54:
02:ca:ef:90:d4:f6:0e:b8:3d:d3:8f:34:38:26:e6:cf:33:96:
81:39:f8:c0:5b:44:ed:46:d9:67:9b:cf:71:59:d5:f1:9b:ff:
bc:52:72:95:41:3f:80:a8:89:11:e4:67:df:c0:ca:4c:fe:a3:
9d:38:9b:e9:66:8d:90:20:c7:2c:4e:47:a0:8d:36:01:27:84:
a7:5d:5c:2d:d6:19:d0:8b:ea:01:f8:46:32:58:b7:d4:db:b7:
a2:89:9f:32:60:81:2c:a6:c3:85:b8:e7:30:48:bb:5c:9b:d6:
8c:7e:d5:0d:cc:78:20:04:19:06:e5:84:16:78:d7:60:8d:d3:
b8:dd:e8:08:91:ed:27:da:ac:0c:21:e8:b7:e7:e7:c1:48:8d:
47:65:ec:2c:49:86:0b:e7:e5:0f:ef:ee:f1:29:ab:04:17:5a:
f5:99:a7:09:51:71:50:b0:13:46:e6:18:36:fa:41:6e:b9:d3:
c4:94:7f:8b:d3:2c:b3:48:6b:f2:8a:d5:ea:95:44:31:72:d3:
d3:a0:1f:38:33:5d:dc:11:7c:15:34:1d:ef:78:41:1b:6c:65:
22:d9:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-ams.rpki-client.org