Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0e6a615-936a-40af-8ff0-14c1d0cf61f0.roa
File: d0e6a615-936a-40af-8ff0-14c1d0cf61f0.roa (raw, json)
Hash identifier: LlWW9cPYoGg/9s5Hbn7wGroKkoi1STbKnp1yVKF8ttQ=
Subject key identifier: 5A:C5:CF:AB:81:35:CE:7F:72:4D:98:F6:5D:59:6F:50:57:3E:FE:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 08BFB4380CF6DD6001C9CAE5B99D695ABD7A062C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0e6a615-936a-40af-8ff0-14c1d0cf61f0.roa
Signing time: Mon 31 Jul 2023 00:00:00 +0000
ROA not before: Mon 31 Jul 2023 00:00:00 +0000
ROA not after: Mon 04 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bf:b4:38:0c:f6:dd:60:01:c9:ca:e5:b9:9d:69:5a:bd:7a:06:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Sep 4 23:59:59 2023 GMT
Subject: serialNumber=1861692e7a75a5201d6844f58e7b1a2eaec798df4563364f1b322e7c97fd17f0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:04:fe:0a:c8:b2:c8:e9:c7:37:5b:0a:87:
99:08:59:85:3c:52:84:0e:43:3e:41:13:e2:9b:9b:
f8:cd:ef:53:fe:b9:c9:c4:51:6b:20:eb:20:70:b4:
68:7f:a5:54:e3:cb:1c:ff:4f:57:86:71:0c:6e:2c:
6f:cb:fa:e5:7b:7c:50:18:d2:5c:e4:c6:d2:e4:a6:
08:80:30:38:92:c2:cc:8a:9d:ae:49:78:42:be:e9:
9d:a2:aa:b9:02:2c:3f:d9:15:66:e0:c1:fa:e2:73:
05:db:5b:88:c3:52:a9:e3:7b:df:0b:5a:51:63:11:
de:a2:e9:8a:b6:af:66:f4:ab:3b:a8:d4:d3:76:25:
46:76:df:db:ab:04:d7:15:0c:8f:64:7e:c5:cf:bb:
64:42:50:70:ab:03:3a:6a:bc:61:86:6a:3b:a4:73:
a6:10:f8:4e:f9:6f:79:fa:38:65:73:67:ae:c7:0d:
54:2f:4d:7f:c2:34:bc:1d:d7:74:47:4a:43:31:03:
6a:fe:ee:0e:2b:8a:91:cd:d4:00:48:c3:19:fc:4c:
0b:fc:73:dd:1f:f4:75:d4:db:03:5b:f2:42:43:85:
07:1b:34:05:d4:95:3f:36:44:06:51:d4:9d:3c:28:
72:e4:2e:07:f3:55:64:b5:7a:2d:ff:a0:ce:b1:58:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:CF:AB:81:35:CE:7F:72:4D:98:F6:5D:59:6F:50:57:3E:FE:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d0e6a615-936a-40af-8ff0-14c1d0cf61f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:27:c0:db:e4:97:be:c0:38:a2:4a:be:dd:3e:e6:64:f0:49:
a8:a8:57:f4:34:b3:3b:63:3d:3e:48:6f:10:87:b4:87:a0:31:
9b:f6:f1:f6:8d:03:c0:80:8f:89:e8:71:dc:71:36:3c:84:01:
82:15:6e:4b:91:ce:a0:3b:95:53:9e:31:9d:99:7b:0f:ad:87:
5a:06:12:8a:77:37:05:5d:96:8d:9c:19:8c:9d:fd:87:ed:34:
a5:6e:25:18:a7:b0:55:ee:4d:79:4a:30:80:13:c3:c7:44:98:
bb:33:52:13:7e:44:e7:9a:86:76:0e:ee:6d:10:7b:bc:a6:b5:
c6:b1:9a:93:05:38:8c:9e:ea:57:fe:a6:ad:fd:bd:2c:0b:ca:
95:5f:a2:1f:d0:e3:0f:68:0a:3e:ad:a0:b3:ba:52:91:35:23:
64:6a:7f:64:d5:c8:d6:64:48:58:5e:78:a7:e2:10:46:ba:b7:
ff:3b:66:4e:d2:c7:6f:33:d0:db:8a:eb:8d:07:bd:9f:73:5e:
dc:42:be:45:ec:ea:ab:db:75:56:b6:c2:92:e5:c7:71:b8:71:
73:98:b3:0c:61:19:be:fd:c4:c6:0c:aa:75:e1:9a:39:b3:b4:
c9:42:c9:90:08:62:7c:4f:67:50:29:f6:95:09:90:a2:f3:4f:
c2:dc:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-ams.rpki-client.org