Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5ad5a53-b21c-479e-ab21-f3d482be861d.roa
File: d5ad5a53-b21c-479e-ab21-f3d482be861d.roa (raw, json)
Hash identifier: q2pLwW9GJPyyxd0KAh87g/J25NB+7z8DUT+ajRG0dC0=
Subject key identifier: 9F:FC:AB:75:21:D4:B4:B4:69:1A:7E:B4:26:11:C4:46:FD:D8:05:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B26F8806C075CD4FD9989A247FC204F35813E12
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5ad5a53-b21c-479e-ab21-f3d482be861d.roa
Signing time: Sun 07 Apr 2024 00:00:00 +0000
ROA not before: Sun 07 Apr 2024 00:00:00 +0000
ROA not after: Sun 12 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:26:f8:80:6c:07:5c:d4:fd:99:89:a2:47:fc:20:4f:35:81:3e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 7 00:00:00 2024 GMT
Not After : May 12 23:59:59 2024 GMT
Subject: serialNumber=e05490856fa13a4f889e8de5211b5aa2dc025ad0178b018f0e107a3f8e0ae7ad, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:45:dd:b4:a1:75:7e:69:52:9c:81:74:08:
5b:34:18:19:5d:52:02:54:cf:bf:68:5a:f1:af:6c:
57:47:56:04:c6:54:06:86:bb:dc:44:48:d5:80:de:
75:7e:9f:a3:75:bc:e3:4a:fe:e7:65:a5:9c:ac:7e:
77:52:5b:0d:99:8f:2e:5c:14:c4:54:28:9f:99:f4:
ff:69:fd:9a:ed:2e:45:00:a6:7a:9e:09:ac:dd:51:
79:1d:4a:e4:d8:90:64:91:0b:05:c1:33:28:aa:7b:
f7:57:68:7a:20:78:94:c7:15:17:2c:7d:dd:b9:11:
b9:2c:21:67:78:68:da:63:6d:25:01:81:2c:8b:79:
92:c3:8e:a8:ef:0b:24:96:4e:8a:0a:65:7b:2a:63:
51:a8:10:9a:45:66:2c:58:a7:ad:7d:f9:4b:f6:2c:
78:90:5b:e4:10:f5:a7:ba:7c:1c:5f:b8:4f:0a:86:
ec:88:9a:31:64:ae:b2:ff:92:af:99:df:64:d9:b1:
58:c7:2b:d8:9a:1e:30:2f:e6:fa:14:a0:73:17:99:
c6:7b:c3:17:22:9a:51:a4:b3:a6:89:8a:ae:85:df:
ac:06:a8:e4:0d:c4:5d:7a:db:da:ed:c4:dd:92:6f:
b6:3b:4e:d2:09:35:d6:d4:c0:36:cc:8c:ee:c4:f7:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:AB:75:21:D4:B4:B4:69:1A:7E:B4:26:11:C4:46:FD:D8:05:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5ad5a53-b21c-479e-ab21-f3d482be861d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:71:56:86:56:3a:2b:6f:36:2b:8f:c5:cb:11:d6:6d:e3:
56:4e:ab:95:d7:3a:f5:3b:73:13:82:eb:80:d2:44:79:b1:d6:
67:8e:ff:4e:d2:67:af:d2:3b:44:c2:54:db:13:05:97:78:73:
be:16:bd:ab:d7:4a:7f:9b:ad:f5:0c:2e:a5:10:5b:5a:ff:80:
90:99:ce:61:47:32:55:90:8c:2f:95:33:6b:a8:c2:d4:48:e1:
95:0d:df:08:4b:19:bd:20:18:c6:1d:fa:d0:4e:46:35:b4:f9:
ea:10:7a:76:5f:ec:69:52:50:73:d5:cd:32:e1:fa:75:ee:74:
21:2e:97:dc:b3:82:6a:e7:05:80:09:a1:5d:4c:65:a4:af:da:
73:34:42:35:8f:cb:31:a1:8f:52:05:ad:b1:9c:87:85:fc:a4:
12:ec:69:3c:10:45:4f:1b:4f:9b:da:01:d4:cc:04:0e:b4:fc:
18:6a:f3:f8:12:e2:95:45:06:5f:44:e2:f7:51:e1:93:b9:f9:
d3:15:63:14:23:97:81:a3:2c:8c:77:14:d2:bf:fc:c5:5b:3d:
fe:37:51:a2:8d:83:7e:80:15:58:9b:c7:01:8a:0a:b9:4f:dd:
67:8b:4e:e9:47:ec:b1:3f:30:fb:b1:84:07:07:d9:89:8f:97:
76:5e:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:28 2024 by rpki-client on console-ams.rpki-client.org