Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5fcb44e-ded7-4e9a-afe5-592996600903.roa
File: d5fcb44e-ded7-4e9a-afe5-592996600903.roa (raw, json)
Hash identifier: aisYfPF/EGso5oABPqumxkLUkilFf878FZl7QGvaa84=
Subject key identifier: 5B:47:6A:EF:12:8E:FD:9E:51:FF:97:0B:9F:5F:A3:51:09:25:E5:69
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3110141345A0F4B8F87D4D25CE29DA507DB08AE6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5fcb44e-ded7-4e9a-afe5-592996600903.roa
Signing time: Wed 06 Dec 2023 00:00:00 +0000
ROA not before: Wed 06 Dec 2023 00:00:00 +0000
ROA not after: Wed 10 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:10:14:13:45:a0:f4:b8:f8:7d:4d:25:ce:29:da:50:7d:b0:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2023 GMT
Not After : Jan 10 23:59:59 2024 GMT
Subject: serialNumber=0867a396e27501566caf696e8e42f9118af4799f714e9f3e976da35cf6079d0b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:c4:4c:29:ea:25:c3:43:70:ff:ea:70:17:
51:a7:37:6d:76:00:e2:d4:13:70:78:e3:cc:a9:43:
c3:d3:60:78:38:27:10:4f:a3:b8:0e:bd:06:1c:47:
c5:13:d6:c2:e0:bb:94:03:ee:e8:a5:1b:78:82:a3:
85:b0:24:57:23:74:5d:2c:d0:b4:3e:1d:0f:44:ef:
81:12:ea:a3:f9:c0:1b:96:2d:b1:d6:c2:71:c1:51:
3c:27:23:be:d5:f9:da:fe:a7:69:ce:43:d7:2c:03:
27:d5:e9:7e:7b:93:77:31:7b:28:78:4a:98:0d:d6:
75:a0:f4:9d:55:1a:d0:bd:d9:40:34:36:a4:93:ff:
81:93:ae:3e:f0:ed:5e:3f:bb:e1:5f:b5:77:8b:a7:
04:46:68:da:0d:9d:ae:02:e0:db:04:cd:bc:78:7e:
08:19:d0:c7:3d:1c:7b:58:36:7b:d9:b8:5c:de:0d:
07:05:8e:b9:31:54:0c:ef:90:07:8b:c3:a9:78:b5:
87:86:d2:b4:4a:86:a4:54:8e:02:eb:f3:9f:b3:2b:
15:df:8b:5c:31:52:5a:d0:8f:8a:3a:96:af:9a:c1:
1c:2b:14:53:ca:fd:3d:34:42:ff:aa:8d:d4:da:be:
a1:3a:b6:ee:f3:ce:1c:0c:84:2a:f7:35:ac:f7:97:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:6A:EF:12:8E:FD:9E:51:FF:97:0B:9F:5F:A3:51:09:25:E5:69
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d5fcb44e-ded7-4e9a-afe5-592996600903.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
22:12:d3:c5:6f:c8:73:4b:90:08:df:46:c2:8d:22:d4:52:97:
66:fb:b9:40:19:3a:dc:3b:b3:72:9d:54:ea:d2:0a:f6:66:1e:
06:65:fc:77:cd:97:cf:36:01:3a:00:36:77:69:59:bb:29:3c:
0a:50:b3:44:c7:5a:f4:1d:c5:c5:f3:67:03:99:e9:7b:f1:c5:
6f:d7:b6:2a:5f:60:d6:e4:2d:85:4b:ea:05:4a:6b:7f:ea:44:
48:3b:3e:cc:28:98:af:08:04:70:5b:51:3d:5e:3a:c6:e4:b9:
0e:4c:f4:b7:2f:59:ca:85:b0:3b:9b:b0:83:f5:be:cd:1d:c6:
4f:56:2d:89:a6:fc:e8:d4:45:31:9d:42:ac:24:82:5b:cb:a5:
19:0d:8c:79:e8:5c:e9:83:f6:79:78:35:31:53:51:3e:f2:fa:
9e:3d:b0:9e:c8:59:a4:42:6f:c1:5d:48:d4:9b:fe:c3:a0:79:
14:c1:52:c3:dc:e9:50:9c:17:7d:93:ec:75:ca:e8:3c:10:b5:
9f:1b:a2:bf:2e:7a:b9:48:95:aa:06:f3:fb:05:a0:a4:68:e8:
b8:dd:8c:81:cb:8a:e3:5b:5d:ea:55:71:f6:0c:68:80:16:a4:
25:18:50:bd:3c:d0:ed:b2:aa:0e:60:ae:95:e2:33:2b:c1:29:
3c:c5:d6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:28 2024 by rpki-client on console-ams.rpki-client.org