Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d76cf0c7-8dde-461f-920c-10d2c1f2a6a1.roa
File: d76cf0c7-8dde-461f-920c-10d2c1f2a6a1.roa (raw, json)
Hash identifier: YBlMTtGnZAtE91cNCtsDSct4ByVbVTd3WyQCIjBEP54=
Subject key identifier: 71:CC:6C:38:04:0C:25:E4:C0:2D:A9:79:94:B9:7D:12:4D:3E:99:B4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6085A51C8ECCF35F9EC1C954B41DBAA69450FF72
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d76cf0c7-8dde-461f-920c-10d2c1f2a6a1.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:85:a5:1c:8e:cc:f3:5f:9e:c1:c9:54:b4:1d:ba:a6:94:50:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=077ac90f4d109c5ebc61a4cb1f5d089332f270e3badfdbdacfe5921fe05a7e4a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:e4:12:cd:0e:e0:2c:47:07:cc:11:35:a1:
cc:57:0a:d5:30:e8:e6:bd:41:7f:2a:82:db:3d:0d:
b1:df:1c:14:ee:ae:44:e3:ed:46:aa:d4:80:cf:79:
d8:be:ed:05:39:d0:41:28:2c:f1:0b:be:f6:56:72:
33:e4:c7:05:65:fe:58:b7:5d:ae:f0:85:d6:62:d7:
55:93:4c:f8:9a:83:ae:60:f7:7b:b2:9f:68:4e:59:
0e:e4:59:68:57:eb:76:77:e0:7f:8a:18:21:3a:5b:
0e:04:57:e6:43:d5:08:56:ce:11:b0:04:3e:76:4b:
cf:ca:1a:5a:00:1e:67:fd:45:30:a7:b5:a9:07:11:
e5:6c:56:60:a1:72:79:7e:3a:f5:00:73:b0:f9:c7:
3b:8f:27:b4:d6:f4:e1:c5:3d:65:78:73:1f:03:24:
47:c6:4a:cc:81:d4:97:cc:7c:3c:64:b5:89:99:36:
24:5c:3f:00:ef:af:4a:44:ce:d7:a8:95:65:d2:42:
d4:4a:92:3d:50:df:b5:97:89:52:a8:c2:ff:fe:ea:
46:3c:5d:2d:97:f2:c8:15:73:65:7b:5c:d6:ef:5f:
2f:38:cb:58:55:97:4f:bb:9a:f7:cc:a2:3f:59:33:
d2:1a:65:14:19:51:c9:ae:ef:aa:23:a5:9d:fa:af:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:6C:38:04:0C:25:E4:C0:2D:A9:79:94:B9:7D:12:4D:3E:99:B4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d76cf0c7-8dde-461f-920c-10d2c1f2a6a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6f:41:3a:06:b0:46:e0:d8:44:f7:79:bb:1d:2a:18:19:37:
2c:ea:2b:b0:d3:8b:ce:67:4d:d8:c6:4c:bf:a7:1a:4f:c4:b1:
a0:58:1b:72:a5:78:64:28:e4:7e:7d:85:f5:33:b8:dc:15:96:
c8:22:9d:5d:10:55:4a:e0:70:5b:d3:69:1b:f7:24:dd:1a:ab:
c8:de:fb:5c:30:d1:ea:0e:11:f8:31:17:d8:c9:1f:87:9f:73:
a6:40:37:14:71:d5:27:e9:64:0b:d0:03:f4:63:26:cc:fd:57:
c6:cc:d4:c5:ef:a1:96:6b:f9:f4:2e:b8:5f:a3:99:4d:6e:eb:
89:19:41:d3:63:14:44:97:46:1c:01:ba:2a:6d:6c:08:6d:28:
a0:35:97:a7:1c:e6:96:a7:be:ec:6f:40:3e:c1:50:65:a0:db:
71:b9:c2:17:23:e1:e9:d1:d1:13:28:7b:d2:f9:49:60:ba:4f:
e8:4c:b1:4d:cc:71:30:b0:00:cd:ce:15:14:90:3c:e4:20:6a:
68:43:fb:d4:eb:78:57:33:f2:3d:57:69:a6:02:83:62:8e:4c:
69:ae:3c:55:27:c6:a3:6e:26:78:1e:b2:c6:2d:a5:22:79:64:
3c:27:34:f0:69:77:24:bb:15:aa:67:ca:f8:fa:99:d6:c1:6d:
be:fa:c8:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYIWlHI7M81+ewclUtB26ppRQ/3IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwODMxMDAwMDAwWhcNMjMxMDA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNzdhYzkwZjRkMTA5YzVlYmM2MWE0Y2IxZjVkMDg5MzMy
ZjI3MGUzYmFkZmRiZGFjZmU1OTIxZmUwNWE3ZTRhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3heQSzQ7gLEcHzBE1ocxXCtUw6Oa9QX8qgts9DbHfHBTu
rkTj7Uaq1IDPedi+7QU50EEoLPELvvZWcjPkxwVl/li3Xa7whdZi11WTTPiag65g
93uyn2hOWQ7kWWhX63Z34H+KGCE6Ww4EV+ZD1QhWzhGwBD52S8/KGloAHmf9RTCn
takHEeVsVmChcnl+OvUAc7D5xzuPJ7TW9OHFPWV4cx8DJEfGSsyB1JfMfDxktYmZ
NiRcPwDvr0pEzteolWXSQtRKkj1Q37WXiVKowv/+6kY8XS2X8sgVc2V7XNbvXy84
y1hVl0+7mvfMoj9ZM9IaZRQZUcmu76ojpZ36r4XLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUccxsOAQMJeTALal5lLl9Ek0+mbQwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q3NmNmMGM3LThkZGUtNDYxZi05MjBjLTEwZDJjMWYyYTZhMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJ1vQToGsEbg2ET3ebsdKhgZNyzq
K7DTi85nTdjGTL+nGk/EsaBYG3KleGQo5H59hfUzuNwVlsginV0QVUrgcFvTaRv3
JN0aq8je+1ww0eoOEfgxF9jJH4efc6ZANxRx1SfpZAvQA/RjJsz9V8bM1MXvoZZr
+fQuuF+jmU1u64kZQdNjFESXRhwBuiptbAhtKKA1l6cc5panvuxvQD7BUGWg23G5
whcj4enR0RMoe9L5SWC6T+hMsU3McTCwAM3OFRSQPOQgamhD+9TreFcz8j1XaaYC
g2KOTGmuPFUnxqNuJngessYtpSJ5ZDwnNPBpdyS7Fapnyvj6mdbBbb76yFk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:29 2024 by rpki-client on console-ams.rpki-client.org