Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/db933672-ff32-4c8a-883d-af5ba015d87c.roa
File: db933672-ff32-4c8a-883d-af5ba015d87c.roa (raw, json)
Hash identifier: WiWVDs8SBcCQIKK768Y9q6qAeEza4l6fBQpQZGWbhtE=
Subject key identifier: 95:0B:E2:AB:D8:4F:46:1F:08:FB:C6:D9:F1:75:95:2E:C8:9D:85:6D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 39C7A4328CCE9F3730AA58610FE64253E13384A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/db933672-ff32-4c8a-883d-af5ba015d87c.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c7:a4:32:8c:ce:9f:37:30:aa:58:61:0f:e6:42:53:e1:33:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: serialNumber=ac7ce3b7fdd060285d702ec7b1ed1d628f1f6293e5018ba8e4256d517b1773d3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:05:3b:8c:ef:e6:31:a3:33:c1:78:a9:1e:
fc:73:68:37:35:d6:99:b2:20:9e:8e:b5:31:a1:1b:
22:ae:24:1a:30:f3:9e:3c:d4:6e:c0:28:4f:2f:c2:
b3:b2:92:c7:27:2d:38:75:8c:00:a5:50:f0:32:f8:
66:f8:02:98:dd:f1:c8:51:08:53:b5:88:39:91:c7:
55:25:89:24:d9:ab:bc:87:aa:f2:8e:d9:cc:60:7a:
7a:a5:b8:2b:8d:39:69:90:84:52:b6:59:3a:07:6b:
33:82:bb:05:47:ca:3f:c4:f1:19:c0:e2:ff:f5:43:
b8:a5:ba:ff:a0:e3:94:ea:0f:2c:f0:83:d4:f5:c2:
13:e2:69:11:80:69:0b:a5:9d:0c:51:4d:75:7b:d7:
ed:e2:57:3e:c3:59:43:77:ad:db:b0:aa:db:ba:82:
25:e9:22:a0:1d:3e:c6:d4:5b:d9:21:e7:7e:00:ff:
af:fb:31:87:82:66:45:80:c6:c9:80:10:64:23:8c:
ec:e5:a3:7b:41:45:63:38:14:1f:53:5c:ce:16:48:
77:eb:b1:dc:85:bb:c0:6a:33:1b:b6:50:39:61:8f:
40:f9:57:7c:08:16:5a:b0:b5:d0:78:a2:4c:73:4d:
4e:23:91:65:6d:42:ae:7a:f9:65:04:cc:40:dc:02:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0B:E2:AB:D8:4F:46:1F:08:FB:C6:D9:F1:75:95:2E:C8:9D:85:6D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/db933672-ff32-4c8a-883d-af5ba015d87c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5b:80:a9:35:84:2e:bf:8f:f3:d9:e6:c3:b0:ec:6e:9b:34:
3d:f7:32:b9:0f:58:6c:cd:07:c8:26:c9:82:f2:0c:8d:2c:a3:
aa:03:07:25:4c:b0:32:e4:59:d0:b7:49:0b:00:64:34:c3:d5:
35:01:fc:6c:e1:90:88:fd:25:9d:6a:fa:bd:c7:f1:0b:48:16:
6f:28:78:f8:26:d2:68:9f:d7:25:e1:23:3b:4c:37:f0:40:6e:
57:52:27:eb:e9:32:2c:8c:ee:ef:2e:74:7a:bc:3b:ec:79:52:
fb:87:06:89:65:96:54:28:0e:b6:8f:19:8b:b9:11:c9:08:27:
8b:77:f7:63:51:f0:c0:f0:dd:48:9c:69:be:29:c6:e5:5d:98:
91:59:0e:97:8d:5f:f9:f2:b9:ec:50:a7:25:dc:3c:1a:a8:07:
13:ab:ec:b4:a1:1e:63:61:94:7c:b1:36:b8:08:6b:92:05:48:
be:f1:c6:20:46:19:83:36:31:80:98:ac:f7:e3:12:8c:42:d1:
d5:51:7e:7e:4a:37:86:2a:6a:ef:c3:0e:86:b2:6a:11:6e:da:
00:cc:c7:21:ad:e5:c5:e5:90:c3:c3:7d:77:ad:8e:85:dd:e3:
9a:c3:2b:0a:fd:fd:17:af:fd:4e:73:40:e5:ad:65:eb:c1:a3:
80:42:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:29 2024 by rpki-client on console-ams.rpki-client.org