Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfbe0a71-90fc-43ab-9a4a-1133ded8ffdd.roa
File: dfbe0a71-90fc-43ab-9a4a-1133ded8ffdd.roa (raw, json)
Hash identifier: ffbSGEJ5WDNi6me5A3+DImYhDN9/v0iivVAxMmjeo8w=
Subject key identifier: B9:BD:19:AA:7D:53:6F:C1:8D:CB:DF:E2:C1:B9:62:54:53:33:E1:1C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 36EC14E9241752F66C7E285FE73AFD7338348BFA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfbe0a71-90fc-43ab-9a4a-1133ded8ffdd.roa
Signing time: Tue 06 Feb 2024 00:00:00 +0000
ROA not before: Tue 06 Feb 2024 00:00:00 +0000
ROA not after: Tue 12 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ec:14:e9:24:17:52:f6:6c:7e:28:5f:e7:3a:fd:73:38:34:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Feb 6 00:00:00 2024 GMT
Not After : Mar 12 23:59:59 2024 GMT
Subject: serialNumber=950c5fa1ecc79a0ce3ebfb96f4569df8b532465a42994dbe0231f8609ff05bd4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:46:9c:31:de:99:3a:70:92:2f:70:5c:4c:
26:ec:3d:97:1c:13:5d:b5:70:50:30:f4:2e:79:94:
7e:5a:3e:9a:6f:b0:e0:57:ac:52:9b:ee:f3:fa:2d:
7b:57:b2:7b:2d:ec:73:7f:41:35:a4:f6:7c:9c:92:
f2:04:8c:58:46:e3:a2:ad:56:33:77:3f:1b:27:6c:
77:e3:2a:2b:e9:1d:f0:18:75:9e:36:03:36:02:fe:
b2:46:4d:27:fe:cc:72:e1:18:c9:90:14:33:c8:89:
88:4e:9e:5f:11:a4:06:3d:13:11:82:94:a7:4d:a8:
03:14:fa:ba:5b:98:d6:6b:fd:5a:97:66:3d:51:df:
fb:97:f7:10:fb:33:d1:f1:66:bb:03:b0:90:de:ee:
be:07:31:8b:46:17:fb:27:c9:a7:37:76:fb:ef:55:
a4:ee:43:59:b6:cd:30:1e:da:93:3b:65:16:bb:45:
93:43:e4:8f:54:c4:a2:f7:15:7a:2d:dc:0b:44:0a:
03:0d:9a:93:96:80:7f:06:94:c3:df:50:66:f8:10:
32:d2:76:0a:06:87:76:75:35:b9:a0:a3:0c:ed:ab:
d4:ba:e7:a9:fe:d6:fc:f1:8d:c5:10:eb:3c:2c:05:
5e:80:8d:a4:88:c6:7b:45:0b:a7:0b:7f:8a:82:40:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:19:AA:7D:53:6F:C1:8D:CB:DF:E2:C1:B9:62:54:53:33:E1:1C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dfbe0a71-90fc-43ab-9a4a-1133ded8ffdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bc:4a:93:49:b6:46:8a:e7:d7:3d:1d:39:b5:d2:cb:36:7e:
45:9c:dd:4f:4b:3f:df:3e:91:69:38:7d:30:96:07:4f:7e:03:
91:9b:94:bb:ad:46:76:7d:bd:10:44:7b:e4:ce:2c:a0:53:b3:
10:bd:f7:73:a6:6d:96:b6:5c:d2:d5:c9:25:7f:e6:a1:95:27:
3b:a1:a3:0d:12:6f:b2:78:40:18:8b:2f:01:a3:09:3c:87:e6:
5d:0b:30:1d:2d:b4:9f:81:f2:d6:1b:59:13:1e:d1:56:30:1b:
2b:14:7f:7b:a7:6c:0b:d1:df:61:65:49:bb:31:79:4d:3b:8b:
7e:e3:46:65:64:69:27:1f:6b:c5:c3:3c:f9:1b:11:76:81:e4:
78:83:b9:38:46:c9:4c:bc:ba:df:6c:f1:44:64:8d:c6:20:29:
e9:48:48:2c:cb:4f:16:d0:f2:15:b1:45:08:d4:33:2a:fa:96:
f4:82:22:c4:34:94:cb:ed:be:e1:b9:07:0b:5a:38:f1:6b:f2:
72:1d:4f:13:2b:a8:3e:6b:ca:ab:8a:f4:18:27:c3:b3:b8:ce:
38:04:9e:75:b9:a2:90:03:59:d7:30:2a:6f:66:59:6c:e6:d3:
83:3f:f7:7f:50:a3:68:87:79:b1:bf:63:b5:e7:f7:c2:fb:a7:
dc:d4:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:30 2024 by rpki-client on console-ams.rpki-client.org