Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e263b11a-59a6-4e4d-879b-071563ae3abe.roa
File: e263b11a-59a6-4e4d-879b-071563ae3abe.roa (raw, json)
Hash identifier: 5fZi6Zzl4+eVkhP/03uHwX1nMKuV6+n2d8y7HMnNmPk=
Subject key identifier: 8F:37:1F:7D:62:10:88:CF:19:08:7A:A9:7D:12:CC:D3:2E:CB:3C:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 140D0BA070D95447DB287FEB26FF17CBD0859324
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e263b11a-59a6-4e4d-879b-071563ae3abe.roa
Signing time: Tue 27 Jun 2023 00:00:00 +0000
ROA not before: Tue 27 Jun 2023 00:00:00 +0000
ROA not after: Tue 01 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0d:0b:a0:70:d9:54:47:db:28:7f:eb:26:ff:17:cb:d0:85:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 27 00:00:00 2023 GMT
Not After : Aug 1 23:59:59 2023 GMT
Subject: serialNumber=75c6e5a2cb0356d98d9882815485b0a78a352217364f2907bfbe354865cbf9a8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:d5:71:59:a1:69:1e:95:9d:0b:ef:e6:ed:
84:c0:65:c6:6e:93:13:bb:6f:38:96:df:57:14:70:
df:71:74:b2:fe:f9:b6:11:ef:92:8a:f1:31:97:ee:
64:01:1d:ec:ea:98:a0:9a:ec:65:94:00:16:8d:41:
ec:82:3b:63:66:49:7f:55:19:de:99:1c:f5:8c:ed:
1b:75:5d:04:04:37:3d:f5:bb:ab:ca:de:d0:7e:dd:
7a:b2:e8:9c:45:5d:34:ec:c8:ca:15:9e:02:3d:0e:
85:c2:7a:5e:a2:5f:08:0b:85:5d:eb:44:5b:b1:61:
cf:2a:f7:c6:07:84:e5:42:e8:78:bc:47:a1:2c:eb:
8b:dd:70:4e:9f:7e:52:44:7f:20:db:fa:fc:90:f6:
56:78:8e:38:db:02:42:67:3f:9c:07:60:7e:d4:4e:
59:67:ed:bc:8e:97:38:8f:7d:84:03:af:63:de:79:
a6:03:93:e2:55:64:7b:5d:1b:85:e9:11:da:fa:0a:
0b:84:ee:a6:56:3e:9d:6c:52:b8:dd:d8:a4:18:5e:
23:a0:59:c7:b2:57:bb:af:48:89:d0:72:88:85:54:
70:fc:cd:86:01:f1:27:00:98:a9:dd:3a:48:e6:2b:
3a:3d:cd:6b:5d:7b:7f:9c:eb:06:f6:84:fd:f0:e7:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:1F:7D:62:10:88:CF:19:08:7A:A9:7D:12:CC:D3:2E:CB:3C:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e263b11a-59a6-4e4d-879b-071563ae3abe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ad:8a:40:63:91:e9:12:b5:cf:1c:d5:db:2e:c3:2a:8d:28:
34:a1:26:f1:f2:47:89:58:da:ad:fc:5f:92:1d:6d:dc:94:39:
66:b6:43:65:99:13:69:f0:4d:e8:67:1b:f8:20:30:ce:21:55:
33:06:14:51:f3:08:1d:a7:cf:dc:90:3a:b6:9c:3a:ad:39:71:
ff:30:59:0d:8a:79:4c:74:98:d3:ac:ca:3e:15:28:17:1f:e4:
4d:59:ec:5b:31:f2:ca:9d:55:ac:a8:c6:27:f3:63:38:88:e4:
1c:ce:a4:b9:c1:74:12:59:4d:79:9b:12:bc:a7:03:a7:04:95:
53:67:f1:7e:4c:d2:73:72:da:fb:e7:56:4f:5e:cd:e4:cd:0e:
8e:dd:8d:b7:f2:bd:4d:45:2c:5f:92:61:dc:10:8b:c8:17:04:
4d:0b:92:3d:3d:7f:ef:35:1d:05:ad:5a:34:b2:be:45:4e:0d:
51:71:56:00:17:ae:24:69:01:b8:f0:00:d8:d6:eb:34:29:47:
5a:72:63:6a:b8:c9:25:13:73:af:34:37:83:07:bb:ed:98:c6:
5f:3e:f4:fd:b6:5a:ef:c7:54:7f:ed:f5:a4:46:cb:bb:70:26:
7a:4e:42:bb:d8:0c:a7:d6:63:bb:f2:25:b0:f5:13:62:13:8a:
4f:23:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-ams.rpki-client.org