Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e34357da-6c4a-4a52-bc5b-b71c71092777.roa
File: e34357da-6c4a-4a52-bc5b-b71c71092777.roa (raw, json)
Hash identifier: a5BUTMTgcCycZ0z36vph/KMAlokMFCxrWFO0nAh2/8o=
Subject key identifier: 0A:CC:E0:31:E8:99:21:C3:8B:05:0F:40:42:95:E3:B5:C8:8C:4D:ED
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 075D56995639D1FB4E770F833C34F9223A12604A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e34357da-6c4a-4a52-bc5b-b71c71092777.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5d:56:99:56:39:d1:fb:4e:77:0f:83:3c:34:f9:22:3a:12:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=f1c52a3b08abe3ebbb137fa15c30ed1c6f91fc9cdca1aab9c358d701ead76d7c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:8b:17:01:a0:57:d4:b1:df:b2:28:e9:c0:
0e:46:9f:21:99:54:66:70:f3:c8:c6:b5:8d:a5:56:
ba:f7:04:eb:6f:4d:4d:ea:78:57:d8:95:9c:7d:67:
08:24:5e:44:70:c3:60:6c:f7:52:de:12:94:66:5c:
f0:f8:f3:e9:61:c5:33:7a:cb:da:c5:ef:e4:43:5a:
3b:d1:41:d4:9a:79:ce:85:a8:dc:a2:df:9c:d8:30:
ab:14:47:f7:7e:2d:18:70:ba:ae:da:af:76:6d:2b:
72:ed:f3:48:d8:8d:c2:2b:85:7b:ea:0d:b6:2e:6f:
41:06:94:a1:a1:e2:98:21:0b:0a:98:b7:76:0b:2d:
32:b8:48:c9:22:0a:26:4f:14:34:c7:fa:64:0f:2e:
22:a1:54:fb:ff:eb:dc:c9:63:d6:3d:48:6c:8a:bf:
64:d7:87:dd:73:30:c5:23:2e:93:05:f2:86:b5:1d:
5e:a8:cc:6d:bb:c1:66:35:2a:30:88:c7:e4:01:24:
da:7d:3a:6b:dd:39:63:05:3d:d4:ec:1b:08:f4:a9:
a2:08:77:2e:6a:9f:ae:30:d2:7f:1e:37:a0:52:b0:
f4:08:99:56:51:3b:3c:c0:4e:7b:4f:34:43:55:58:
2e:5a:9a:99:e1:e6:70:d4:e8:80:d9:2e:c8:f1:a8:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:E0:31:E8:99:21:C3:8B:05:0F:40:42:95:E3:B5:C8:8C:4D:ED
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e34357da-6c4a-4a52-bc5b-b71c71092777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0c:78:35:80:43:78:73:65:d8:ca:1f:72:23:88:c1:7a:d2:
d6:4b:5a:e2:4f:f0:01:68:1d:b3:d9:d4:72:7d:f4:c6:15:75:
0c:92:a7:67:cd:36:c2:05:38:5d:03:f0:e1:a4:e1:dd:c1:bb:
cc:19:ee:47:d6:f8:00:b1:4c:c5:13:95:d8:09:5a:7c:a1:11:
34:4d:81:a5:8a:21:5a:f4:15:0c:2b:e1:95:ab:3b:2c:c0:dc:
56:e9:b0:9c:3f:61:77:47:14:0b:ac:04:26:d2:f5:42:c0:45:
15:be:ff:8c:98:5d:eb:5c:f1:2d:77:c4:18:02:02:84:b6:c3:
35:2d:39:dc:53:99:35:5d:c7:07:c4:96:96:d5:f2:32:e0:b2:
e0:1a:9c:e4:95:e2:0c:ea:cc:46:14:51:21:77:94:3a:0b:0e:
77:71:3e:7a:89:c2:28:ee:0a:2f:41:b2:d5:85:3a:34:ec:0d:
f9:74:4d:2d:14:36:49:11:3a:39:d1:3c:76:e6:5f:99:ff:88:
63:74:b8:65:05:a7:94:62:fe:61:9c:12:02:ef:f9:5b:a6:90:
77:69:49:31:43:25:89:ae:94:da:36:7c:5f:5a:7e:f7:dd:b0:
28:de:c4:5f:ca:09:6b:1a:99:ba:81:6c:be:fb:67:6f:63:89:
5e:50:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-ams.rpki-client.org