Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e838604b-4a49-41ee-91dd-203263a74852.roa
File: e838604b-4a49-41ee-91dd-203263a74852.roa (raw, json)
Hash identifier: cT2M6UwCAMEcdZQKuvDgfzAFuRLtg+r/3YbZfbr4zxk=
Subject key identifier: 13:36:55:68:69:20:EE:FF:0F:31:37:30:23:D1:54:BC:01:84:50:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 37EDE432E6BED0D982D1638BF5CEC581DDF054A8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e838604b-4a49-41ee-91dd-203263a74852.roa
Signing time: Tue 01 Aug 2023 00:00:00 +0000
ROA not before: Tue 01 Aug 2023 00:00:00 +0000
ROA not after: Tue 05 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ed:e4:32:e6:be:d0:d9:82:d1:63:8b:f5:ce:c5:81:dd:f0:54:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 1 00:00:00 2023 GMT
Not After : Sep 5 23:59:59 2023 GMT
Subject: serialNumber=f4d4a5c5c0285ab6eaa147b02ba88d41241431ce589d1f7d3e0f3b054c3bc99b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:5b:76:1d:a6:0e:8d:54:a8:ca:83:d7:79:
07:31:c8:a9:73:9e:a4:ac:88:14:d9:2e:7a:1f:ab:
ee:b0:18:44:ca:b8:ae:ae:c8:48:42:ff:4a:41:9e:
93:3b:31:da:01:f2:25:47:b3:27:f0:c8:99:36:bb:
7b:49:20:eb:99:0c:68:23:18:17:f5:d5:6e:e9:f7:
7b:08:e7:cb:7a:cb:48:30:a7:15:af:b6:79:4e:dd:
32:42:ef:3a:e9:4c:18:65:ae:d9:b6:55:6e:96:a6:
cf:93:bb:7f:fc:f4:6d:27:56:f6:ce:5c:0a:ce:2b:
f4:d6:ac:af:98:a1:b9:90:41:7e:58:dc:0e:f6:9c:
06:7f:48:67:1d:07:30:32:b3:b0:59:2f:14:ec:33:
6f:1d:fd:0f:03:b8:ab:fa:8e:4b:1f:48:59:7a:aa:
fd:6b:7b:ce:d4:1e:e6:dd:ea:24:f6:62:18:23:cb:
55:8c:b0:2c:b4:3d:ad:94:be:e3:0e:15:a4:f4:5d:
1d:43:b8:14:f4:c2:d8:95:39:12:23:a1:45:fa:f0:
a4:72:f7:e8:93:e1:f8:2b:dd:28:71:06:7f:bb:ce:
81:1c:8b:16:7c:34:ea:f5:07:c6:86:13:88:73:9d:
40:18:87:df:49:41:73:91:4e:39:12:b5:aa:35:9e:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:55:68:69:20:EE:FF:0F:31:37:30:23:D1:54:BC:01:84:50:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e838604b-4a49-41ee-91dd-203263a74852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:16:d4:e2:ee:19:18:2b:88:3b:58:5b:31:66:a9:51:5c:03:
7b:7d:ae:c8:7f:fc:98:79:88:73:52:73:c5:91:a5:5b:32:74:
77:e8:76:5c:e0:a7:f6:40:24:9e:78:05:ef:0a:73:7d:0d:b3:
12:d1:b8:5e:50:c2:fc:48:4a:ec:c3:38:3f:66:9d:56:2d:99:
a0:dd:00:ee:55:0b:1b:6d:b3:1b:95:31:4a:9a:7c:e3:44:8e:
a1:fb:99:2f:65:6f:bd:c9:2b:20:9c:68:5f:f1:74:29:48:5b:
50:99:5f:89:47:3c:0d:45:de:eb:1d:b1:10:f6:a3:32:65:57:
9e:39:e0:b3:0d:b2:a6:4f:6d:f0:6a:bf:90:28:b3:32:fc:50:
bd:30:0a:db:0b:48:1d:38:cc:73:58:43:af:3d:7a:68:68:cf:
23:4b:90:63:c3:bb:70:5e:05:6e:a4:5b:b4:07:b5:2c:0c:5f:
2d:d8:2a:fd:50:93:6b:f7:3a:2b:78:7c:df:3d:5c:5a:9d:78:
e9:b6:65:2c:87:0f:d2:9c:f9:88:76:25:6f:2f:08:db:10:14:
97:f9:43:9f:fa:61:00:3c:a6:04:53:eb:9d:a4:28:92:78:47:
3a:c3:8e:2f:e6:22:fd:4f:a3:c3:94:87:ac:13:77:23:8c:55:
f2:d9:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:48 2024 by rpki-client on console-fra.rpki-client.org