Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8b1870b-682a-4d7c-8a0a-a81601bc8786.roa
File: e8b1870b-682a-4d7c-8a0a-a81601bc8786.roa (raw, json)
Hash identifier: bYZN7kBCk1Izkz+T/CnanGpkU/rTH/MBs1K0g5TPQvU=
Subject key identifier: DC:14:3F:0C:B0:90:A5:5B:73:6D:1D:16:A7:E7:AE:11:2C:08:F5:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3573601578DAB134BE6703D11FC11EFD8B5ACE32
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8b1870b-682a-4d7c-8a0a-a81601bc8786.roa
Signing time: Wed 06 Dec 2023 00:00:00 +0000
ROA not before: Wed 06 Dec 2023 00:00:00 +0000
ROA not after: Wed 10 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:73:60:15:78:da:b1:34:be:67:03:d1:1f:c1:1e:fd:8b:5a:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 6 00:00:00 2023 GMT
Not After : Jan 10 23:59:59 2024 GMT
Subject: serialNumber=1690938f102a161c41eddf9841f87c191d9de0b9de2577a6256d3be0de5b178e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:c2:e1:97:da:a7:95:b1:14:26:03:e7:f0:
60:47:14:db:fd:09:66:94:8a:51:68:1f:66:ba:d1:
9a:69:f4:01:11:f2:89:c0:23:be:aa:3e:6f:3f:d7:
42:f0:f8:5f:2e:55:6b:b8:52:11:ef:66:e0:9c:10:
c4:cc:e5:ea:c5:6d:60:35:27:30:01:21:c1:fd:9f:
da:31:65:fc:29:5d:8a:a7:1d:96:89:ac:bc:21:64:
60:54:88:8d:9c:b2:a5:e6:57:e9:4b:4f:db:33:19:
67:e2:ad:1c:a3:22:3b:33:bf:eb:49:53:9c:f8:28:
fe:a4:29:7d:fd:10:8a:82:0b:c5:12:13:7b:bc:75:
04:42:07:f2:f8:32:9d:df:4b:d5:a8:89:3d:8f:3e:
a0:50:4e:72:e7:c6:5b:59:c2:8f:92:79:4d:c7:e9:
f3:e6:33:3b:0e:99:61:89:ca:61:92:af:7e:6a:ce:
2a:2c:6c:5a:ea:c6:1f:6b:35:aa:07:1e:9c:93:1e:
11:ec:e9:e4:a2:4f:4e:e7:b3:82:a6:b5:72:dd:ae:
2d:a2:d3:e1:68:29:10:97:4f:e2:66:c0:ca:4b:f0:
a2:99:fe:86:5f:49:9c:eb:c1:9e:cf:cc:a1:39:9f:
93:ec:f7:0c:39:60:a9:48:bc:a3:8f:b5:c2:41:f2:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:3F:0C:B0:90:A5:5B:73:6D:1D:16:A7:E7:AE:11:2C:08:F5:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8b1870b-682a-4d7c-8a0a-a81601bc8786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f0:60:bb:86:b4:c5:ac:92:76:7e:eb:89:f5:0c:d4:02:2b:
95:22:34:89:d9:cb:d8:91:4a:83:5b:19:77:86:53:44:19:c7:
c9:4f:e4:85:37:26:15:12:5b:d4:a8:09:22:9f:8c:80:d6:39:
d3:e5:da:53:e6:9a:12:3d:23:48:2b:23:24:03:ae:f7:1d:54:
4f:5e:d3:fc:06:dc:4e:e4:49:72:ed:1d:b0:f8:d3:56:0d:d4:
bc:6d:83:41:c6:e1:50:63:f8:68:cd:17:2a:f2:d6:df:9c:12:
d4:f8:47:82:3e:44:ed:da:1a:eb:e7:c4:e9:37:c3:00:7d:f7:
49:dd:83:a5:f7:8c:85:39:eb:b6:df:2d:d7:8f:10:4a:27:20:
35:74:83:29:f1:a0:39:5b:fd:c5:5f:94:e1:1a:05:b5:51:2f:
46:21:a8:99:69:cf:da:f7:1a:ba:0e:ec:a8:e7:65:8f:24:ed:
04:cd:88:f1:41:6c:7d:ac:73:36:5f:e2:15:59:3c:5f:0d:c6:
8d:e2:85:9c:22:c0:39:98:51:6e:2b:41:16:46:6c:90:2c:12:
96:f8:78:9f:b0:31:36:48:93:8f:41:98:5a:64:e5:a7:76:09:
4d:fd:c1:14:95:66:2c:51:ef:6b:09:13:07:19:bc:41:18:e2:
b0:fd:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-ams.rpki-client.org