Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e90ed7a8-b0cb-4d18-bfa1-ec765d093c05.roa
File: e90ed7a8-b0cb-4d18-bfa1-ec765d093c05.roa (raw, json)
Hash identifier: Ynr9nRY7JI5p4LLd+864679FEnaMDZboeoHvkBN4RiU=
Subject key identifier: 35:16:4D:04:92:64:83:05:5F:55:A3:7A:14:E1:43:A4:69:64:FA:6D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7E566CC01EB0A2688EF73CC536E0F9FA62A0FAF8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e90ed7a8-b0cb-4d18-bfa1-ec765d093c05.roa
Signing time: Fri 05 Jan 2024 00:00:00 +0000
ROA not before: Fri 05 Jan 2024 00:00:00 +0000
ROA not after: Fri 09 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:56:6c:c0:1e:b0:a2:68:8e:f7:3c:c5:36:e0:f9:fa:62:a0:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 5 00:00:00 2024 GMT
Not After : Feb 9 23:59:59 2024 GMT
Subject: serialNumber=818a61d88b6d532c12db72b3a30d29f27b8909a84284065fbcc8ad9289499a10, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:ba:50:63:41:6c:6e:7f:9e:a6:59:70:88:
7b:99:6f:6b:7b:03:ce:e0:39:fe:e4:c5:d3:d2:46:
58:be:8a:fb:56:53:93:f1:b0:21:93:ec:d7:9b:a8:
02:2d:39:e6:23:84:90:11:b1:ec:97:de:32:43:50:
73:5c:5d:42:94:50:80:f4:f3:6a:18:a7:c2:e2:6d:
63:4c:1e:13:15:0e:b6:68:b3:2e:db:1a:99:83:16:
88:5e:77:a6:45:ec:1f:32:b7:c9:5b:89:54:c3:23:
55:43:07:aa:d6:cd:de:27:aa:72:2b:d1:d8:74:35:
7e:7f:11:a7:d4:e4:f0:7f:77:4a:66:37:d8:d4:bc:
b0:f3:4e:85:86:7a:ba:03:1b:cb:01:e5:55:51:dc:
02:ff:b8:42:01:2d:04:f9:9c:9e:11:38:b8:d0:bd:
9c:66:80:59:9d:9d:2f:0c:1f:9c:99:6c:49:ba:67:
dc:cb:a6:6e:f8:1f:cc:5a:c0:f5:bc:83:e1:f3:d5:
c7:2b:04:a5:1b:bc:57:46:e7:83:14:dc:51:84:70:
8b:25:bd:4e:63:a9:28:3e:5e:38:ab:6c:55:3e:57:
b3:69:ad:d7:45:69:96:ea:be:c4:82:e3:64:a7:18:
c9:af:f7:19:0a:a6:14:cf:96:f8:61:1b:1c:23:61:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:4D:04:92:64:83:05:5F:55:A3:7A:14:E1:43:A4:69:64:FA:6D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e90ed7a8-b0cb-4d18-bfa1-ec765d093c05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2a:5f:b8:14:27:9e:0d:45:01:c9:25:e3:17:fa:0b:64:4a:
c7:66:ed:d2:e9:db:83:7a:62:0a:cd:76:70:da:ec:26:f5:51:
f6:6d:04:99:ef:69:41:38:aa:61:52:03:62:fa:95:6a:b7:b4:
ec:4a:48:8c:b6:3b:86:b1:37:d5:f3:e6:46:e9:0f:60:58:02:
26:b6:26:65:d1:62:0f:a2:07:c3:af:a6:a0:71:dd:01:e2:d7:
79:95:2c:f4:f2:57:fc:69:29:36:33:dc:45:c4:c2:18:60:6d:
a5:e0:d3:a5:a0:42:85:3c:5f:7a:8e:c2:d2:cc:88:21:f8:55:
a7:70:68:14:66:a3:6d:81:46:a5:ed:e5:cb:e7:e6:98:9a:f7:
1d:b7:a4:db:6d:f4:61:f5:d9:f3:82:ec:6c:8b:14:bd:29:71:
e9:04:67:95:15:4c:d9:ab:d8:05:0e:26:be:80:23:de:35:a4:
b2:66:57:09:9f:8d:ad:a7:6a:1f:12:d3:c5:75:24:7a:7a:36:
41:18:21:9c:34:4a:34:52:0d:93:47:c1:cd:92:73:f5:4e:17:
c1:31:21:89:8f:f8:2c:04:03:42:96:a6:29:9f:4b:f7:e8:cb:
ba:3f:03:b9:ce:c1:74:e5:02:3e:d7:71:a4:d0:24:9b:11:9d:
1f:36:d4:5e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUflZswB6womiO9zzFNuD5+mKg+vgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMTA1MDAwMDAwWhcNMjQwMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MThhNjFkODhiNmQ1MzJjMTJkYjcyYjNhMzBkMjlmMjdi
ODkwOWE4NDI4NDA2NWZiY2M4YWQ5Mjg5NDk5YTEwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCKXbpQY0Fsbn+epllwiHuZb2t7A87gOf7kxdPSRli+ivtW
U5PxsCGT7NebqAItOeYjhJARseyX3jJDUHNcXUKUUID082oYp8LibWNMHhMVDrZo
sy7bGpmDFohed6ZF7B8yt8lbiVTDI1VDB6rWzd4nqnIr0dh0NX5/EafU5PB/d0pm
N9jUvLDzToWGeroDG8sB5VVR3AL/uEIBLQT5nJ4ROLjQvZxmgFmdnS8MH5yZbEm6
Z9zLpm74H8xawPW8g+Hz1ccrBKUbvFdG54MU3FGEcIslvU5jqSg+XjirbFU+V7Np
rddFaZbqvsSC42SnGMmv9xkKphTPlvhhGxwjYTQ9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNRZNBJJkgwVfVaN6FOFDpGlk+m0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2U5MGVkN2E4LWIwY2ItNGQxOC1iZmExLWVjNzY1ZDA5M2MwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJgqX7gUJ54NRQHJJeMX+gtkSsdm
7dLp24N6YgrNdnDa7Cb1UfZtBJnvaUE4qmFSA2L6lWq3tOxKSIy2O4axN9Xz5kbp
D2BYAia2JmXRYg+iB8OvpqBx3QHi13mVLPTyV/xpKTYz3EXEwhhgbaXg06WgQoU8
X3qOwtLMiCH4VadwaBRmo22BRqXt5cvn5pia9x23pNtt9GH12fOC7GyLFL0pcekE
Z5UVTNmr2AUOJr6AI941pLJmVwmfja2nah8S08V1JHp6NkEYIZw0SjRSDZNHwc2S
c/VOF8ExIYmP+CwEA0KWpimfS/foy7o/A7nOwXTlAj7XcaTQJJsRnR821F4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:32 2024 by rpki-client on console-ams.rpki-client.org