Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec9bbcb7-f5e4-4f1d-ab6e-fdc548e00b07.roa
File: ec9bbcb7-f5e4-4f1d-ab6e-fdc548e00b07.roa (raw, json)
Hash identifier: z7EFSKS4H7FN9JEvD0VHN/FGHMI1c0zajChJ9MZbSjg=
Subject key identifier: 53:39:08:3D:00:A8:90:09:76:E5:C1:CB:38:97:7F:27:9E:98:24:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 492A29DA23E15AB19C97FF0A7D5BD0A24347C62F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec9bbcb7-f5e4-4f1d-ab6e-fdc548e00b07.roa
Signing time: Sun 28 Jan 2024 00:00:00 +0000
ROA not before: Sun 28 Jan 2024 00:00:00 +0000
ROA not after: Sun 03 Mar 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2a:29:da:23:e1:5a:b1:9c:97:ff:0a:7d:5b:d0:a2:43:47:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 28 00:00:00 2024 GMT
Not After : Mar 3 23:59:59 2024 GMT
Subject: serialNumber=c130d08a3f86b2e2e684f1f3058278a39b8a33a05e8b37c039c7b40be3f74646, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:64:47:3d:b9:72:5d:2e:5a:59:bc:a9:34:
13:17:ba:c9:3e:ac:5d:e7:a9:41:fa:2c:a0:34:75:
bb:ce:20:f5:0f:dc:7a:b4:af:cc:a4:ad:a3:5a:71:
42:90:ba:10:cb:8a:d1:03:ed:ae:37:f9:7f:46:70:
07:6f:3e:a8:67:89:bc:00:0f:6b:07:4c:92:fd:59:
17:7c:77:60:97:8f:d2:88:fd:f5:b0:b2:c8:c2:ed:
26:42:fc:24:35:53:b7:89:f6:5a:32:e6:fb:70:77:
3f:0f:32:b4:15:e5:04:63:8a:0d:fa:c1:6c:89:13:
7b:94:5a:8b:9b:8a:9b:fb:2d:cd:2c:4d:c4:b1:75:
ac:26:3a:ec:74:43:29:9e:a2:d1:cc:2e:58:b5:49:
c0:1d:26:bc:ea:e6:46:c3:cd:bd:21:de:64:b1:15:
99:f5:eb:e6:94:c0:65:74:26:28:21:d4:7d:fa:05:
a0:70:70:aa:f8:dd:ad:5b:f3:e1:a8:52:43:1c:80:
4e:2e:82:64:4c:0c:95:e8:73:5b:4b:85:e8:80:1b:
d3:88:e4:23:8f:97:2a:4c:1d:87:dd:1b:63:6f:0c:
7b:88:60:c1:08:02:e8:eb:48:4b:c8:f6:58:ae:1b:
35:2a:6a:c0:e2:b0:c5:e1:ea:51:75:a2:8d:e4:a9:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:08:3D:00:A8:90:09:76:E5:C1:CB:38:97:7F:27:9E:98:24:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec9bbcb7-f5e4-4f1d-ab6e-fdc548e00b07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b3:6d:b0:51:33:a9:03:e5:44:b9:38:7a:be:b6:29:ec:ef:
41:69:6e:50:31:07:0e:09:e1:42:ea:f0:f4:c4:7f:4b:2d:41:
f1:d4:b8:1b:cd:0a:79:8f:c8:a6:98:37:44:ac:7e:88:40:8e:
1a:1d:8d:99:40:f2:2c:18:f1:13:12:aa:17:56:6f:56:1f:9a:
0a:03:fa:a6:44:d3:fe:3c:62:db:a7:44:5c:67:71:6c:0f:70:
49:61:cd:89:64:d0:0d:6d:50:9f:60:d5:26:a2:20:c9:97:95:
27:7d:e3:0d:01:05:f5:3d:58:af:7d:a4:2b:37:d9:ff:1f:d0:
2d:87:79:27:70:9d:19:34:e7:84:c6:9e:0c:5a:ff:f9:03:3f:
44:2b:d9:fa:0c:8b:dc:ec:b3:4f:6c:2f:77:5c:47:15:dd:69:
18:5f:ea:ea:34:6b:bc:0c:f2:57:cb:9a:34:f9:bf:a0:52:c5:
3d:ea:b9:d9:90:f3:2e:a1:3e:2b:af:0e:73:36:50:f4:8f:e6:
53:24:44:23:30:82:cf:c1:9e:93:0e:ba:48:ac:7e:32:40:67:
b1:1b:89:d9:38:a7:52:1d:51:0f:d5:17:43:bd:3b:f8:21:8a:
5d:06:3d:60:17:46:51:40:e0:f0:c4:20:f6:a8:66:8f:52:2d:
ac:cb:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:33 2024 by rpki-client on console-ams.rpki-client.org