Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed23f35a-f407-437c-a346-810fb2435f38.roa
File: ed23f35a-f407-437c-a346-810fb2435f38.roa (raw, json)
Hash identifier: RAizlyq/HQf1PHY+57kbZuVCdfye1qIiOY+6SGHDhRQ=
Subject key identifier: A7:B7:F1:1E:32:F0:A9:10:CD:6A:46:CB:96:5F:43:BD:02:62:A7:E6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 63878A98F5BB41D12ED0DFA902FBBB9C3EC70D03
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed23f35a-f407-437c-a346-810fb2435f38.roa
Signing time: Wed 06 Sep 2023 00:00:00 +0000
ROA not before: Wed 06 Sep 2023 00:00:00 +0000
ROA not after: Wed 11 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:87:8a:98:f5:bb:41:d1:2e:d0:df:a9:02:fb:bb:9c:3e:c7:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 6 00:00:00 2023 GMT
Not After : Oct 11 23:59:59 2023 GMT
Subject: serialNumber=a6e815764c78356ff335837aaf1293f7f77213842ad54657d5019fd9b67137a2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:34:63:31:98:3e:be:51:57:ea:82:8c:c8:
eb:dc:2d:36:00:79:8d:10:9b:0b:e8:f1:40:e5:60:
d2:0e:ad:b9:83:05:a0:d2:a4:00:d2:be:a0:b9:1b:
70:7f:2b:c7:d2:02:a6:76:da:11:28:d3:c4:e9:a8:
f8:61:7c:1d:a1:6b:1f:f0:4c:2a:65:3c:35:09:71:
f0:8c:eb:ba:c5:9f:51:2a:87:80:24:1c:3a:72:35:
ff:7e:7a:4a:17:ff:b9:da:3f:06:cd:b5:61:f3:d7:
36:fd:64:88:6b:f7:70:a0:4d:c7:26:d6:64:68:67:
68:4f:30:80:62:06:d4:b7:c5:14:f9:66:d9:e4:2e:
27:1d:8b:da:fc:97:22:18:62:d6:89:8f:f0:5d:42:
5e:56:63:01:d2:b4:02:65:24:0e:71:1b:09:07:b4:
0c:91:0a:80:08:e5:46:fa:0a:b7:f5:93:ec:cd:82:
f3:66:7b:fb:f1:88:c1:28:59:41:f2:d1:9f:c1:3f:
eb:4e:e3:35:d2:b2:94:34:6d:2b:16:47:8a:ae:f1:
a0:68:98:85:44:ac:62:f3:77:48:79:dc:18:bd:69:
78:00:b7:60:90:77:ee:c3:33:59:9c:63:5c:0d:e7:
b1:e8:25:f2:52:c6:2a:70:79:ac:c0:fb:40:14:ff:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:F1:1E:32:F0:A9:10:CD:6A:46:CB:96:5F:43:BD:02:62:A7:E6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed23f35a-f407-437c-a346-810fb2435f38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7f:99:1c:8c:7a:52:1c:66:2e:d2:f1:e7:ce:62:61:f9:1c:
70:71:ea:4c:31:b6:c2:45:71:12:94:46:17:f8:6d:35:99:b1:
0e:13:8a:09:ea:40:0f:a4:bc:f3:35:3e:6f:24:66:64:d6:f1:
df:c2:c5:f5:ac:ff:3e:f4:7d:8e:83:7c:1b:ac:12:d4:f4:cc:
d5:42:43:52:66:46:16:17:0f:1b:1a:ac:e9:a2:9f:88:86:94:
16:d7:a0:5d:c6:9d:7b:31:de:f2:5e:34:88:9c:40:70:b5:64:
99:e3:59:30:7f:74:b9:18:11:04:a6:d8:fe:f0:72:43:e0:e0:
b1:85:7c:6d:33:e8:80:e5:e9:38:48:d4:62:7e:bb:80:ed:e6:
bf:39:b2:44:1b:82:8a:2a:9f:4f:6b:a8:ed:39:09:51:56:8d:
87:ec:ed:bd:25:ac:a7:4d:98:0e:97:c3:26:10:10:be:63:8f:
fb:16:a0:09:1c:2a:d5:62:94:13:3a:1b:09:c0:5b:ab:08:f4:
a6:11:97:d1:87:9c:c7:ca:69:d6:0b:55:d8:47:fb:9e:85:00:
49:90:66:e5:b4:7e:78:f0:3a:60:46:83:ff:a3:61:69:74:f1:
29:23:87:ae:de:19:c4:13:30:8f:df:ec:da:c4:c2:98:e7:4c:
a0:12:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:49 2024 by rpki-client on console-fra.rpki-client.org