Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3b9db74-79ec-48de-accc-1953404ac051.roa
File: f3b9db74-79ec-48de-accc-1953404ac051.roa (raw, json)
Hash identifier: RauCceINgSixA09zKj6I0Vp63WkkcsZykXa2Ddej5L8=
Subject key identifier: 69:95:C2:35:49:D1:72:C4:EA:F0:DD:84:35:5E:A0:D0:EF:F0:F8:84
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 17CAAD9EAF4199B2849AFAE73B7800854537CC18
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3b9db74-79ec-48de-accc-1953404ac051.roa
Signing time: Sat 04 Nov 2023 00:00:00 +0000
ROA not before: Sat 04 Nov 2023 00:00:00 +0000
ROA not after: Sat 09 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ca:ad:9e:af:41:99:b2:84:9a:fa:e7:3b:78:00:85:45:37:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 4 00:00:00 2023 GMT
Not After : Dec 9 23:59:59 2023 GMT
Subject: serialNumber=5f505058e9ed280ee1e6946bd3a96d7d47e83b3eead4c8a229ae248879085cd4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:28:b8:46:8d:3b:e9:3c:65:23:54:ba:cc:
11:37:34:d5:67:17:74:8d:b4:3d:cb:be:34:41:f1:
27:5a:68:6d:6d:65:6e:b2:c2:db:ac:94:75:72:41:
1e:7c:60:17:b6:04:fd:d1:98:80:c3:96:b4:c4:94:
57:c3:85:39:1b:4c:5a:b9:8d:10:d0:0a:4a:94:aa:
67:63:75:77:e6:d8:f6:98:e4:ae:13:93:a2:9b:14:
b1:9f:5b:5f:73:04:6a:38:72:b0:f9:5f:6a:d6:e1:
64:cb:c4:8b:60:52:88:ef:c0:49:2f:c4:61:1f:1c:
4b:41:4d:4b:5c:b1:11:39:15:83:df:a5:b3:65:4f:
71:60:5f:fd:3d:6b:83:d2:f6:ae:68:4e:93:0e:f2:
e9:18:36:7b:8e:8c:14:1f:84:29:d6:55:19:74:13:
c7:5c:38:26:b4:76:cc:95:60:77:3c:0b:44:10:ce:
91:c2:b7:17:e5:84:4b:3e:ba:c6:e4:86:6f:6a:10:
82:37:97:b2:7e:df:a5:a3:cd:c9:ac:e0:d2:cf:90:
16:df:37:45:44:c5:bd:e8:10:20:5a:97:fe:33:d2:
2a:2a:b4:e3:78:c5:3e:4b:a2:e4:ce:4d:8b:a8:4e:
c2:8f:c9:4a:c6:1d:39:38:a7:ae:58:92:65:0a:46:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:C2:35:49:D1:72:C4:EA:F0:DD:84:35:5E:A0:D0:EF:F0:F8:84
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3b9db74-79ec-48de-accc-1953404ac051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cf:3d:51:92:29:c9:25:12:29:d9:83:a7:36:a2:39:79:74:
bb:b6:f0:1c:39:d3:97:14:6d:2c:1a:48:ab:c7:70:1d:46:f1:
39:9c:c3:af:65:f8:75:82:bb:98:f5:4d:b5:be:9a:ee:2c:da:
68:73:27:86:fd:67:ca:66:4f:2c:8a:81:1c:db:d0:7a:b4:45:
3a:a3:a7:ef:12:2c:d9:70:4d:28:a8:b8:cc:69:9e:da:a9:d8:
b3:9b:ed:1a:6b:cd:69:90:51:a1:31:8c:81:36:ac:54:75:e9:
64:49:db:46:d0:64:f3:61:11:53:c7:c4:80:84:e0:4a:68:d6:
0b:2d:da:98:e9:55:d3:a4:25:53:6b:27:c7:cf:90:87:4b:43:
6b:76:ea:28:c2:67:ce:fe:bd:05:7b:e9:99:6b:37:85:97:ec:
76:d8:82:a4:54:bb:c9:2f:f5:03:16:be:25:2e:ac:85:95:dd:
28:7e:db:5c:73:e6:69:29:d0:2d:8c:05:82:e1:25:2f:2e:ce:
bb:79:b2:d9:c4:14:f8:ad:90:bd:76:67:a1:21:1d:c8:52:e1:
c7:51:83:08:e8:19:2c:b8:34:e0:49:62:c0:3d:56:5b:74:70:
64:b0:aa:c8:91:b5:d8:b1:ee:ca:14:bd:ee:1a:9c:ad:c8:bf:
8f:ce:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-ams.rpki-client.org