Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f61c2880-1f5c-423c-847d-649919cb19e0.roa
File: f61c2880-1f5c-423c-847d-649919cb19e0.roa (raw, json)
Hash identifier: x+ZHscLv4XZxAhisnIrp56ZjUG8nXEcyKGZNEStwP+k=
Subject key identifier: 83:29:56:69:9B:07:6C:BB:61:E9:05:99:B0:2E:5C:DB:EB:F5:EE:D6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6A537969DF93DA1A29A1A232BBE5F233371F9FFA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f61c2880-1f5c-423c-847d-649919cb19e0.roa
Signing time: Thu 03 Aug 2023 00:00:00 +0000
ROA not before: Thu 03 Aug 2023 00:00:00 +0000
ROA not after: Thu 07 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:53:79:69:df:93:da:1a:29:a1:a2:32:bb:e5:f2:33:37:1f:9f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 3 00:00:00 2023 GMT
Not After : Sep 7 23:59:59 2023 GMT
Subject: serialNumber=ac25d569465c04c559bc2e2a54213e361d21845d96992182101fad08e258606d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:8e:48:2a:73:02:23:6c:da:28:0a:66:17:
18:19:28:5e:41:e1:6a:96:46:88:58:ee:4d:1a:92:
85:de:81:9f:05:2c:46:97:a7:ff:43:f5:23:bd:c1:
87:0d:4a:b4:39:e9:8a:b9:71:55:42:0f:55:c2:40:
47:1a:0c:20:20:97:6d:03:b1:49:75:61:60:37:25:
d8:ab:2d:a8:f5:a8:ff:9d:52:ac:89:44:bc:d0:f5:
d3:95:fc:be:1c:e7:07:d8:13:32:85:a5:f6:eb:5a:
03:e1:df:e7:ab:4b:50:b0:0b:fc:99:74:89:70:5a:
58:04:1f:1e:18:05:3c:6e:f5:66:88:81:13:07:3a:
18:bd:2f:bc:12:5a:66:60:47:c9:b7:fb:94:7f:3e:
bb:87:51:78:d7:e1:89:fc:a3:8e:e2:6d:5f:49:96:
7e:14:d7:d1:a5:b1:c9:dd:19:73:a3:6f:83:37:b3:
55:48:3a:ff:ac:a0:7d:b1:83:d3:bb:1b:f1:cb:2c:
0c:a7:e5:7f:34:10:52:3c:ef:79:51:cf:ff:f1:96:
ed:d5:76:d4:ff:9f:e2:27:42:73:f2:cb:0d:71:36:
bd:21:06:b9:2c:21:eb:5a:12:b4:bf:00:2a:c1:39:
cf:d4:ab:22:4b:55:18:48:6d:09:99:01:e8:53:c7:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:56:69:9B:07:6C:BB:61:E9:05:99:B0:2E:5C:DB:EB:F5:EE:D6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f61c2880-1f5c-423c-847d-649919cb19e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3c:5c:c6:01:4c:2a:57:33:93:92:a6:3b:65:1e:94:52:ec:
06:77:bc:30:fe:38:a2:01:b0:d9:42:de:a5:45:fd:01:dc:27:
2a:b0:9b:bf:9a:eb:dc:2b:f3:7d:d9:d6:5d:18:ed:39:c9:f2:
9e:c9:bf:74:0e:7a:6a:1f:02:cb:c8:58:50:30:43:d0:cf:bb:
d0:ac:5b:de:4d:ae:76:95:e9:02:9b:88:78:1b:a0:c4:72:6f:
36:fe:f2:ec:74:f4:ae:3d:e2:11:6f:59:42:fc:43:2e:63:16:
df:ba:7f:c3:d7:32:df:5e:cc:fe:1a:7d:01:07:1a:c8:68:48:
7a:8c:e8:37:ba:92:9d:cf:07:f5:0b:1c:3e:df:2a:2c:0b:84:
15:e7:a9:56:93:c8:94:b8:da:16:65:15:ce:5a:66:68:fa:be:
ec:f0:6c:88:41:b3:15:97:e9:7c:2e:ab:c7:11:48:37:61:a8:
6f:e5:e5:d5:2f:75:56:1b:a2:f6:64:31:32:57:36:c7:b5:4b:
76:4a:dd:8e:f3:1f:3a:4a:67:8d:08:8f:81:a1:ab:cd:75:25:
60:72:b8:62:8a:bd:57:2c:25:99:4f:f4:d8:97:77:13:13:1a:
5a:c6:5d:9a:0f:cf:12:d6:05:78:2f:83:ff:f8:1e:22:85:57:
f7:85:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:50 2024 by rpki-client on console-fra.rpki-client.org