Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9aa8296-64f3-4151-8663-effb15261e5f.roa
File: f9aa8296-64f3-4151-8663-effb15261e5f.roa (raw, json)
Hash identifier: aogd4r66dWWvhFxrMYe5zcqDXqjNu/zauViDMSZYX+0=
Subject key identifier: 4B:AB:B0:41:A0:1F:C9:CB:AC:23:C7:E7:9B:39:57:E1:70:08:08:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 31E729BCFE34F201E7A1EDDD8F99DE9841B5E21D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9aa8296-64f3-4151-8663-effb15261e5f.roa
Signing time: Sun 03 Sep 2023 00:00:00 +0000
ROA not before: Sun 03 Sep 2023 00:00:00 +0000
ROA not after: Sun 08 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e7:29:bc:fe:34:f2:01:e7:a1:ed:dd:8f:99:de:98:41:b5:e2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2023 GMT
Not After : Oct 8 23:59:59 2023 GMT
Subject: serialNumber=f71a972d8098d1d0af26b85f39aebfd2d4ce1f5981942894fcd8845ff392ec15, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:b0:5a:b8:38:45:14:0d:35:ab:6c:8f:60:
ed:7a:05:7d:af:9e:90:40:dc:62:a1:d5:e5:e6:02:
4b:0a:9f:53:4f:7e:8e:58:69:8b:d2:2a:2e:28:94:
f0:a0:53:ae:be:40:ec:73:50:9f:3d:e5:56:e1:40:
9f:99:71:ff:52:49:da:8d:30:0e:d0:34:12:a9:83:
5d:40:36:ee:43:6b:73:e0:af:ea:ac:a6:64:2f:2c:
20:a0:4f:aa:27:3a:cd:29:1b:eb:52:f5:a7:a4:ab:
87:dd:d5:46:3c:52:8d:ba:ad:ca:a8:f6:a7:d2:bd:
96:1a:25:1d:61:37:e4:cd:77:8d:15:59:d4:93:05:
57:6d:07:46:8d:dd:11:c2:a3:20:b1:a5:2a:22:c9:
17:3c:2f:40:9f:50:45:f9:4e:b4:5f:cd:70:a2:05:
78:b7:56:6f:91:fe:bb:39:fd:95:05:d7:63:b7:ad:
3a:d7:80:c2:12:e4:60:d7:70:6d:b4:40:93:7a:27:
8f:45:9f:17:05:f4:4c:c4:2d:df:27:67:da:25:37:
c9:f9:b7:c4:c1:e7:ac:f8:b3:f7:36:a8:96:c7:98:
22:cf:89:14:03:cb:e7:34:78:86:d8:91:11:67:b1:
83:b8:0d:a3:01:bb:0c:0e:16:62:56:6e:8d:95:f8:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:B0:41:A0:1F:C9:CB:AC:23:C7:E7:9B:39:57:E1:70:08:08:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f9aa8296-64f3-4151-8663-effb15261e5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d8:75:89:e4:3f:f2:51:1b:61:bb:cc:41:11:88:92:22:34:
47:5f:8d:c4:c4:8d:b8:35:35:63:cc:5f:48:d0:0d:05:f9:44:
4e:db:36:81:e3:41:aa:a5:e2:4c:b7:e1:f4:de:17:56:f9:77:
cf:04:6c:b1:a4:fa:7b:e5:02:ce:86:b3:42:0f:ab:85:db:1c:
b5:12:3d:e9:6d:2e:09:eb:4e:31:3c:9d:e5:1a:f9:95:0f:1e:
62:ce:de:7a:9f:f7:de:82:43:6a:c8:ab:df:5b:19:05:c3:f1:
e7:55:e4:96:b6:ae:4c:ce:9d:b2:5c:43:2e:15:9a:0a:52:fd:
e1:74:47:b3:a0:5f:52:d4:6a:a8:9a:65:be:86:d0:46:70:2b:
ca:46:31:12:3d:cd:05:86:0a:fc:21:c0:09:39:08:a2:61:2e:
dd:b6:ba:47:b9:fc:f6:2e:45:29:76:2a:0a:8c:3a:cb:f0:4a:
4c:25:8f:08:57:97:19:4b:65:d9:89:38:6c:e4:26:83:89:ad:
f8:15:8c:ad:88:dd:7e:7f:04:8a:4b:cb:b3:e2:bc:f4:d2:ee:
b6:90:72:f1:02:27:17:da:38:68:db:c9:32:37:6f:ef:6f:0e:
40:46:08:56:2e:32:e7:3c:99:49:70:07:fa:79:67:04:bd:7d:
c1:1a:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-ams.rpki-client.org