Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fae1f6d4-0a8f-4fc5-892e-0bb6e4f8d956.roa
File: fae1f6d4-0a8f-4fc5-892e-0bb6e4f8d956.roa (raw, json)
Hash identifier: pG9FRnW2hLqvjWsAP6QbvO4zRrq5pnK+tjMFNSQ3E/I=
Subject key identifier: 30:EF:35:7A:5B:72:BE:8C:54:73:1E:6C:77:F2:ED:00:CA:1C:C4:7C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D927656BB9597D50618361373140B5A68C194C0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fae1f6d4-0a8f-4fc5-892e-0bb6e4f8d956.roa
Signing time: Sun 30 Jul 2023 00:00:00 +0000
ROA not before: Sun 30 Jul 2023 00:00:00 +0000
ROA not after: Sun 03 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:92:76:56:bb:95:97:d5:06:18:36:13:73:14:0b:5a:68:c1:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 30 00:00:00 2023 GMT
Not After : Sep 3 23:59:59 2023 GMT
Subject: serialNumber=3f77024e3d44febfe5f0af588753f5fac9acee02aa5d1ce984c8036e1e2ec40b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:df:d9:0d:01:cc:4c:ef:b9:55:2e:34:11:
2d:05:20:29:b4:8b:dd:30:1b:fe:35:c8:9a:e0:43:
5e:25:80:c6:36:76:da:ab:e0:6f:60:30:8d:b1:9e:
94:06:8b:03:de:cf:08:53:5b:36:2e:5a:9b:0f:20:
72:b0:28:e9:4f:db:2f:4e:28:c7:c4:68:16:20:b3:
28:1e:81:9b:b3:7b:6b:30:d2:f7:a4:05:3a:cb:5c:
41:bf:0f:92:25:58:f9:69:9e:46:6d:f0:01:e6:18:
a3:5e:c9:80:4a:60:b1:0a:f9:5b:b6:28:d3:77:26:
a1:95:ca:92:c2:40:b5:04:33:27:8c:52:23:1e:27:
34:f6:71:e1:03:f3:86:8e:24:ff:b8:d5:04:90:75:
39:f5:12:3a:31:64:df:ca:9a:45:25:4a:02:2e:08:
23:e1:84:1a:78:f5:81:0e:5e:1a:92:dc:b7:e4:71:
06:b9:f3:9d:31:dc:61:6d:a0:05:e3:92:f5:a0:ac:
bc:9b:96:c7:32:86:77:e0:69:22:c5:5b:ca:5b:50:
77:81:7f:a1:0b:29:a8:32:94:49:1b:f1:44:86:c2:
bb:4e:5a:58:cd:2c:b2:fe:b9:be:17:8e:64:e6:66:
c0:93:6f:a2:9b:42:78:f5:a0:81:08:ae:b3:ec:71:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:35:7A:5B:72:BE:8C:54:73:1E:6C:77:F2:ED:00:CA:1C:C4:7C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fae1f6d4-0a8f-4fc5-892e-0bb6e4f8d956.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8b:d5:94:c6:a2:66:26:c7:77:e5:e7:a2:db:be:fd:61:8e:
b8:92:94:b3:ee:40:ec:b4:4e:e0:76:58:3b:45:79:83:63:06:
ae:b0:2b:1d:c5:51:e7:fe:71:bc:b2:d9:17:de:78:fc:cd:b4:
fb:95:23:45:21:11:bc:b2:5d:23:e9:b5:a0:85:de:51:88:a1:
cd:b1:4d:e7:26:13:80:ac:80:e8:ed:cb:38:56:3a:d1:97:1f:
30:84:53:85:ab:71:c6:36:23:3b:05:9a:e7:81:1a:ee:52:9d:
03:cf:48:36:06:16:1b:df:36:c3:52:26:55:cb:c2:41:25:f5:
6c:b0:6e:8c:cc:b0:b0:5f:2b:26:e5:e1:0e:51:ff:53:39:b8:
60:22:10:07:d6:2e:30:8a:7f:bf:52:2e:f8:2a:02:62:c3:fe:
09:7d:f5:27:72:f4:01:02:f8:d5:33:42:a7:be:8c:b9:45:ea:
64:3d:55:76:d1:66:df:1c:e9:37:65:b9:61:c2:ec:be:d5:39:
1a:d5:bf:77:02:fc:34:66:e2:f9:cb:33:68:38:c1:ea:24:da:
1b:68:fd:36:e5:c1:fb:98:cc:b8:a2:58:91:de:e6:08:ba:0d:
ef:a5:97:d4:d9:b4:4f:82:6d:37:c3:1b:dd:1e:58:56:45:5e:
ca:da:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-ams.rpki-client.org