Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd40fd0f-c122-4d6c-8e13-4889b6f95667.roa
File: fd40fd0f-c122-4d6c-8e13-4889b6f95667.roa (raw, json)
Hash identifier: U3+oysed51+BUgR2493ru4ZhJW5sydXtRPKZKmi3grM=
Subject key identifier: E8:7A:B0:84:3D:32:82:FA:DC:11:DC:20:BC:C2:0E:99:A2:9D:D2:6C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 354E5EB87AE1626C2FCC8CCDBD07F6957BA26466
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd40fd0f-c122-4d6c-8e13-4889b6f95667.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4e:5e:b8:7a:e1:62:6c:2f:cc:8c:cd:bd:07:f6:95:7b:a2:64:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: serialNumber=bde399f611b4e061aef7a172c762519335fb7c668a9433df279a26738d684a9e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:48:20:2f:82:bb:87:fb:11:a6:eb:11:c7:
51:11:a3:8b:e9:59:1c:d8:29:f1:66:c6:90:24:20:
df:01:02:85:cc:20:84:6d:7d:79:b5:3d:03:9a:db:
e3:b1:b4:11:fd:1c:22:5f:1b:f0:a9:9f:86:8c:c7:
8b:f6:84:6a:02:62:a5:0d:33:2d:7e:cb:5f:d9:36:
2c:81:e4:b2:7c:17:2c:74:5c:91:04:30:53:b7:a2:
bc:f9:9a:1d:75:63:8a:b5:60:dc:9e:90:3d:ac:c3:
58:18:80:55:47:f8:33:14:c1:bc:a4:36:38:6c:61:
42:67:66:f9:4b:2f:11:09:1b:02:4b:27:55:eb:68:
50:d2:fd:c5:7b:ac:b0:a2:e1:13:74:bc:d6:02:ab:
04:34:b7:28:ac:72:7e:26:7a:62:a8:a1:5f:94:da:
84:58:f6:a6:06:cd:4d:9b:4a:3b:2a:2b:8a:83:62:
79:d5:fe:1a:fa:1e:f3:a3:80:d9:73:f3:d8:f0:c8:
1d:85:67:e5:84:46:b8:46:8a:bc:96:e1:a9:81:26:
11:51:82:aa:89:06:0d:d3:94:3d:6b:69:d0:da:d6:
d0:3c:36:34:63:38:be:20:6a:e9:96:ec:4a:b0:59:
99:a8:b7:d4:36:b3:33:df:45:f4:9a:76:c1:69:87:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:B0:84:3D:32:82:FA:DC:11:DC:20:BC:C2:0E:99:A2:9D:D2:6C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd40fd0f-c122-4d6c-8e13-4889b6f95667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b9:62:8b:34:71:b2:19:99:f9:48:18:2c:81:71:a3:2b:d5:
50:c1:6c:e5:57:a3:78:9d:8e:75:9e:ba:6b:0b:26:e3:26:24:
34:9f:e2:04:c4:d8:63:23:46:fc:48:ae:c5:82:70:eb:00:4e:
68:b5:8d:b4:50:bb:8b:d4:0a:c9:f4:db:9c:7e:1d:34:05:bd:
2c:e8:56:bf:a9:52:c2:2a:21:13:86:69:1a:dc:f9:20:90:30:
aa:2f:43:5b:2b:0f:2d:90:21:93:fd:75:03:8c:7d:0e:ad:26:
8c:32:1d:0a:43:2e:cd:62:86:d8:1d:73:e7:d4:ae:01:3d:9c:
fc:9a:b0:57:8f:67:23:f8:00:d0:b2:48:18:5c:5c:1d:28:31:
70:ac:d9:0e:e4:5e:a5:0b:b1:41:10:8f:08:65:c8:8e:0f:b5:
b4:3e:f7:f6:a2:95:1e:3d:31:dd:32:c9:76:ae:8c:6d:b6:86:
af:63:f9:8d:49:66:bf:84:f8:8c:3a:8f:d1:57:4b:93:f7:0d:
ab:a1:0e:6b:09:cd:a1:6c:0d:24:a2:18:3c:7d:b2:a8:25:41:
0d:54:49:04:25:5f:dc:06:93:74:63:77:96:66:93:7b:e0:af:
33:9a:60:5f:97:78:3e:c9:7e:1c:01:bc:73:93:3b:3a:d8:fe:
2e:98:b9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:40 2024 by rpki-client on console-ams.rpki-client.org