Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01bbe192-e158-425f-80c9-659b2cdc3e63.roa
File: 01bbe192-e158-425f-80c9-659b2cdc3e63.roa (raw, json)
Hash identifier: yqTuCALKyoCnkO4gDYga0a90OoXCE5qrpKV4TDExS9E=
Subject key identifier: 0B:D1:77:C1:65:19:C2:44:19:4A:3B:18:AC:40:00:0D:44:6D:8B:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0554270AD36E0F005B7256D16E2D4BA0462C8173
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01bbe192-e158-425f-80c9-659b2cdc3e63.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:54:27:0a:d3:6e:0f:00:5b:72:56:d1:6e:2d:4b:a0:46:2c:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: serialNumber=21e469ae2115f6351e7e7c370c763a0c8565ef8cd2ae8acaae2cff4c1ea6247e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:c3:3b:8f:cd:c7:e5:36:8c:7f:d1:fa:86:
01:88:30:10:cb:b1:4a:9c:e6:47:e8:64:e5:68:8b:
30:2b:e8:14:0c:54:91:70:72:b4:3b:78:42:cf:e9:
5f:af:f3:1b:aa:b2:08:ec:b3:11:4f:18:a6:88:26:
8f:58:51:3e:32:a4:3b:22:ea:82:84:88:48:30:74:
4c:4e:da:18:40:36:38:0c:1d:65:dc:f8:0e:cf:ad:
2b:04:66:45:94:1c:0a:5e:90:72:02:a2:46:3b:1b:
28:7c:ee:d4:52:6a:ce:1f:2f:48:99:23:be:b7:92:
37:ef:a6:27:64:b6:00:04:8f:ac:f4:58:e2:f9:fe:
94:bb:84:d1:9e:22:7b:cf:00:a4:d7:c8:fc:4a:b7:
7f:59:c8:3a:6e:f7:e9:57:00:fc:68:e7:a4:f2:da:
b1:45:63:e4:3c:7d:d3:0d:06:07:0f:85:0a:51:14:
5c:35:d7:15:1c:de:3d:0d:54:38:69:89:64:90:92:
a5:95:bc:9b:7e:cd:fc:21:90:a8:3a:c7:95:3c:47:
ee:4d:43:37:03:41:71:fa:79:8c:99:ae:38:06:8b:
c4:b0:74:00:c2:87:06:b3:ac:56:d3:d1:1e:ee:41:
c5:e8:1b:ea:55:6e:a9:da:63:08:23:22:83:66:c7:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:77:C1:65:19:C2:44:19:4A:3B:18:AC:40:00:0D:44:6D:8B:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/01bbe192-e158-425f-80c9-659b2cdc3e63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b2:f1:86:9c:9f:81:ad:6c:7a:88:63:54:80:bb:38:7c:2a:
49:da:43:7b:71:f5:8f:de:65:97:05:fa:67:25:2d:66:64:16:
ad:0e:c8:00:1e:94:46:9f:08:56:95:26:8a:ac:23:cd:6f:cb:
8f:7c:e3:58:6d:ae:85:fe:2a:3e:41:59:04:2e:7a:64:64:e5:
7d:d2:86:56:46:30:d6:24:17:2e:03:06:1f:bf:77:7f:fe:ee:
bf:ed:3a:77:f9:00:0f:5d:a6:9a:11:e9:90:ad:70:92:e1:84:
8e:3a:8c:5f:fc:b7:49:26:03:84:ba:13:8d:ae:98:11:aa:4a:
30:8e:3c:16:89:35:b7:d5:59:57:9c:70:3c:bb:09:5e:b0:80:
7f:bf:fb:00:73:3d:c7:4a:99:f8:8a:e5:83:8c:b9:e8:b2:9e:
0d:0a:d2:c0:b8:84:e1:f7:78:0f:5f:bc:1b:42:3e:35:bd:a7:
55:b6:5d:eb:36:f1:99:32:f4:f9:e0:77:04:af:60:a4:ea:53:
7a:0f:8b:9c:b2:d9:28:51:28:1f:d9:42:71:be:2d:bd:5e:75:
f5:18:8f:44:14:3d:d1:4d:43:da:03:3b:ff:52:20:28:a1:e8:
10:b7:01:82:2e:03:10:78:2a:12:0a:1d:65:24:6e:54:c9:0e:
fa:ef:af:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:05 2023 by rpki-client on console.sobornost.net