Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04453813-0f4a-4758-b4b7-8c9314f53d1f.roa
File: 04453813-0f4a-4758-b4b7-8c9314f53d1f.roa (raw, json)
Hash identifier: inM80YWTzEJlQ7fFnG5xY8lQY90eMOzCYE/GWZBvE3E=
Subject key identifier: 13:E5:C7:BD:89:F4:9B:43:FC:FD:43:35:24:15:86:7F:2F:20:E3:B8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CC31F23A03615A55B54DB0C1362A197EF0FB628
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04453813-0f4a-4758-b4b7-8c9314f53d1f.roa
Signing time: Thu 05 Oct 2023 00:00:00 +0000
ROA not before: Thu 05 Oct 2023 00:00:00 +0000
ROA not after: Thu 09 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c3:1f:23:a0:36:15:a5:5b:54:db:0c:13:62:a1:97:ef:0f:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2023 GMT
Not After : Nov 9 23:59:59 2023 GMT
Subject: serialNumber=d73b050feb740a8c312bda3b9476a2c0d24b14e6a130e5ac3d3342e831c85bf1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:63:fa:36:03:ef:6c:33:47:56:68:38:21:
c4:00:2d:35:5a:b2:21:4b:e6:2f:ba:68:ad:30:21:
86:dc:0c:18:36:50:2a:b5:75:00:43:93:f2:c3:9c:
67:29:2d:b4:39:e5:7c:94:0a:43:9b:14:9b:67:c8:
64:ec:b1:2d:8d:99:5c:cd:cf:f9:51:ae:b1:0c:0f:
01:6e:0d:92:aa:52:2a:da:b6:22:8a:1e:ac:5b:74:
21:97:25:09:af:e5:47:00:6b:62:f7:5f:52:2f:6e:
d1:4b:14:db:58:b7:21:b3:6f:07:40:6c:dd:6f:80:
57:85:81:50:be:10:86:ed:81:0d:aa:5b:a1:ed:21:
cf:d3:0a:ec:85:b6:ae:42:71:b9:37:89:d5:b4:3f:
ab:11:8b:88:a6:09:dc:e9:d9:d2:d4:73:9b:7a:64:
24:45:a6:8d:6b:69:15:68:09:8e:c0:02:75:10:42:
f5:6f:4c:ba:03:9b:76:fc:8b:3f:d0:b7:6b:3d:8f:
15:0b:15:ff:78:bf:2e:52:00:80:48:3c:07:c7:6a:
0f:f5:ac:c1:7e:de:08:1c:2d:94:9d:8c:e8:f4:f8:
4f:d7:78:e4:94:c1:39:ad:92:1e:17:71:1e:9b:4d:
7b:b0:2f:db:c4:f8:9f:d9:7f:6d:c4:6f:c4:b8:b4:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:C7:BD:89:F4:9B:43:FC:FD:43:35:24:15:86:7F:2F:20:E3:B8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/04453813-0f4a-4758-b4b7-8c9314f53d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ad:f2:d3:58:64:a5:4c:da:fe:03:3c:5f:30:5a:56:4e:53:
25:ff:74:6a:77:53:64:37:51:98:b7:bc:fe:30:b6:94:c9:71:
4a:cc:46:2c:5b:74:bb:9c:68:4d:f8:b3:39:30:2d:eb:4a:34:
08:70:b5:00:1b:09:b5:43:27:ea:44:bd:cc:9b:96:55:39:7c:
49:9a:62:ab:3e:5c:05:c4:3f:f8:67:84:1a:b8:a2:27:7a:9c:
14:e6:8b:85:69:f7:bf:cb:30:d0:bc:85:f2:10:0c:bc:ef:db:
2f:be:e7:80:53:c3:00:13:a6:09:58:4c:9d:29:23:30:ea:83:
44:e4:36:8a:b8:97:a6:7e:e4:c2:be:0d:50:14:b5:2a:61:3e:
8a:0d:ad:ee:86:62:28:61:74:a7:b1:3b:38:e1:df:85:2c:9e:
3b:67:65:c5:1e:d6:e5:71:a4:66:73:b2:37:5c:ba:7e:5f:e8:
b3:d8:a8:c1:99:df:96:ff:3e:80:12:8e:f6:48:5d:90:e3:5a:
d5:eb:9f:1c:92:ee:5e:63:fe:67:98:91:fc:62:9a:35:db:ad:
7a:34:55:75:fc:78:d1:c1:41:6f:cc:ea:31:7b:f3:7b:75:f8:
62:89:82:93:01:2b:61:41:d1:ec:3e:d0:e2:15:25:15:d3:45:
f7:cf:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:05 2023 by rpki-client on console.sobornost.net