Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/078628dd-fb42-4131-8215-44a39ba24f8b.roa
File: 078628dd-fb42-4131-8215-44a39ba24f8b.roa (raw, json)
Hash identifier: notenNk7AY8boHApJuTsTRVOrukfznPkgc10XWZXg3Q=
Subject key identifier: 85:F0:43:EE:FD:27:A5:1D:2B:B5:97:28:02:81:C0:FC:2E:59:DE:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 31BAF7B85DCC612210C199DE83ABE476C4265376
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/078628dd-fb42-4131-8215-44a39ba24f8b.roa
Signing time: Tue 11 Jul 2023 00:00:00 +0000
ROA not before: Tue 11 Jul 2023 00:00:00 +0000
ROA not after: Tue 15 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ba:f7:b8:5d:cc:61:22:10:c1:99:de:83:ab:e4:76:c4:26:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 11 00:00:00 2023 GMT
Not After : Aug 15 23:59:59 2023 GMT
Subject: serialNumber=4b7115db517adea849db6837cd28b712f5d0402f1883e28bb1fbda4835f037e6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:84:1e:61:9f:e8:e3:13:cc:f1:49:7d:e5:
2b:bf:fd:bb:14:90:8c:06:74:f0:bb:c4:61:a5:d9:
2f:d8:3b:ff:62:94:48:de:85:c0:ea:5a:a2:2a:dd:
0b:f3:3c:15:ef:ef:ed:be:74:f7:69:92:10:f4:83:
93:f6:4c:d2:90:04:5a:3b:d6:25:96:5d:67:16:cd:
89:50:be:26:20:a7:06:43:44:92:05:66:2a:13:46:
af:1f:0b:e2:fa:7d:25:8d:01:63:0d:13:13:78:54:
f3:68:0e:18:0f:ac:08:62:3a:65:cf:bf:45:4c:1a:
bb:c4:35:5e:98:da:f3:4c:59:06:d3:10:42:39:69:
6b:87:a3:a7:2b:03:93:6f:52:38:46:6f:c8:eb:11:
2e:cc:99:3f:ee:96:b3:d9:82:c7:8a:44:43:40:56:
1e:1d:40:c9:17:cc:84:ac:6c:b7:b4:0f:5f:28:1f:
ac:93:a1:53:c4:7a:e0:e2:a7:ab:96:37:6e:44:c3:
05:97:7b:33:07:29:19:d0:bb:e8:89:f6:14:90:7c:
97:3b:a0:1e:bd:74:70:df:13:52:8f:34:c6:95:88:
9c:ce:8d:b9:f3:3c:8e:f3:22:ad:64:48:e5:6b:a3:
54:38:11:ba:75:a8:a5:77:71:9f:07:98:84:04:b4:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:43:EE:FD:27:A5:1D:2B:B5:97:28:02:81:C0:FC:2E:59:DE:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/078628dd-fb42-4131-8215-44a39ba24f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c2:d0:4d:e6:9f:9d:16:79:c9:7a:68:81:67:f3:fe:9f:11:
b9:1c:d8:e7:af:58:1f:4b:3d:07:c5:91:da:59:3f:c7:15:36:
04:c0:a8:bc:5b:19:6c:4b:c4:5f:3b:3f:ed:72:8b:db:1a:05:
42:0a:35:04:60:89:da:81:09:4a:04:fe:dc:9d:78:1d:51:63:
50:af:c0:e4:77:31:76:ee:9b:ec:46:34:05:27:c4:72:83:77:
fb:2b:f2:61:1e:50:49:bc:d3:07:c3:2f:91:c3:c6:df:28:4a:
29:48:6b:87:21:86:0b:fc:8c:06:e0:b8:a6:3a:2b:1f:98:99:
33:89:64:0b:37:fa:2e:68:e7:2a:b2:3f:09:af:96:ab:bc:8e:
67:57:7c:6e:53:6b:89:24:9a:d3:13:cc:75:f8:97:63:cf:b6:
b8:f1:3d:ef:6f:10:fb:f1:0e:57:96:02:55:10:87:70:d8:fb:
e1:da:fa:04:dd:e6:6e:e4:78:48:02:39:41:18:af:08:49:64:
a0:2b:a5:a2:2c:71:10:d7:01:98:11:05:c6:70:88:78:16:9a:
e6:ab:20:d5:32:88:dc:88:6b:ad:ba:5b:a2:61:6b:fc:3f:db:
85:2c:98:66:bf:ea:c4:9a:fa:66:d4:09:3d:85:76:0b:a6:6e:
4c:14:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:05 2023 by rpki-client on console.sobornost.net