Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0acb9e94-8ff5-40a1-af72-9b5999dcbab0.roa
File: 0acb9e94-8ff5-40a1-af72-9b5999dcbab0.roa (raw, json)
Hash identifier: vTfOLxxxsR0qlWu72Xwvw5Bc4Be6/C6HzaDqb2kE3r0=
Subject key identifier: 0B:BB:A6:30:C3:9D:9F:2A:AC:5B:E5:39:B9:18:ED:D3:22:BB:8E:B1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0B6D2FA88CA797CB79837840E672D600C9E18188
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0acb9e94-8ff5-40a1-af72-9b5999dcbab0.roa
Signing time: Wed 04 Oct 2023 00:00:00 +0000
ROA not before: Wed 04 Oct 2023 00:00:00 +0000
ROA not after: Wed 08 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6d:2f:a8:8c:a7:97:cb:79:83:78:40:e6:72:d6:00:c9:e1:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 4 00:00:00 2023 GMT
Not After : Nov 8 23:59:59 2023 GMT
Subject: serialNumber=13e8b24520da353802adf64471b9a787d084dbf2de089621bdb03183241b8d47, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:69:78:f2:35:62:61:b9:b5:41:be:41:48:
54:38:8f:2e:3a:e8:87:d6:bd:f6:27:5c:9f:16:df:
c1:eb:82:18:6e:f5:72:6b:bb:52:fb:c1:bc:ec:ce:
9d:31:cd:b7:24:25:d6:ed:ba:25:03:95:40:9b:15:
18:f2:48:0f:77:f6:cf:60:f3:65:f1:90:ee:76:c8:
5f:8e:8a:68:39:1a:de:24:e5:f0:91:15:07:d2:48:
61:ff:05:e7:91:ef:b1:0b:8e:02:75:f3:d7:94:cd:
f6:a7:7d:c4:f8:63:d1:36:b4:52:57:6c:0e:5f:c6:
48:b0:a4:0f:91:d7:54:fb:7a:13:87:50:44:83:2f:
31:2b:bb:9f:1a:ea:cc:30:6b:5c:8c:a7:2d:33:9b:
55:e6:83:25:99:cc:d5:28:96:b0:31:b5:17:91:f5:
02:34:04:a1:06:14:60:6b:a8:82:22:d7:e3:61:f0:
f4:18:35:4e:e3:39:d5:83:54:90:44:14:78:f1:bc:
6f:33:65:bd:fd:4c:06:de:68:22:52:b7:85:7d:09:
2c:9d:11:cc:f7:36:f6:fa:93:85:a5:b7:5b:65:00:
03:a3:7d:19:ca:0c:48:fc:95:23:6f:9b:31:c4:4e:
a2:72:88:7e:43:fd:6e:0e:db:b7:fb:0e:22:7b:e3:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:A6:30:C3:9D:9F:2A:AC:5B:E5:39:B9:18:ED:D3:22:BB:8E:B1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0acb9e94-8ff5-40a1-af72-9b5999dcbab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2e:83:11:63:d8:c3:4d:34:22:4f:55:fd:64:4f:ac:8c:ce:
84:21:cd:8d:c5:44:f0:d5:34:f6:bf:c9:38:1c:00:f8:7e:f7:
6e:3b:de:13:8d:c7:0d:0d:54:50:2b:26:fa:44:eb:ec:90:18:
cc:7f:0c:2b:84:a1:15:3c:7e:63:77:25:a3:bc:c3:99:2f:32:
08:e8:f0:5a:e4:d8:f8:e2:f7:d6:0f:9c:36:b7:99:67:9c:fe:
27:fd:be:13:fe:37:18:4f:81:3d:48:38:ac:8a:37:65:9b:18:
46:54:72:a0:10:5e:66:f8:89:f9:07:87:2e:d5:11:62:48:f3:
55:6b:40:5b:6d:23:77:aa:cc:bc:2a:4f:12:f7:2e:c6:f3:ca:
3d:59:f9:ee:60:50:49:35:d0:e5:b8:72:f3:a6:e2:db:0b:f9:
fc:cf:7c:b2:10:71:00:01:5c:f0:dd:57:21:a4:e5:89:c6:46:
6d:9a:36:48:24:60:02:be:90:81:75:ce:08:4e:e9:53:4b:3a:
2a:69:2f:24:30:9f:f0:32:1a:b2:51:5b:91:3c:1d:4b:fb:47:
cb:e9:73:ca:1a:40:90:46:ca:df:c3:cc:72:4e:c5:eb:4d:a6:
65:6d:e5:df:a6:d6:68:af:ea:51:2e:3d:2d:3e:58:b1:d7:61:
a6:d8:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net