Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e704082-6f9c-4e43-99aa-5c3486b6ea56.roa
File: 0e704082-6f9c-4e43-99aa-5c3486b6ea56.roa (raw, json)
Hash identifier: OlFHZO41PAavI0xZhE3nCus5pN9FsxxPDghXWsPFSTY=
Subject key identifier: DA:78:47:A7:9A:E0:74:24:DB:B0:8B:DD:E2:C9:E6:2F:CE:E9:7A:F2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 315079E99C532AC5D66851FB20CCE5F39B9DB7D4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e704082-6f9c-4e43-99aa-5c3486b6ea56.roa
Signing time: Thu 02 Nov 2023 00:00:00 +0000
ROA not before: Thu 02 Nov 2023 00:00:00 +0000
ROA not after: Thu 07 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:50:79:e9:9c:53:2a:c5:d6:68:51:fb:20:cc:e5:f3:9b:9d:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2023 GMT
Not After : Dec 7 23:59:59 2023 GMT
Subject: serialNumber=d5a4ee4acf67e7a3f8a337dbc85ce5d1e27edb49865a45d5fd3ef7e6b1bc7db3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:13:ec:0a:52:f8:ae:52:4c:81:52:04:87:
d1:af:04:f8:e5:66:d5:83:c5:89:f3:17:75:74:01:
a5:d0:3d:34:52:00:08:b0:bc:fe:46:1a:19:06:1a:
51:30:2a:12:f8:5f:9d:0f:89:8b:a6:80:f4:a2:53:
b3:0d:0c:bc:9a:1c:5d:b2:cc:90:92:07:4a:71:22:
f6:6d:9f:b2:bf:d7:56:2f:fe:8f:28:db:ff:88:69:
a5:e0:ef:26:ac:53:25:65:a3:31:cc:10:f1:09:13:
26:6c:65:37:57:73:22:9a:d8:9c:45:fa:8f:d0:3b:
1a:d1:00:26:ac:db:84:7d:f8:4f:a8:96:22:d1:01:
77:a5:61:91:78:be:ad:3f:3d:f1:23:ff:05:e7:15:
27:d0:a7:bc:12:2d:a2:85:08:8c:c8:81:5b:5c:62:
87:a4:2f:38:6c:16:22:2b:74:c9:ea:00:9f:26:04:
ee:6b:21:cf:bb:ac:7e:c4:8a:6c:ec:f5:5c:3a:df:
51:bc:e2:58:81:b0:29:c5:0c:b0:fe:9e:8d:84:9c:
08:ea:a5:41:25:40:10:e2:d3:c2:ee:36:9e:eb:f5:
d3:51:b9:99:89:f1:70:67:94:87:8c:31:54:ac:15:
cb:47:e8:2e:40:00:67:02:fc:8b:65:4b:88:7c:ed:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:78:47:A7:9A:E0:74:24:DB:B0:8B:DD:E2:C9:E6:2F:CE:E9:7A:F2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0e704082-6f9c-4e43-99aa-5c3486b6ea56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7e:1e:93:69:62:d5:18:fa:0d:f2:62:c0:f2:7a:e7:f1:10:
5e:26:a5:ce:78:74:d8:be:4b:d6:ad:e8:c5:b7:81:6a:f7:22:
7b:04:75:f1:e3:7d:f5:45:b0:db:50:8f:de:01:5a:98:c5:25:
ca:db:e3:7e:59:dd:9a:ec:88:6e:e2:db:7c:6e:25:27:ef:d7:
2e:9a:af:36:5f:ec:32:42:be:e1:17:7b:b3:f6:17:35:93:7b:
39:34:77:4e:63:15:48:1a:ea:c5:b4:af:17:2f:45:a1:5d:37:
bc:99:4a:f9:91:06:d5:ed:b9:14:a3:16:88:68:70:89:f7:02:
ee:ac:91:0a:22:48:a9:de:94:36:59:ea:de:04:74:7e:66:aa:
5f:ad:2b:64:bb:cd:73:a5:85:5c:6f:c4:30:0f:3d:a8:e9:d4:
1a:29:27:7a:ba:3c:34:da:df:65:64:06:8f:ad:73:1c:9a:49:
c8:35:a5:c7:3c:24:f8:75:3d:1a:75:40:5f:94:50:5a:3d:37:
02:94:88:e1:5e:81:6b:36:fc:70:cc:e5:10:95:fb:64:16:73:
58:e6:b3:06:7d:a6:ac:a8:21:8c:71:a4:21:15:48:d5:4a:dd:
ae:54:0a:b4:00:8e:ae:98:be:41:69:5d:80:30:49:11:cd:06:
19:c9:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net