Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0ee06b20-f90e-4c02-95a7-22265694b180.roa
File: 0ee06b20-f90e-4c02-95a7-22265694b180.roa (raw, json)
Hash identifier: TgCJ0cc/AvjG6cm3ttfi0IGo6+opNBo2mzAcvt/FsLk=
Subject key identifier: 9C:CE:D4:70:51:E0:77:93:99:47:01:3A:AA:2D:39:9D:B8:BE:02:2B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5C3710F1A26467FEBB97338182CC24D6D0D00B0D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0ee06b20-f90e-4c02-95a7-22265694b180.roa
Signing time: Tue 11 Jul 2023 00:00:00 +0000
ROA not before: Tue 11 Jul 2023 00:00:00 +0000
ROA not after: Tue 15 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:37:10:f1:a2:64:67:fe:bb:97:33:81:82:cc:24:d6:d0:d0:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 11 00:00:00 2023 GMT
Not After : Aug 15 23:59:59 2023 GMT
Subject: serialNumber=f6b741e45606b28c2bbfeb11cd4a4a8b4a1609f3093cd96e20c1e932630da538, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:76:f3:b6:31:f3:1c:25:98:39:9a:bc:f3:
98:30:44:a1:29:6f:a0:0b:9a:d8:72:cb:e4:24:69:
08:f7:eb:3d:1b:0e:1e:65:10:31:dd:f7:2f:f7:bd:
0e:d5:18:e7:d6:36:e9:d4:43:59:9c:da:61:d9:f0:
20:11:89:bb:50:69:f6:c3:20:79:3f:d7:05:d3:e5:
9a:b3:56:d6:e2:3f:f4:81:d9:f1:06:f1:30:b0:63:
20:8a:bf:8c:fe:49:f2:9c:22:e1:06:06:a0:b4:09:
04:cc:c5:da:96:79:8e:4a:21:f9:f3:9d:e5:68:25:
fe:be:e1:df:7c:fd:e8:74:86:b5:c1:9b:00:bc:7d:
e7:07:96:05:db:a5:f9:23:3b:51:f5:86:75:d8:5f:
bc:ad:09:00:cf:8d:a3:a8:f6:92:8d:45:fe:63:46:
9f:10:c5:ca:ff:d0:4d:bf:de:27:af:4a:67:1f:d1:
b9:e6:4a:5a:54:c4:d2:23:71:c5:f4:73:df:f0:8a:
4e:cd:66:5b:51:3c:75:4b:24:c8:15:17:1f:2c:68:
96:4e:f9:eb:b3:5c:83:ce:4e:48:d0:96:7c:5f:00:
3a:24:02:e6:27:8e:68:90:3f:f3:52:79:1c:d2:85:
d3:1e:30:fb:c9:78:fd:70:13:e2:5a:f4:74:bd:fd:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CE:D4:70:51:E0:77:93:99:47:01:3A:AA:2D:39:9D:B8:BE:02:2B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0ee06b20-f90e-4c02-95a7-22265694b180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7f:9d:41:11:b0:04:e0:e6:5e:46:b1:02:58:0d:2a:a4:23:
7a:39:36:ca:fd:e5:b7:0b:14:42:e4:c2:e8:f4:b2:21:1a:73:
1c:79:ef:53:56:26:66:fd:92:de:34:4e:19:08:3b:21:d4:07:
81:1b:d5:c2:7f:ec:4b:a1:3e:b8:4d:47:06:ee:dc:05:be:6c:
97:14:c2:22:dc:2c:c3:4d:86:85:0e:40:3b:8e:bf:df:f8:0c:
4b:32:c6:3f:9b:e7:e3:b6:72:85:b6:61:0a:69:d6:36:7a:7e:
9a:46:4d:32:12:b8:4a:21:31:56:ca:ba:9d:c7:d8:25:3d:46:
1b:48:c3:88:c3:73:cb:94:78:1c:9b:1a:5c:e1:29:93:ee:ab:
50:9a:cc:0d:8e:da:c4:1f:28:9f:3c:68:75:62:fa:95:cc:ab:
04:3d:5b:e4:f1:25:d6:03:3d:bc:03:53:c0:d3:78:1c:ae:07:
46:29:ab:d1:e6:b9:df:94:ca:87:2d:d0:09:75:76:0f:b9:cc:
23:de:b9:3c:8e:41:a6:4c:63:2c:77:d4:d5:5f:c2:68:ce:b9:
e5:72:4d:2d:35:8b:c3:56:0b:55:9e:c3:0d:fe:d5:9d:11:27:
0f:79:89:0c:ae:47:00:cf:96:e2:2f:dc:25:96:71:78:7b:f4:
f5:05:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net