Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/111f813d-12d7-4433-b066-5a7f3d3ac4a4.roa
File: 111f813d-12d7-4433-b066-5a7f3d3ac4a4.roa (raw, json)
Hash identifier: VL7NAW5fh8NdWrG06gvFJ0ny0QSiByJuTeppibopm/8=
Subject key identifier: 8A:1C:67:06:94:52:AA:49:C8:62:62:29:DF:A3:AF:E5:83:8D:0D:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6398530B43010A24AC7ACE7E4B2B0A4106D979A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/111f813d-12d7-4433-b066-5a7f3d3ac4a4.roa
Signing time: Fri 07 Jul 2023 00:00:00 +0000
ROA not before: Fri 07 Jul 2023 00:00:00 +0000
ROA not after: Fri 11 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:98:53:0b:43:01:0a:24:ac:7a:ce:7e:4b:2b:0a:41:06:d9:79:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 7 00:00:00 2023 GMT
Not After : Aug 11 23:59:59 2023 GMT
Subject: serialNumber=2ab1dcc75e0b94ab187186745aa82e73e7bb93ff3c34d90481e2d155b3c4db41, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:97:3e:cf:e1:19:b1:c7:49:77:85:42:46:
bc:5c:ae:ed:54:d7:50:d5:33:13:11:30:7b:ad:84:
e5:d6:35:e3:72:98:3a:4e:d9:80:a0:ac:88:2d:ae:
a1:5a:a2:11:8a:c1:19:e1:7c:69:bb:55:66:a7:69:
31:ad:64:45:e8:11:a7:7e:3a:a7:09:51:3f:30:0e:
f4:95:3a:f7:2d:85:57:9b:f3:20:fc:db:8d:69:4b:
8a:31:83:04:bd:c8:4b:99:c8:d1:99:24:ff:2d:dd:
77:71:ff:2f:a5:fe:62:db:f1:af:29:85:e5:7e:2d:
4d:6e:31:b0:8d:71:f0:96:55:29:c5:d4:4a:7e:e5:
63:5a:e3:e9:c0:96:fb:05:55:8f:fe:56:e6:1a:14:
9d:97:13:31:8a:42:ed:a5:48:f3:66:41:6b:dd:ed:
73:14:6e:3c:7d:5d:48:6d:83:ad:59:9b:0c:c4:89:
4e:24:b6:b3:8f:00:5e:2f:5f:80:28:4e:87:49:fa:
a5:92:a5:84:02:89:c2:69:6e:ba:31:fb:65:1b:98:
11:58:2d:da:f0:73:43:69:c8:e4:b9:f6:cc:1b:66:
81:d3:f2:1b:fb:c0:3d:f8:a2:3b:f2:b9:8b:8b:72:
32:b3:52:6a:08:97:08:6a:58:60:06:98:be:15:fb:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:67:06:94:52:AA:49:C8:62:62:29:DF:A3:AF:E5:83:8D:0D:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/111f813d-12d7-4433-b066-5a7f3d3ac4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:61:fb:59:10:47:0c:5c:f1:34:ad:29:0e:8e:18:12:8a:50:
a7:cb:3a:3e:44:39:df:da:43:06:ee:ac:ad:99:96:70:f5:bf:
91:d2:d3:72:33:6a:29:b6:1c:0e:1d:b6:ce:d0:24:ac:f4:27:
7b:13:3c:52:3f:73:95:6b:08:d3:40:ea:51:56:d5:9e:ab:4a:
be:8f:9a:42:bd:3b:18:7f:05:c8:5f:7a:fb:a4:0a:35:e5:5b:
c2:66:db:8b:d8:b4:50:15:9a:6f:d8:d1:b7:c1:67:97:b3:fb:
97:05:bb:30:6d:5c:1b:e7:6f:70:a5:a4:91:04:3e:c7:a1:d8:
ec:e1:58:f4:b4:2d:ac:fe:86:da:32:65:fc:fd:e7:35:e8:62:
a5:4c:04:24:93:f8:bc:59:e4:f3:19:83:cd:ec:7a:7b:25:51:
5c:15:6e:d7:4d:52:a7:6d:e2:b0:e7:9f:52:c1:41:4c:a0:c2:
f9:eb:98:af:07:60:87:10:3f:27:29:c2:3a:5d:e4:77:03:f9:
a3:54:8c:9c:8a:ff:28:da:1e:c1:bb:e8:be:fd:97:f2:d1:2b:
10:84:ac:c3:cc:46:3e:32:0b:da:39:b3:b0:e3:9a:69:f7:be:
c3:44:80:96:a0:89:be:27:1c:e6:2b:8c:0e:96:8e:02:9c:64:
82:76:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net