Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/13d794f8-2e39-450c-8d9b-0ffbf3fdef18.roa
File: 13d794f8-2e39-450c-8d9b-0ffbf3fdef18.roa (raw, json)
Hash identifier: YXrzl9YmUZ4xW1YIDEtxDKr0kOXhk50VJJ0rnU7NL7M=
Subject key identifier: 04:63:2D:03:47:A7:60:68:1E:A3:58:10:D9:00:8A:D1:96:52:F1:A7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 66CCB9FB6980A3D4940BE2D752FC5DB189117F8D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/13d794f8-2e39-450c-8d9b-0ffbf3fdef18.roa
Signing time: Wed 02 Aug 2023 00:00:00 +0000
ROA not before: Wed 02 Aug 2023 00:00:00 +0000
ROA not after: Wed 06 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cc:b9:fb:69:80:a3:d4:94:0b:e2:d7:52:fc:5d:b1:89:11:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 2 00:00:00 2023 GMT
Not After : Sep 6 23:59:59 2023 GMT
Subject: serialNumber=42d69408c8e0223143a9eed6074aa25f44376d85ed95dddfae701217203d562a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:9a:2a:1d:11:fb:7b:01:16:0b:4f:59:2b:
dd:c4:fa:b3:35:71:69:82:24:63:00:8f:71:25:91:
34:f5:f7:c5:af:60:eb:36:e3:51:06:23:5d:b0:84:
40:15:ac:74:4d:13:10:cc:97:da:23:ae:b7:e0:c6:
32:38:09:84:ae:f5:e7:b2:22:c2:7b:02:38:46:f5:
04:50:d9:a7:bb:61:58:62:79:87:72:fd:2a:b1:8c:
93:d5:51:07:a9:0d:d1:c9:60:e5:c7:dc:31:9b:63:
70:b3:d2:14:8d:c5:6e:b8:c5:db:59:15:5a:de:b5:
5d:47:88:d3:fb:5b:f7:0c:e6:46:78:d4:07:a2:4b:
d4:40:4b:15:cc:1c:cb:f7:5d:46:d1:af:72:14:d4:
5a:a6:20:ad:55:63:8d:52:ce:9e:64:2b:d2:a5:23:
59:ef:f7:9b:28:27:7a:47:69:a2:4d:7b:fd:b7:3b:
ec:f4:60:7a:0d:2a:af:1b:98:c1:a0:f5:46:8e:1c:
73:8d:7d:14:8a:6f:be:36:60:74:c7:93:05:a8:32:
4f:14:e3:8c:38:7c:63:97:ca:09:9b:60:cf:9b:28:
87:20:2e:73:26:cc:e6:04:2c:17:40:08:86:c9:04:
17:d0:f4:e2:c7:62:1a:1c:55:49:3e:8f:6e:7b:be:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:2D:03:47:A7:60:68:1E:A3:58:10:D9:00:8A:D1:96:52:F1:A7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/13d794f8-2e39-450c-8d9b-0ffbf3fdef18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:eb:09:5f:9d:17:e0:75:b7:d6:89:27:c6:d1:82:33:38:79:
ec:a9:ee:63:5a:b7:6a:81:45:02:8e:4e:a7:5e:a3:e2:bb:12:
74:5b:b1:2f:75:53:5d:7b:d5:5a:bb:62:34:4b:c2:d5:34:21:
bc:d2:69:cf:89:23:bd:e7:60:a2:dd:7f:ab:8c:2c:70:bd:a1:
44:10:f4:71:c8:6d:e9:20:bb:31:41:63:8e:87:64:d5:57:a6:
d9:db:b2:1c:35:e1:be:5c:8c:8f:d3:a5:23:d8:41:dd:7e:6e:
05:b0:cc:7e:4b:1e:cb:79:6d:3f:06:fb:1a:51:ce:7d:f4:19:
2b:ee:a2:63:77:95:8d:19:66:c5:23:5c:99:be:16:f7:0d:b3:
39:10:88:7b:6f:32:b9:09:56:89:4c:c7:f2:13:31:2e:90:e5:
36:e1:93:00:f2:b3:7f:16:76:a9:4e:ff:c4:82:40:5f:2f:f7:
64:94:32:e3:fb:e9:42:9a:a8:64:ac:0a:6e:00:db:dc:bc:00:
e8:76:4f:d2:e7:4a:52:ce:14:6a:ed:58:a2:11:49:fc:1c:57:
bc:11:21:79:6e:9a:4f:43:b2:35:e6:ac:94:7f:c1:0c:93:51:
09:6a:bf:16:07:2a:55:a1:6f:9f:7b:ff:75:d8:e7:9c:4b:1c:
a6:ff:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:09 2023 by rpki-client on console.sobornost.net