Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/15f3851b-b1fa-498b-bb44-dfac5be181d0.roa
File: 15f3851b-b1fa-498b-bb44-dfac5be181d0.roa (raw, json)
Hash identifier: tFvh6xRDJnQRyV0fxHBQqesKMa2BuK2JfUAVNvC/zrk=
Subject key identifier: 54:00:9C:D3:7F:E4:F2:E8:30:F3:6F:FB:2C:BF:18:7F:6C:DF:D7:F8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2CD470AC513522D2B7F0CDE86563D93B63343BD1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/15f3851b-b1fa-498b-bb44-dfac5be181d0.roa
Signing time: Sat 16 Sep 2023 00:00:00 +0000
ROA not before: Sat 16 Sep 2023 00:00:00 +0000
ROA not after: Sat 21 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d4:70:ac:51:35:22:d2:b7:f0:cd:e8:65:63:d9:3b:63:34:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 16 00:00:00 2023 GMT
Not After : Oct 21 23:59:59 2023 GMT
Subject: serialNumber=a259a21a23ba285d81e920ba6cbd13bc89007e1c910146cdae0c6e4aa48df582, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:4b:f3:72:ea:e4:6b:9a:af:c2:01:ad:31:
6a:88:3f:15:f7:56:89:7e:d4:82:96:44:9b:b5:2f:
f8:46:d3:fe:12:44:72:8a:46:f2:eb:37:c1:a7:5f:
73:3d:c9:56:8b:e8:a6:1d:10:39:23:4c:9a:d2:04:
e8:32:ad:8e:48:b7:22:3e:40:12:7e:0d:c4:b4:d0:
bb:e4:9f:aa:95:9a:0c:87:05:d0:13:6f:74:1a:8f:
4c:10:60:b8:82:2c:12:fd:54:f4:8d:1e:58:12:67:
ce:44:27:81:f4:48:19:29:42:92:67:3d:8b:dc:b0:
ef:ea:8c:07:06:a5:ac:3e:4e:c9:6e:e9:f1:d0:76:
ba:7b:15:5f:e8:c5:1b:c2:a0:09:92:ff:47:65:16:
c3:e9:32:e8:7b:5e:68:b6:41:50:10:af:64:04:05:
cf:05:01:1d:49:ab:90:ff:c2:69:dc:a9:68:ea:c1:
47:55:b3:59:f4:15:b7:5d:6d:b0:06:cb:61:47:db:
8b:2b:db:c0:c7:8c:bf:93:7a:3c:9a:14:c6:65:24:
fa:3c:ab:4b:35:cf:b6:25:2a:4e:13:31:6e:59:8c:
a5:d8:59:dd:ee:f9:38:08:cb:0a:a8:b2:6a:a2:48:
47:9e:f8:d5:62:d3:aa:ea:0b:13:58:1d:d8:55:a8:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:9C:D3:7F:E4:F2:E8:30:F3:6F:FB:2C:BF:18:7F:6C:DF:D7:F8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/15f3851b-b1fa-498b-bb44-dfac5be181d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:38:1a:51:76:63:44:64:e7:bc:00:df:df:05:6a:3b:68:e2:
1d:f0:f8:6f:c7:50:24:07:eb:34:c5:41:8d:57:f8:e9:31:ab:
54:e9:c7:9f:ea:39:00:11:79:8e:9f:80:64:48:34:5e:ef:4b:
08:a4:ee:0e:8f:41:b0:ac:91:df:a2:2f:45:a3:df:d6:80:36:
94:d4:af:de:c7:a0:f6:52:5a:75:2f:08:7f:06:eb:db:b1:ef:
24:00:c3:09:a8:7c:73:76:1e:ad:63:34:59:95:35:8b:b0:46:
ca:ba:20:8e:0c:45:0b:87:8f:92:0b:51:20:9a:0f:8a:53:34:
65:b0:56:2f:5f:a6:1f:7d:88:17:31:ca:52:c9:4e:d6:93:eb:
2f:1b:79:b7:5d:12:95:9b:b4:b0:d2:4f:eb:cf:f4:df:6c:1e:
45:14:9b:e7:aa:ce:a2:d2:0f:58:15:b3:5d:ed:c7:25:12:a0:
9c:26:ec:de:55:cf:24:71:7b:d6:52:42:c0:54:b1:45:6d:ca:
57:66:7f:1c:12:cb:92:bb:73:38:23:b2:b1:0f:cd:fc:7b:db:
0c:e4:a7:97:93:ad:0e:7d:d1:1f:8d:15:7a:4a:ee:32:09:81:
f4:12:5d:cb:8f:27:9c:d2:d5:3a:65:b6:27:37:e2:51:da:2a:
0b:8b:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:09 2023 by rpki-client on console.sobornost.net