Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/15f43ce1-1f88-430e-9b14-840b0bb115a5.roa
File: 15f43ce1-1f88-430e-9b14-840b0bb115a5.roa (raw, json)
Hash identifier: OrR6j+h08fj6R4z4vZX4ymMvMv1ZJU1NDkCxJNsxwwY=
Subject key identifier: EE:5D:5F:22:46:0E:4F:13:93:0E:0D:56:4A:27:B9:77:5D:B0:A6:10
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4E03B9FACC4D41A1A8C9F4322EA6237B2D74AA45
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/15f43ce1-1f88-430e-9b14-840b0bb115a5.roa
Signing time: Sat 19 Aug 2023 00:00:00 +0000
ROA not before: Sat 19 Aug 2023 00:00:00 +0000
ROA not after: Sat 23 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:03:b9:fa:cc:4d:41:a1:a8:c9:f4:32:2e:a6:23:7b:2d:74:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 19 00:00:00 2023 GMT
Not After : Sep 23 23:59:59 2023 GMT
Subject: serialNumber=d6a9754162fe1242143628dbb4a64f2c22b7a469654744c5a307b959c3aa4ed4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:2b:d5:83:b4:ef:a5:07:82:8a:5f:8d:27:
43:f0:8c:92:95:7b:7d:4b:84:02:b6:c9:8f:72:82:
ed:d7:bd:f3:fb:b3:98:56:65:d0:3a:d0:a4:e1:57:
d3:98:32:44:f7:43:fa:c8:20:70:b1:2a:c6:a2:03:
10:49:56:7a:c3:fd:ef:c5:bc:54:0e:1c:e8:dd:9b:
b9:53:3b:24:80:0a:2d:12:b3:0c:ce:55:b3:0a:c5:
ed:29:03:66:fd:22:4f:c8:27:76:c9:fa:8e:ae:69:
cf:97:bb:e3:d5:52:a4:ed:fd:c9:1f:0c:3f:16:48:
5b:23:0d:88:bf:76:64:84:06:ae:68:c9:4f:bf:df:
f2:fc:4c:a9:3d:c7:a8:c2:2e:8c:4e:81:d6:fd:af:
bb:1e:13:65:80:2c:05:75:7a:f1:07:b0:87:23:cb:
b6:70:b8:ab:4e:80:52:43:86:c6:9e:6e:90:1a:35:
b5:84:64:e8:c7:ea:46:06:c3:51:94:a6:37:ae:2c:
5b:15:d2:a4:21:73:33:c2:b6:a7:4b:33:c4:53:16:
e6:20:ed:2e:07:6f:4f:50:3c:9b:7d:2d:d4:e8:86:
d6:85:7e:fa:b7:51:91:16:67:a3:01:58:b8:4c:2b:
3e:4b:8f:f2:28:3c:b6:40:0e:13:c4:b2:d1:e8:08:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:5F:22:46:0E:4F:13:93:0E:0D:56:4A:27:B9:77:5D:B0:A6:10
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/15f43ce1-1f88-430e-9b14-840b0bb115a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:55:e6:76:5e:9f:bd:5c:84:b8:f0:16:12:4c:07:61:f0:c8:
69:1a:38:8f:fa:18:bc:4f:1e:c8:71:3a:6a:3c:e0:f6:97:8b:
e7:4e:2d:f0:a7:52:ce:3a:11:bb:32:19:9e:9f:c9:d1:31:b3:
12:7f:03:90:0b:9e:68:49:fb:30:08:cc:8e:85:81:f4:c2:e8:
14:c2:02:59:42:22:9d:84:2e:8e:77:d1:72:4f:f3:ab:33:a6:
bf:aa:96:2a:38:f5:49:39:61:63:12:ca:4c:30:99:83:0b:49:
39:e3:c0:7d:24:c6:bb:21:52:ab:37:56:e4:23:f8:5c:ae:4f:
69:63:ed:1a:78:d9:93:21:f9:bc:33:65:38:06:3a:73:fa:3a:
ca:da:8d:56:e6:a1:17:da:79:34:e0:91:2d:a9:a0:b2:c1:c4:
88:89:ae:7c:5b:c2:d1:5d:f7:98:e7:35:66:f7:16:e2:3b:08:
94:0c:be:0c:36:a8:9c:6e:81:58:b4:03:26:c7:81:6a:5c:8a:
6b:e8:7c:c2:95:3a:0c:a9:2c:57:bd:85:1e:df:4b:c3:83:09:
b3:65:94:c7:a1:2f:a0:11:bb:25:92:71:7d:b2:0e:9a:b2:c1:
8e:e8:00:b8:30:a5:27:74:7c:eb:3a:7c:01:62:37:36:f5:ad:
90:f9:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:09 2023 by rpki-client on console.sobornost.net