Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/248cbf97-3033-4a8b-a8dc-342c2923905c.roa
File: 248cbf97-3033-4a8b-a8dc-342c2923905c.roa (raw, json)
Hash identifier: kmDUsGyRQVJpnhJ2JjZlBmKjtT46h03VlnrAmWDQUKE=
Subject key identifier: F7:68:EC:7F:B0:F6:5A:D8:5B:D3:73:A5:84:60:CF:86:0A:C5:83:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 750EE78C63582B811A36D0DE1594AD2D2A876426
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/248cbf97-3033-4a8b-a8dc-342c2923905c.roa
Signing time: Thu 12 Oct 2023 00:00:00 +0000
ROA not before: Thu 12 Oct 2023 00:00:00 +0000
ROA not after: Thu 16 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0e:e7:8c:63:58:2b:81:1a:36:d0:de:15:94:ad:2d:2a:87:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 12 00:00:00 2023 GMT
Not After : Nov 16 23:59:59 2023 GMT
Subject: serialNumber=93fd2720e65a1469c63c2a264b8a568f8e87e511e8aca19ae5a4b21d779863e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:16:d3:24:af:e5:13:5f:d3:67:ef:ab:52:
19:c1:62:0d:b7:c4:38:14:cd:2e:37:bd:74:cb:7b:
49:1e:05:a7:ef:3f:c8:38:85:6d:86:34:3c:49:bf:
4b:ca:42:61:4e:c0:2a:af:75:23:0e:e9:f3:41:63:
2c:ab:ed:e3:b2:d3:06:fc:8b:97:e3:e1:2d:8d:a3:
3a:c5:4b:41:38:37:d5:6e:e9:cb:65:59:cb:f8:25:
94:da:4e:02:8a:d6:53:d3:b2:21:a3:28:74:2d:de:
52:cc:f4:33:cf:ae:b5:2a:73:18:92:65:48:ba:9d:
7e:bb:8b:aa:dd:25:74:08:0f:d3:53:91:65:df:7d:
e9:59:50:a6:55:cd:15:e9:ff:05:91:2b:ab:b0:6a:
34:c3:a9:f4:35:a8:62:80:1c:27:09:b9:36:7c:6d:
6e:df:9c:8e:eb:5a:e8:a7:8e:0e:44:3b:6c:d3:bd:
9a:b5:d5:aa:ad:90:d9:2d:84:09:9a:b8:fd:b2:54:
83:57:a2:d1:21:17:0e:99:83:e2:18:75:40:d8:f6:
72:29:cd:e2:00:d2:52:b5:f1:02:9a:1e:78:78:cb:
1e:05:18:28:06:b7:e2:8d:5e:75:2e:75:c5:04:94:
65:46:10:55:1f:96:14:de:b8:70:8b:99:6d:83:9c:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:EC:7F:B0:F6:5A:D8:5B:D3:73:A5:84:60:CF:86:0A:C5:83:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/248cbf97-3033-4a8b-a8dc-342c2923905c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d6:83:ce:5b:40:12:76:75:7e:04:dd:fc:35:10:9a:33:99:
aa:81:53:97:6f:cd:b6:f7:74:a1:98:c0:d1:11:c3:a5:5d:a7:
4c:bf:87:93:8a:4d:67:91:2c:77:39:c9:a2:5e:7c:34:4a:0b:
c0:85:b1:c9:df:ab:82:c6:f7:1b:8c:c3:1b:82:29:35:f1:09:
b6:f1:fd:d7:f5:00:86:4f:5b:e7:46:23:b9:3b:df:2e:5d:90:
d6:44:14:bf:66:60:b8:a7:85:fb:52:fe:02:9c:2b:2e:4f:1f:
53:1c:bf:ab:87:46:5c:c3:da:9c:4a:32:e7:4d:3b:0a:92:9c:
46:cf:cf:3b:1d:9d:47:aa:67:73:0e:84:9a:a4:af:0f:0c:84:
c0:d5:50:d4:09:8d:a0:56:92:6b:15:85:76:fa:fb:20:7f:ad:
8b:a0:30:da:41:c4:f2:a6:27:43:86:5d:dd:05:41:05:76:4d:
54:6e:bd:53:c9:89:d5:8b:80:ce:1b:36:9e:ca:c7:63:e6:1a:
14:7e:fa:ce:62:cb:e4:79:c2:3a:7c:bb:40:2d:e7:56:9e:e2:
31:fe:44:cb:fd:f7:2d:40:4f:ce:7c:4f:16:0f:83:86:3c:4d:
1f:f3:1b:86:8b:fd:cd:58:61:b6:20:bd:cb:34:52:1e:fc:3e:
a0:7f:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net