Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a5301ce-694a-4981-b799-cfa6c15e9d37.roa
File: 2a5301ce-694a-4981-b799-cfa6c15e9d37.roa (raw, json)
Hash identifier: 38BGEpeWCNHtrIzJLvL4qc1LuiS1wM5AeXNBQ1nl+3c=
Subject key identifier: 68:F7:AE:88:92:3A:DC:80:EE:AC:F2:46:1D:25:6D:1C:04:4D:CB:DB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0942528DF495AA05FD326F3BE97D09040E77A556
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a5301ce-694a-4981-b799-cfa6c15e9d37.roa
Signing time: Sat 08 Jul 2023 00:00:00 +0000
ROA not before: Sat 08 Jul 2023 00:00:00 +0000
ROA not after: Sat 12 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:42:52:8d:f4:95:aa:05:fd:32:6f:3b:e9:7d:09:04:0e:77:a5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 8 00:00:00 2023 GMT
Not After : Aug 12 23:59:59 2023 GMT
Subject: serialNumber=aae1d00637dbfeca24d80ef972771039958005b54c6c1b6762de0d91f4f3eb0c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:40:c8:76:10:b2:fc:27:98:66:78:9c:2c:
8e:9c:40:64:5a:80:7e:a1:7c:64:e0:81:45:b3:0e:
0e:01:cd:98:97:45:59:42:b8:bc:2f:58:7f:38:c6:
97:9e:ab:3d:c0:2d:53:60:a2:b1:06:59:42:41:c7:
d7:c3:88:72:f3:b1:91:24:82:d8:ec:13:99:f1:b5:
18:75:e5:4b:07:7d:69:dc:30:96:57:70:18:a6:24:
e8:11:c6:06:e9:4f:c1:6c:e5:b0:fd:5e:15:53:9b:
5c:dd:9b:17:ca:9c:26:d2:48:ef:38:3c:13:4a:3d:
f9:fd:0d:f2:d2:a0:0f:f1:51:10:d6:b5:48:a0:20:
8e:a6:27:d0:3e:a2:b3:c7:1e:93:48:e9:be:01:f6:
96:cf:20:5b:14:db:d0:fe:65:0d:ec:35:be:fc:cd:
d2:d0:24:39:64:08:f7:4d:d4:4c:84:84:2d:f9:89:
f2:51:9c:41:8e:d2:c1:4c:3c:96:a8:77:27:c8:0c:
9f:19:07:a0:b7:0d:67:a0:7e:07:ef:03:40:30:a7:
f8:79:3b:b0:9b:cb:83:06:c0:b0:29:53:83:be:0e:
31:72:df:ad:ab:bd:ee:c4:5b:f6:97:64:2a:49:e4:
e6:7c:be:69:d5:54:a7:f4:c3:d8:35:8f:b6:10:f4:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:AE:88:92:3A:DC:80:EE:AC:F2:46:1D:25:6D:1C:04:4D:CB:DB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a5301ce-694a-4981-b799-cfa6c15e9d37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9c:1e:60:1b:6c:d9:f3:83:54:11:77:71:e7:b2:db:31:67:
0c:3d:eb:57:f3:f1:c8:9b:df:8e:5d:2f:5b:15:27:9a:b6:1e:
52:a1:e1:4f:05:98:ef:b6:9d:83:1d:6b:8d:05:a2:c7:ab:67:
cb:7f:8d:69:a8:1a:84:52:5b:09:1a:b0:94:a3:b8:fe:52:5f:
ab:a2:bd:bb:29:7f:fd:25:89:cf:c5:29:61:ba:fc:28:f5:d7:
ab:f1:13:3d:d3:37:68:1a:c3:7b:99:f8:38:ab:99:7d:f0:54:
64:d3:3b:a3:42:f7:4a:50:42:1d:0f:b2:b8:1c:07:4e:7b:fd:
89:db:c9:a6:52:f7:93:2c:ac:68:f4:e9:56:51:89:44:d0:ba:
d1:0c:22:b7:27:c5:66:a3:d9:6f:f9:e0:45:4b:f5:86:10:b0:
5d:c5:62:d2:18:fd:5e:e2:41:23:cd:ef:7f:43:01:92:a6:34:
ff:ca:1c:a2:8b:c3:35:ea:84:dd:6f:d0:ff:f9:a4:69:9a:29:
7c:a6:b8:31:f8:c0:72:85:d1:01:5b:82:56:0f:98:27:91:d4:
c7:59:f5:79:c6:78:f1:8b:eb:54:41:db:c7:14:03:7e:6b:61:
14:1e:d8:1f:60:12:99:fc:1a:c8:42:f4:41:0d:3a:dc:f4:5f:
e9:20:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net