Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a7bb4bd-b14d-489e-b58b-074f59cf3d56.roa
File: 2a7bb4bd-b14d-489e-b58b-074f59cf3d56.roa (raw, json)
Hash identifier: naZsLkQHH8/ux04DVx2VFsS5wjIonaPayKzpoO791ig=
Subject key identifier: 7C:ED:75:EE:48:61:B7:65:BE:E5:24:01:88:39:21:BB:B4:C2:A6:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 02F74181A05B8FB5A7FB5CC2ED80C73A0A7F6E97
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a7bb4bd-b14d-489e-b58b-074f59cf3d56.roa
Signing time: Mon 20 Nov 2023 00:00:00 +0000
ROA not before: Mon 20 Nov 2023 00:00:00 +0000
ROA not after: Mon 25 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f7:41:81:a0:5b:8f:b5:a7:fb:5c:c2:ed:80:c7:3a:0a:7f:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 20 00:00:00 2023 GMT
Not After : Dec 25 23:59:59 2023 GMT
Subject: serialNumber=76a99c028edc31be1abc7f6ae73a0e723c2bad2ba8d56ca74657ee6e4f95863d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:f4:7c:18:a2:55:93:1e:e9:70:a4:dd:4f:
4d:14:9d:b6:50:cf:54:1b:70:f2:1b:ed:ea:ea:69:
1a:69:d5:d8:32:81:33:3c:78:fe:a2:37:d4:d2:28:
8d:58:4f:db:a6:0a:02:ad:c9:69:44:cc:45:21:68:
93:57:96:d5:4d:cd:31:db:24:89:7d:60:13:3f:44:
d2:a2:8f:ea:8f:3a:81:13:35:6b:0b:b8:20:b5:17:
14:c0:ea:68:10:71:44:06:80:76:7c:93:61:46:fc:
f9:0d:43:0b:54:da:b0:da:af:7b:a5:3b:77:dc:37:
09:ff:7d:df:64:0b:76:62:39:2d:b5:93:13:ca:75:
6e:be:0f:b9:a0:dd:e6:bf:65:3f:a3:18:26:5e:a7:
7a:e4:2a:8c:a5:dc:25:30:6b:24:45:08:d6:3a:34:
47:db:5a:76:6e:1c:3c:fb:dc:cb:b2:d9:30:39:89:
4b:53:38:46:1e:ce:1f:d6:e4:09:1a:db:88:96:62:
f6:68:8c:d5:b4:e7:c7:b1:65:06:bf:7f:54:52:36:
b3:68:3f:42:46:d7:65:98:8b:8d:1c:fa:d4:2f:70:
45:47:36:42:9f:f6:e7:71:13:ea:79:e0:d0:3f:f9:
2d:3c:a2:b1:5f:02:c3:5f:f8:38:13:13:d3:e0:dd:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:75:EE:48:61:B7:65:BE:E5:24:01:88:39:21:BB:B4:C2:A6:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2a7bb4bd-b14d-489e-b58b-074f59cf3d56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b4:54:49:f3:ab:3e:af:0c:b2:0c:cd:4b:c8:fe:d6:42:3d:
0c:fd:bd:88:56:2d:d9:8f:55:55:a6:45:63:80:92:78:66:ba:
8a:cc:8a:5d:b3:d4:de:63:2a:ae:e8:88:75:ba:d8:d3:50:b2:
b5:97:bc:77:a0:3e:3a:ce:f5:83:df:9e:f2:90:2c:52:d0:0a:
78:d0:92:32:5a:34:3e:2f:ce:24:b8:79:89:f1:63:9c:31:9d:
d1:a6:7e:68:f0:e9:18:dd:5f:25:24:c3:a9:24:2b:a6:64:68:
2d:fe:f6:4d:ae:e0:8d:ca:a2:d2:2f:41:e7:0e:02:48:82:f0:
df:e6:54:ac:ba:00:3a:20:3f:4f:32:6d:50:ca:55:f5:84:64:
10:d7:f2:0c:e5:b8:07:37:fb:10:02:80:53:77:2d:54:b9:ce:
35:4f:02:82:e6:73:1c:8c:c5:e9:53:c3:d6:33:ff:bb:5f:c3:
c2:ea:57:9c:a8:c4:ea:d8:a9:76:dd:95:fc:a3:f2:8e:1b:80:
fe:96:c0:d6:58:a7:21:ae:62:b5:ba:bf:2b:45:46:c7:f6:84:
c7:1d:57:a5:fd:76:6c:07:f5:2a:0b:6d:16:a8:87:92:fd:78:
1d:83:cc:76:ae:9c:ea:8b:96:4f:71:bb:c4:e5:e4:86:57:46:
db:5d:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net