Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bbf51f5-90a1-478e-8fda-bceacead9e69.roa
File: 2bbf51f5-90a1-478e-8fda-bceacead9e69.roa (raw, json)
Hash identifier: FhkdjHkxBVfZu8fJHZmrya1x4Afp+Ig19Mh63bM5rWo=
Subject key identifier: 7F:21:B9:B3:E4:79:B4:52:45:9B:2E:EC:02:80:7F:9D:F2:B2:E6:F3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0973C2B53FA2DE74E71E06CABC95E0E7B254AB49
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bbf51f5-90a1-478e-8fda-bceacead9e69.roa
Signing time: Fri 04 Aug 2023 00:00:00 +0000
ROA not before: Fri 04 Aug 2023 00:00:00 +0000
ROA not after: Fri 08 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:73:c2:b5:3f:a2:de:74:e7:1e:06:ca:bc:95:e0:e7:b2:54:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 4 00:00:00 2023 GMT
Not After : Sep 8 23:59:59 2023 GMT
Subject: serialNumber=e7f80d7f274475c507e4bfb359379fae544bb562f57e57969fecc8b3e50f24d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:67:c8:a4:b8:3c:73:e0:08:2a:38:65:77:
5b:9e:74:54:bb:b1:80:1e:19:a0:22:08:91:7a:cf:
f4:ca:cf:b3:ef:ac:c8:87:79:73:fe:8a:5f:cc:a0:
70:2a:62:07:ae:60:05:53:d1:07:97:24:2a:81:67:
df:d7:11:29:f5:65:38:b9:04:c3:45:27:2d:9d:23:
b6:84:9c:99:35:9a:7a:d1:9c:db:e5:10:6c:2a:d1:
00:4a:97:3c:93:f0:4a:5a:95:7d:e2:7a:44:b9:26:
41:e9:72:93:5e:8b:8f:0b:40:c2:f0:fb:0a:9c:c8:
8f:14:3c:5d:5c:f9:b1:91:56:6e:66:d6:3b:70:1f:
35:bd:8f:d7:a2:30:49:a4:4a:81:28:f9:05:91:b1:
dd:f6:56:42:2a:86:d4:ed:f3:ce:d5:ed:c2:16:a8:
aa:92:e6:30:61:20:98:c3:8c:ce:6d:e9:3b:54:b2:
98:7f:0a:64:51:4a:86:f3:de:fd:2c:f9:6e:06:d1:
de:8c:d2:d0:9f:b7:3b:9b:79:15:25:a6:6c:a2:5d:
55:d2:00:8c:92:da:90:17:0e:71:ba:c8:f6:ec:39:
2f:9d:ac:44:71:0f:36:6c:b0:77:0e:0e:ab:15:4d:
6b:ad:37:7f:37:ec:59:ac:83:f2:fd:22:f8:72:05:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:21:B9:B3:E4:79:B4:52:45:9B:2E:EC:02:80:7F:9D:F2:B2:E6:F3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2bbf51f5-90a1-478e-8fda-bceacead9e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:49:c0:65:8d:2b:f3:9a:7e:46:60:ca:b5:78:54:85:ec:71:
99:50:b5:eb:ed:d6:26:c9:a5:6e:84:fb:ee:3f:15:47:ae:f6:
91:ca:9d:28:d3:ec:15:76:49:5f:73:81:2c:eb:e0:e0:8d:90:
20:66:5c:1e:73:94:20:4b:82:e5:c1:6e:67:25:a0:f4:1d:20:
14:20:d2:7a:b7:0d:8d:7c:94:2d:05:9d:27:1e:09:3b:83:5d:
a7:8b:d9:24:e2:f5:22:4b:8b:3a:0c:f2:56:82:81:00:6a:7d:
b5:f1:89:76:db:2c:b1:95:64:fd:1d:e1:57:83:13:eb:fd:cb:
69:c1:78:57:fe:cb:e6:c1:2f:46:46:c5:1e:c9:e6:c3:5b:dd:
96:68:56:71:3c:db:ce:84:7b:f5:23:db:33:68:14:0a:09:97:
2c:25:4e:69:a2:99:4e:fc:a2:1e:55:ad:d9:53:fb:ae:a4:bb:
8e:ab:66:3b:22:81:40:f7:f7:f9:bb:fa:5a:c1:65:c5:71:da:
f9:e3:37:85:72:5d:61:03:fa:d8:3b:77:55:65:0b:a6:81:b5:
28:27:5a:e8:67:f9:10:28:2e:cc:24:b4:70:0e:ed:04:03:4b:
2f:30:87:71:6b:83:60:b4:aa:fb:bf:dd:fb:cb:dc:3b:1e:a1:
95:28:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net