Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2cae295e-2a61-4953-bcd8-8c98d82b5578.roa
File: 2cae295e-2a61-4953-bcd8-8c98d82b5578.roa (raw, json)
Hash identifier: osabuIROsxt3kXOBK94wLq8m9iXGEAbR+D83eEdA3sk=
Subject key identifier: A8:F9:07:60:AB:A9:AE:FB:0E:45:46:AA:AD:34:45:E5:7A:1C:FD:8D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1189509828CA214F3A816B3C2A8BCCB82D0E5875
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2cae295e-2a61-4953-bcd8-8c98d82b5578.roa
Signing time: Mon 04 Sep 2023 00:00:00 +0000
ROA not before: Mon 04 Sep 2023 00:00:00 +0000
ROA not after: Mon 09 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:89:50:98:28:ca:21:4f:3a:81:6b:3c:2a:8b:cc:b8:2d:0e:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 4 00:00:00 2023 GMT
Not After : Oct 9 23:59:59 2023 GMT
Subject: serialNumber=6602d404520e3252ff7c5675bba90a59438d2f13344861ad6816fe04083c9c3e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:f0:e1:c9:16:72:43:b1:ad:ae:3d:2d:9a:
3d:21:54:8d:49:07:52:9b:9d:25:fa:6d:64:4a:38:
46:90:a3:28:65:79:f0:b1:2a:d5:aa:5f:36:42:9c:
f8:ad:92:b0:55:16:0a:0a:e6:55:a3:fe:77:87:bd:
2e:5d:73:4b:aa:f4:1b:8e:13:25:54:5c:0a:5b:57:
38:74:ff:9d:12:70:72:f5:8a:a1:5f:90:4e:f9:d9:
43:09:66:00:68:03:57:1d:bf:86:45:d5:4d:00:a6:
7b:fe:30:9c:12:a8:89:09:74:45:a9:29:da:dd:9f:
3e:e0:3b:b4:96:a2:57:71:cf:55:da:8d:0b:70:a9:
41:e0:27:58:5b:91:fa:5d:46:9a:25:cc:4a:df:e5:
0e:b7:fe:ec:6e:5a:ea:e6:54:b2:10:99:c2:2f:ac:
0f:3c:fc:e8:06:44:89:7d:40:06:5c:a5:e8:8b:a7:
5b:65:87:55:17:4b:0a:12:77:bd:53:67:30:85:2a:
91:b6:22:e3:1d:66:53:06:40:3a:db:0d:43:ad:30:
ef:2b:cc:06:f3:a2:47:d8:35:3c:8e:52:9e:6c:68:
7c:bd:97:06:4c:91:b7:bd:41:b9:fd:f1:48:74:4e:
63:c2:24:78:3f:58:e5:2d:5b:e3:ce:e9:5e:b1:fa:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:07:60:AB:A9:AE:FB:0E:45:46:AA:AD:34:45:E5:7A:1C:FD:8D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2cae295e-2a61-4953-bcd8-8c98d82b5578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:69:ba:a7:83:3b:39:58:83:8f:92:63:2d:27:e1:38:a6:67:
bf:1e:f3:5d:be:27:18:ee:b9:e7:61:f3:2e:fe:82:a3:21:97:
16:46:4a:d2:8f:18:4e:29:da:b4:41:31:84:4d:54:9c:31:b6:
8e:7d:d9:9b:6e:57:03:f6:76:29:df:27:69:f8:d1:8f:35:7d:
f8:64:e8:89:de:0c:80:e3:7b:bf:88:b7:54:60:9a:f2:d9:ef:
5c:39:87:1c:50:1b:7e:95:94:d3:3b:b1:6b:98:6d:9a:af:af:
4e:5d:ca:52:df:ff:7a:9d:89:d4:c5:95:7e:2c:80:45:94:ac:
34:fb:b4:2d:07:4c:be:13:4d:cd:83:b8:4d:81:a4:d6:ed:37:
11:7c:98:d0:fd:45:0e:7d:61:d1:89:df:ba:5b:e0:66:f3:3c:
5e:34:07:15:1d:85:de:4d:3e:71:1d:59:c9:da:20:24:a0:1a:
ab:46:56:b2:29:00:6d:1f:ec:6a:ba:b4:a8:5d:13:36:fc:d2:
74:3e:d2:7d:60:0a:f7:8e:ce:da:db:00:7d:59:31:94:0c:2b:
b0:51:94:08:cb:cf:53:d8:a5:38:4c:48:0c:7e:69:51:e3:8b:
eb:9b:66:98:42:4d:11:49:20:2f:b7:e0:5e:43:b5:10:d8:12:
ff:d8:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net