Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d4ae949-f9ac-4e38-bd25-04837e2e773d.roa
File: 2d4ae949-f9ac-4e38-bd25-04837e2e773d.roa (raw, json)
Hash identifier: LNbPFo3sb75U9Q3BTfxeHY4+3HQkSJQySS9OZ0yCZiw=
Subject key identifier: 65:09:23:68:C0:11:D9:CD:17:41:3B:FC:20:7D:C9:10:89:0F:31:D5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27C93434DA238C61B5EE0D51DFB52C55736D5F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d4ae949-f9ac-4e38-bd25-04837e2e773d.roa
Signing time: Tue 25 Jul 2023 00:00:00 +0000
ROA not before: Tue 25 Jul 2023 00:00:00 +0000
ROA not after: Tue 29 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c9:34:34:da:23:8c:61:b5:ee:0d:51:df:b5:2c:55:73:6d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 25 00:00:00 2023 GMT
Not After : Aug 29 23:59:59 2023 GMT
Subject: serialNumber=cda01d0731b376afab8e4a58295060a0904104d744ca9d4176a36288edd13137, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:08:35:6c:ed:03:ae:2f:88:1e:03:28:94:
b9:e6:27:2c:34:b5:a9:02:c6:02:84:56:0e:75:9b:
6c:1d:bb:e7:8c:26:fc:71:5f:09:d6:5e:58:bf:1f:
dd:68:f9:d0:11:b7:23:e7:68:77:a2:b0:00:96:06:
26:96:15:b4:50:26:46:fb:5e:99:0b:c1:70:82:5e:
5d:77:09:c6:91:51:3e:8a:73:ca:d7:fe:4c:66:a1:
1d:b3:3f:ee:51:b5:b1:39:05:54:01:5d:b7:10:91:
45:52:d2:b6:9a:1d:3f:12:a9:ad:f9:75:10:28:7e:
20:72:b3:c7:d2:d2:9a:ae:fa:44:63:46:1d:fe:5e:
77:1a:ab:fc:2b:d1:1d:58:06:68:cb:30:d7:e8:4d:
cf:dc:0b:31:0a:d9:70:ca:90:e2:01:9f:aa:f5:2c:
bf:c4:cb:89:9c:93:29:33:6a:6d:41:c7:67:99:6e:
07:e8:c1:0c:15:83:d4:d6:14:cd:e6:43:be:df:bd:
22:0c:80:4c:50:00:b5:a3:d7:94:2e:ee:89:45:ea:
e0:ac:fb:d4:d4:5b:43:f1:59:af:48:2c:55:34:68:
4b:fd:85:49:3c:f3:1d:35:8e:3e:10:b0:a3:9a:3a:
e1:47:86:ec:b7:e5:c0:ba:e6:26:42:88:22:53:5d:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:23:68:C0:11:D9:CD:17:41:3B:FC:20:7D:C9:10:89:0F:31:D5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2d4ae949-f9ac-4e38-bd25-04837e2e773d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a9:a5:76:8d:20:3c:4f:63:ed:eb:ff:1d:69:d2:dc:fa:76:
c2:c1:20:ff:12:79:b2:e0:58:9a:10:db:02:6d:bc:4c:6a:0f:
5a:36:dc:ee:89:bf:93:bd:95:7f:7a:70:1c:e3:b6:71:f9:ad:
44:a8:b0:47:0a:b6:1d:86:a6:ca:03:90:ad:0b:39:84:3d:bf:
91:86:6a:7f:35:fe:7f:66:fc:80:23:e8:6e:d3:5a:49:14:28:
ad:10:52:ba:dc:7e:d1:3c:aa:f3:0e:8a:d5:dc:ae:0b:c2:5d:
eb:fb:ea:52:01:80:e8:c8:9e:e7:9a:98:18:f2:4d:d2:26:66:
4b:85:f9:9c:e2:1f:88:f9:d5:25:93:91:6d:4a:d4:10:3a:dd:
7d:90:c9:4f:f1:07:ee:dd:e0:d6:df:36:1d:7f:71:b6:23:1a:
ea:13:e5:a7:98:19:4f:ab:bd:2f:a3:76:5b:a4:9f:92:99:f3:
62:69:93:45:f6:4d:b2:c3:25:7e:bd:47:49:6f:ec:10:9d:4f:
68:92:a4:49:35:f6:a5:cd:f6:ae:e9:6e:c9:11:5d:7f:e8:ed:
87:eb:5f:68:29:bd:13:04:26:49:02:0d:24:9c:b0:ac:6f:e2:
33:48:8a:e2:06:64:fd:93:a4:e9:34:48:d1:93:de:34:c3:e4:
67:b9:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net