Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/312a0dfa-8cb8-448e-924b-ebdf0c4f3ac8.roa
File: 312a0dfa-8cb8-448e-924b-ebdf0c4f3ac8.roa (raw, json)
Hash identifier: sQKyLYmWw+sC54GKZ+sLAqye+1hvTwe/diZY3vsujs4=
Subject key identifier: 33:AE:41:8D:DF:80:0A:42:DA:EF:A4:B5:8E:DD:36:24:81:DE:E0:0F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CFD58C3605123B9697DB949BC5B350D92F5E8ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/312a0dfa-8cb8-448e-924b-ebdf0c4f3ac8.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fd:58:c3:60:51:23:b9:69:7d:b9:49:bc:5b:35:0d:92:f5:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=1803d730d474c7b005746b1d452669b71c1e7631f1908982ddacd416ba28b4a9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:c7:b3:cf:62:53:c8:5f:30:37:55:1e:e3:
14:8f:0b:8b:63:bb:d7:e8:3b:88:48:2f:1f:c5:fe:
4c:10:d8:1f:45:74:6a:46:e4:aa:d9:62:f3:e1:b5:
d4:e4:f7:2a:29:50:95:00:0b:6c:39:cd:b3:20:8c:
72:78:87:e1:f1:22:06:ee:df:d8:4b:0b:ba:5c:33:
f3:88:90:21:44:d7:dd:5e:4f:ae:20:98:2e:90:a9:
2d:b6:1c:a2:ab:7b:a7:01:20:cf:8a:da:ed:bc:8a:
ec:81:a9:11:b6:6a:f9:15:78:40:a3:18:6b:c6:00:
8c:55:53:1c:c0:ea:be:28:f6:12:da:b0:e6:51:cd:
b7:95:dc:51:ab:22:fd:15:56:61:7d:d5:60:d2:89:
c0:5f:e3:62:9b:5b:09:87:d5:8f:24:ac:f7:1c:a9:
9a:2b:33:e2:f5:f7:35:06:f4:1b:94:ef:44:24:2c:
c1:9b:a2:a9:3e:d2:34:3f:4b:2a:f0:5e:6b:53:f9:
41:01:1c:1b:1e:78:3b:a3:34:7d:10:b9:9a:d4:49:
bf:bb:b5:73:a1:95:97:11:68:0b:47:6f:aa:bb:0b:
00:fc:3e:50:a0:df:b7:b4:82:c6:3a:02:4a:4d:1a:
f4:7e:6e:e7:0a:62:ca:25:d0:fb:e2:04:a7:18:96:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:41:8D:DF:80:0A:42:DA:EF:A4:B5:8E:DD:36:24:81:DE:E0:0F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/312a0dfa-8cb8-448e-924b-ebdf0c4f3ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b2:57:cd:ac:4e:17:9d:ae:e1:1d:7f:57:e4:ac:5d:64:35:
0c:99:61:58:51:50:24:59:a7:fb:9a:a3:56:67:dd:bf:af:c1:
d2:b1:30:71:53:3f:8d:da:3a:14:dc:db:cd:f0:ea:44:a9:fd:
eb:0d:20:39:78:ae:18:fb:1e:05:89:f0:dc:0b:d4:5d:a9:2c:
4f:f7:a3:c0:03:e2:61:bc:7d:5a:53:5a:8e:c8:d5:7a:42:15:
66:07:95:3d:29:e2:fd:e6:64:2d:91:5f:db:2c:5f:9e:7f:c6:
c9:46:a9:49:4a:1a:91:6e:8b:32:c2:9e:f7:c4:e0:31:92:78:
e8:a0:d1:cc:a8:ad:27:d6:91:c1:f9:6a:5b:84:71:f5:e6:33:
89:96:16:9c:44:2c:e4:ae:b6:dd:08:c8:df:a2:50:3f:66:f4:
33:d9:21:d4:34:7d:e8:14:c2:35:a1:42:af:2b:a2:62:87:48:
01:68:bf:35:fc:7b:48:56:89:d7:5a:99:ea:30:dd:d4:2c:88:
5b:f1:3d:a1:b1:f5:72:2b:5c:6f:e0:24:78:94:32:2a:1e:8c:
7e:82:2d:2c:56:2d:23:cf:7d:78:1b:d2:64:8d:4b:79:45:e6:
83:5a:d5:18:fc:84:42:5b:2f:cf:80:ac:ec:9a:d4:74:65:cf:
8c:1f:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net