Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34a8d370-1f9b-414b-9560-ad03593f44dc.roa
File: 34a8d370-1f9b-414b-9560-ad03593f44dc.roa (raw, json)
Hash identifier: GDLiopVnveFcYBQubKFUbqB6nltabYwfW0ebsnIq1kU=
Subject key identifier: F8:2A:06:6E:53:F1:91:AB:D7:7C:A4:FF:29:5E:EF:6D:A0:73:9A:44
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1376A1B813D333301F499BB321624A7909A89C1F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34a8d370-1f9b-414b-9560-ad03593f44dc.roa
Signing time: Sat 26 Aug 2023 00:00:00 +0000
ROA not before: Sat 26 Aug 2023 00:00:00 +0000
ROA not after: Sat 30 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:76:a1:b8:13:d3:33:30:1f:49:9b:b3:21:62:4a:79:09:a8:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 26 00:00:00 2023 GMT
Not After : Sep 30 23:59:59 2023 GMT
Subject: serialNumber=01200d10203269fc5457143fafaa4b97c07c70588408ba63b2ef9e43fe4203b7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:81:b3:fd:e1:5c:14:48:8f:a6:f7:3f:47:
6b:79:bd:1b:9e:2e:5e:d7:90:5e:ef:06:05:e9:4e:
6b:7e:66:22:83:2c:10:c3:25:c4:c0:52:9e:17:d2:
79:c2:25:44:2b:e7:47:ae:2d:b4:bb:e0:9a:b2:d8:
00:4c:eb:60:7c:8c:e8:83:7f:66:ac:d9:12:73:7e:
82:85:fb:6f:d7:1f:46:09:a3:6f:93:09:88:da:2e:
3e:db:ee:fb:24:35:93:4c:d1:d4:85:ad:28:4e:21:
93:66:aa:71:68:39:59:df:58:73:3a:82:7a:0b:c1:
47:29:07:f0:1c:1b:a9:48:57:71:a5:bd:ef:06:ce:
07:c0:25:54:19:7c:2d:b9:19:43:80:4f:90:7f:a7:
ce:ad:81:4b:33:db:2d:7a:52:9b:19:6a:99:da:e0:
89:c8:e5:72:57:8e:22:b8:2d:3a:8f:55:27:cf:0c:
77:a5:e9:ad:bb:11:a4:9c:af:95:e6:f8:57:90:46:
6b:68:35:fb:d8:5c:73:b2:0a:09:21:b8:87:60:19:
07:63:9b:f2:80:21:e8:bb:f4:51:a0:83:c9:78:cb:
34:34:34:98:41:ba:cd:2c:33:4e:f8:fc:5f:04:2a:
10:49:02:40:50:a2:b7:cc:99:b2:17:37:92:dc:af:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:06:6E:53:F1:91:AB:D7:7C:A4:FF:29:5E:EF:6D:A0:73:9A:44
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/34a8d370-1f9b-414b-9560-ad03593f44dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6f:69:59:f3:0f:cf:90:57:72:87:97:64:a3:03:40:1c:20:
1e:25:b5:f5:e8:6a:56:4c:d9:87:96:59:18:64:da:fb:b0:d7:
a8:f9:84:1e:ae:cc:45:92:5a:9d:b8:5e:a7:b0:18:cf:83:08:
a5:28:c8:a4:4d:0d:0a:20:71:d3:8a:76:1c:ae:9e:90:be:1f:
d7:86:1a:8e:6b:99:bf:f2:1e:54:11:8a:47:3d:62:3e:17:0a:
a2:0e:20:02:24:12:fb:c8:30:27:61:23:94:3e:f2:27:31:51:
7e:75:2f:ee:6b:d1:4a:63:9c:4f:a3:bc:ac:57:1f:f3:95:76:
03:22:82:3a:cf:26:14:66:67:c2:41:58:9a:4e:fd:05:53:bc:
de:c7:2c:da:be:fa:92:99:96:8f:ab:5e:73:d5:a8:64:8d:98:
b3:8f:cd:b4:05:33:d3:9b:a4:24:96:10:f1:fd:ed:ab:eb:0c:
37:42:9d:72:35:e0:d7:07:63:2c:bb:08:64:2f:a2:b5:33:fd:
04:4c:f7:37:eb:e7:72:66:bd:70:1c:85:23:04:63:53:3a:14:
48:6f:75:fd:f9:9c:27:39:a9:1b:ee:08:8d:04:c7:ed:f9:a4:
5a:6f:a9:98:e7:b4:75:09:59:93:18:73:3c:c2:57:4c:7d:2c:
69:59:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net