Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/350658e7-c693-44e1-9e50-1a0cc240a284.roa
File: 350658e7-c693-44e1-9e50-1a0cc240a284.roa (raw, json)
Hash identifier: gO7B2Ks6FNuZOH2nsmjHkZVMyV5Z2oXTNXhE6X++i4w=
Subject key identifier: B7:95:30:D0:28:11:F2:76:CC:CC:3A:AD:63:71:E3:CF:AB:EE:7E:49
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 26C8B2E7B84BD9088EFCDB31123A076D086196C7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/350658e7-c693-44e1-9e50-1a0cc240a284.roa
Signing time: Thu 09 Nov 2023 00:00:00 +0000
ROA not before: Thu 09 Nov 2023 00:00:00 +0000
ROA not after: Thu 14 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c8:b2:e7:b8:4b:d9:08:8e:fc:db:31:12:3a:07:6d:08:61:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 9 00:00:00 2023 GMT
Not After : Dec 14 23:59:59 2023 GMT
Subject: serialNumber=2eef4c1e943c30ed204a545909d9b9c14e19282c3668c94974c0581551904bce, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:18:2d:9a:18:49:cb:fd:84:70:86:26:d7:
90:f2:75:4a:2a:8b:40:67:e6:9e:09:ff:0f:2a:9d:
bd:fc:7f:aa:28:2f:a6:fe:73:d5:f6:10:2b:21:d9:
c0:8e:f5:60:7c:03:60:21:73:bb:1e:a0:a4:a7:4c:
6d:92:82:2a:87:98:16:44:38:a6:a5:89:fb:7f:6b:
51:52:03:fa:93:43:4a:e7:76:61:bf:08:71:fd:0a:
1b:71:95:2c:39:4e:da:ca:7e:4a:5d:2d:9b:7e:61:
98:fb:03:09:21:4d:7d:d4:6c:97:66:06:92:3f:32:
e8:60:1a:e5:ae:cb:0a:40:33:09:cd:63:25:61:ad:
1e:44:97:e1:4e:ec:6c:9d:9d:93:e6:1b:dc:dc:a5:
34:7e:8d:d8:c0:d7:67:80:5b:42:20:0c:62:70:50:
78:c5:3a:69:52:83:72:b7:fa:c5:b5:8f:eb:33:d7:
76:87:07:5f:d5:2c:12:5f:92:89:9a:97:90:9d:4f:
19:84:1a:d1:17:90:2a:ec:98:83:5d:67:ae:28:07:
9b:87:6c:1e:03:48:b4:84:89:d4:67:bb:75:3f:50:
62:12:24:2b:9a:03:99:1a:1e:96:0e:c6:6b:aa:70:
15:27:6e:de:46:24:fe:58:b1:1a:02:da:f5:b4:e3:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:30:D0:28:11:F2:76:CC:CC:3A:AD:63:71:E3:CF:AB:EE:7E:49
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/350658e7-c693-44e1-9e50-1a0cc240a284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:20:9c:9a:67:ce:64:07:4f:2d:06:f5:e3:92:02:19:be:a5:
87:13:8f:79:1f:4d:cb:09:75:2f:1d:b0:e5:48:6b:c9:09:ae:
52:e0:1f:c8:42:92:e5:94:50:0f:77:fa:fd:37:a4:b3:e4:4d:
f9:94:80:f2:a2:7a:f7:f1:27:0a:70:a3:8f:c9:55:3c:b3:61:
14:a8:10:8f:5e:41:f3:47:eb:46:96:28:bd:8e:3e:d7:ff:36:
4b:b9:0d:30:16:1a:df:d5:a8:77:20:59:57:27:1c:7b:df:fd:
27:49:20:1c:ac:6d:21:f6:d6:22:3e:f6:63:1b:72:0c:0d:f6:
fd:1c:ac:3b:78:8a:a0:0b:60:63:c0:39:c3:2a:d0:65:aa:32:
39:26:e9:0b:e1:b0:9d:06:e2:6b:5a:a1:e0:2b:5d:40:4c:8f:
25:d5:db:d4:a7:50:bd:05:be:eb:54:0d:1f:e2:a3:65:c8:55:
e9:af:d6:13:d8:c1:fa:8d:e3:37:e8:34:b9:86:37:97:16:47:
ed:37:db:56:d1:6c:04:45:9b:b7:1b:1e:67:1d:10:ad:61:83:
0b:a6:d4:1b:e1:68:74:ab:ed:77:28:66:3d:b8:22:20:46:5e:
54:77:88:b3:e0:39:dc:bb:1b:d8:1d:c1:f0:15:c4:bc:e0:79:
38:86:be:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net