Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36cdd6f4-0293-4b09-baa1-01b8ceeec1ac.roa
File: 36cdd6f4-0293-4b09-baa1-01b8ceeec1ac.roa (raw, json)
Hash identifier: d6j80qA6OBKu2TdKRaWSiFbAZdbTD6jYxyD61W06PH0=
Subject key identifier: 62:F4:F8:C1:7C:A4:01:BC:13:BF:51:CC:1A:D6:60:31:83:52:AA:4C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 20288A015580DC8648752F43E84404957EAFE8C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36cdd6f4-0293-4b09-baa1-01b8ceeec1ac.roa
Signing time: Sun 29 Oct 2023 00:00:00 +0000
ROA not before: Sun 29 Oct 2023 00:00:00 +0000
ROA not after: Sun 03 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:28:8a:01:55:80:dc:86:48:75:2f:43:e8:44:04:95:7e:af:e8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 29 00:00:00 2023 GMT
Not After : Dec 3 23:59:59 2023 GMT
Subject: serialNumber=265af4210f2f0db5b49826fa0bc9958c88500cd8d5c6b023d8598cbf080eab34, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:b6:83:c6:c7:d7:07:ac:65:f1:b3:b7:e4:
4e:3c:66:5c:04:3d:a3:d6:e4:8e:aa:07:c0:31:83:
e3:42:79:ca:00:8c:3c:8a:76:dc:d9:af:75:37:e7:
a3:89:6d:d8:95:9f:12:74:40:90:54:d4:3e:c6:73:
e4:83:7d:d1:fd:ec:a7:b5:2b:3c:06:61:f7:e8:c9:
31:e9:a4:c2:ba:50:b9:be:f0:9d:a3:02:4f:6b:93:
6d:65:5d:66:67:68:b6:5c:42:24:c0:e2:fd:96:f7:
b0:fb:8b:15:80:d7:eb:2e:7d:b7:be:e2:6f:33:d5:
cf:76:f6:fb:b4:b8:c3:c4:fa:3a:bf:4f:0a:47:8c:
88:94:41:64:c3:87:ad:4a:b1:d8:21:61:f5:be:bc:
0f:b1:f0:20:25:57:65:68:68:8d:04:b0:19:0c:2e:
00:95:a5:06:7f:f6:7d:6b:ca:70:5f:e5:50:33:a2:
29:c4:e7:9f:22:43:5f:34:7a:c0:c6:c7:56:74:84:
d6:80:8b:6f:7f:08:99:e6:3c:11:e6:17:bb:4a:84:
f6:56:b4:d7:0f:98:4a:07:6b:ff:88:45:4d:41:7e:
c8:da:ff:da:fd:7b:17:83:29:09:92:20:31:ec:97:
73:6f:a6:f9:98:ab:56:76:e8:75:fd:7a:79:bf:7e:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:F8:C1:7C:A4:01:BC:13:BF:51:CC:1A:D6:60:31:83:52:AA:4C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/36cdd6f4-0293-4b09-baa1-01b8ceeec1ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b5:f7:fd:77:16:6b:01:c6:53:0e:ee:00:e9:f0:20:6b:a4:
f0:f8:52:03:8e:e3:92:b7:9d:b4:76:d3:48:93:4a:d1:2f:78:
a3:77:c3:8e:cb:09:c5:5d:37:4a:5b:41:c9:77:99:ea:e8:24:
5a:22:0b:f2:25:33:b3:f8:81:1e:e2:55:1a:f4:7a:62:7d:e1:
ce:a0:f0:46:06:63:26:0f:a5:19:47:f8:81:c7:b8:a7:52:49:
f5:06:3b:c0:16:54:8a:c7:e4:d6:e7:27:95:01:ed:8a:c5:07:
7f:bd:1b:1a:2a:a5:3a:55:a6:f6:cd:11:69:e6:8c:47:c3:30:
79:e9:54:45:af:cd:d7:0f:ba:fc:da:01:ea:e1:01:54:62:36:
ea:bc:d5:9e:6a:3e:a4:14:fd:55:ee:d7:ac:19:06:7a:41:a5:
51:a0:bc:dd:7a:1a:be:f5:1a:f0:4a:fd:de:cc:48:e8:7b:61:
74:39:96:f0:2e:07:f0:21:3e:67:56:f2:82:7f:a7:b1:22:49:
d6:ea:85:07:0b:d5:2b:3f:8b:bd:8b:2e:3d:32:ab:6f:ed:db:
2b:50:c8:bb:25:cf:aa:be:9f:ac:b0:0f:f3:b4:5b:f0:9c:25:
d0:d6:ad:86:b1:74:26:88:d5:6c:99:20:b9:47:64:71:99:41:
c9:bd:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net