Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e995958-9949-4253-9a74-d470e808e32b.roa
File: 3e995958-9949-4253-9a74-d470e808e32b.roa (raw, json)
Hash identifier: oxVfksGI0sSx29/POV81fGWurWlqTYJdfrShsihpbkc=
Subject key identifier: CD:4B:86:29:25:EB:9F:A4:C9:D2:74:33:B8:20:F5:19:4B:D8:4E:26
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 23740EA894CB6F4A864CB376AF6CE19B3EE470CE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e995958-9949-4253-9a74-d470e808e32b.roa
Signing time: Thu 13 Jul 2023 00:00:00 +0000
ROA not before: Thu 13 Jul 2023 00:00:00 +0000
ROA not after: Thu 17 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:74:0e:a8:94:cb:6f:4a:86:4c:b3:76:af:6c:e1:9b:3e:e4:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 13 00:00:00 2023 GMT
Not After : Aug 17 23:59:59 2023 GMT
Subject: serialNumber=a141a73adbf63dcfed7da8bc8dcf9a030cb2952e5f2bcc50694cb2e28ba3fc54, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:f3:14:0f:63:8b:94:e6:c1:78:6e:85:f6:
26:96:3c:58:ae:63:8b:a7:7b:09:a2:a5:01:7f:86:
de:69:d9:9f:9d:21:f0:9c:dc:52:78:51:90:1a:1f:
81:1b:50:25:d0:7f:2a:9a:a4:08:e4:f3:26:52:b3:
3d:ad:da:4c:04:5e:4a:5b:38:23:ce:aa:d1:fc:f8:
fd:6a:e3:59:59:01:3b:62:6c:24:b0:b5:11:df:f6:
50:6b:0b:1d:8c:d4:2d:de:c0:04:88:bf:d6:a7:f1:
6f:38:38:78:04:42:9c:fe:f4:c8:bf:79:65:26:ea:
6d:2d:40:4e:48:84:20:33:4c:5a:3d:4f:21:56:7b:
92:77:f9:82:50:02:18:57:c0:5e:27:df:53:8b:bd:
bb:47:b9:7e:80:91:11:a6:ff:30:d2:43:32:b5:34:
9b:84:ff:4b:5c:9e:f6:1f:b6:a4:5d:a4:f6:a7:26:
3a:b4:4f:03:ee:12:48:a1:19:66:f6:69:f7:8a:0e:
00:83:3e:23:32:25:c5:2b:e5:8f:f1:20:40:b7:1c:
0a:36:68:24:1a:27:af:a9:60:4b:ef:88:ea:02:49:
44:85:91:e3:d0:03:a0:06:77:9c:37:48:47:18:57:
a6:b6:03:58:d5:81:be:09:62:c0:27:e0:19:80:2d:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4B:86:29:25:EB:9F:A4:C9:D2:74:33:B8:20:F5:19:4B:D8:4E:26
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3e995958-9949-4253-9a74-d470e808e32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d3:9e:7b:c2:72:a7:33:bf:a5:8d:40:3b:70:1f:a6:0e:f8:
e9:1f:d7:7c:d4:d8:c9:47:41:48:2e:a0:b6:55:47:79:ca:58:
b9:e5:21:29:8a:77:13:e1:28:75:70:8a:40:19:83:95:8a:1f:
6e:12:4d:6d:e0:40:f3:ed:e6:2e:08:66:c6:4e:40:a4:98:18:
eb:00:3b:25:d7:f2:b1:0c:7e:93:fc:52:d3:30:e8:8a:9c:19:
fa:5a:34:2c:0c:61:8c:bc:15:be:7b:fe:ee:68:0d:d3:5b:73:
af:15:83:eb:1b:3c:b6:55:0e:20:8f:1e:34:b3:f0:18:a5:45:
a2:0c:28:d2:6f:be:3f:b7:69:3f:80:50:04:88:3b:4e:4c:c9:
a5:a0:0b:af:e3:99:fe:07:18:4e:d3:94:03:88:2c:94:21:2d:
98:b8:9c:34:5f:56:b1:83:00:99:43:4c:19:f1:47:26:cd:8d:
2c:eb:5b:98:18:59:5f:0f:d3:08:a8:8d:3b:37:38:0f:34:22:
9f:39:44:11:8c:21:98:ef:0e:74:3e:48:0a:9a:74:76:bc:b8:
7f:40:f9:6b:c6:11:75:80:65:b6:c6:03:33:74:2c:e8:ca:2a:
66:af:ef:92:76:c4:c4:7b:38:f1:af:e2:c3:11:6a:82:63:f6:
5f:9d:e0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net