Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ec19bac-043a-4833-8686-409d1639b93a.roa
File: 4ec19bac-043a-4833-8686-409d1639b93a.roa (raw, json)
Hash identifier: /suzOSU6D6BSZJ2ATu4DDYjW6q55eoovMk+Q6BFE2nY=
Subject key identifier: CB:BC:CC:1E:05:30:9E:48:58:A2:73:DD:0D:01:AA:39:FE:E6:D1:95
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 750EE25C3E4926A5367CB8174B2EDBDDBB47D0AF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ec19bac-043a-4833-8686-409d1639b93a.roa
Signing time: Tue 22 Aug 2023 00:00:00 +0000
ROA not before: Tue 22 Aug 2023 00:00:00 +0000
ROA not after: Tue 26 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0e:e2:5c:3e:49:26:a5:36:7c:b8:17:4b:2e:db:dd:bb:47:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 22 00:00:00 2023 GMT
Not After : Sep 26 23:59:59 2023 GMT
Subject: serialNumber=e611718b9dcae49bf2ddb58b723c4070974af017f1bfbc00ff699e635cec0b8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:46:60:e8:e3:0e:80:d6:8f:01:16:55:19:
33:6e:1f:3e:cb:04:09:79:f1:b4:eb:db:76:bd:3f:
c0:44:65:df:c4:6c:d2:5f:e4:0c:f3:50:1d:8e:08:
8b:5c:a6:7f:7a:6b:90:c2:4c:ff:45:04:8a:3f:78:
1f:b4:fe:a6:a5:b9:9f:1c:b5:7b:5c:53:70:9d:85:
c6:30:4b:89:79:32:68:4a:b0:f4:d8:ca:ba:ae:5c:
d6:25:34:55:18:cc:a8:d0:0b:80:c6:47:32:01:8f:
f4:63:5a:40:63:37:45:44:d3:b0:64:b0:42:89:e4:
82:9e:37:30:b1:c9:be:87:91:aa:28:a8:19:a3:fc:
90:2e:b6:f9:68:cc:5e:4c:4e:6f:1a:f6:f7:a0:cd:
79:2b:6b:0e:e5:ee:45:59:58:3e:18:11:dc:49:09:
95:72:d2:0f:04:93:b4:ed:02:32:76:4c:51:77:b3:
b2:f4:4a:44:b4:3a:42:86:a9:c5:1d:c0:19:80:e4:
c2:6c:12:e2:76:42:7d:27:f8:8a:d8:28:10:f1:a6:
e9:83:3d:f4:b3:d2:70:2c:c7:36:87:22:33:42:22:
39:57:3b:be:51:65:30:33:a0:a8:de:25:9b:84:af:
41:77:6f:3a:bc:33:de:b1:4b:de:8e:f7:00:44:d6:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:CC:1E:05:30:9E:48:58:A2:73:DD:0D:01:AA:39:FE:E6:D1:95
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4ec19bac-043a-4833-8686-409d1639b93a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:13:0f:3c:1a:59:8d:21:8f:09:a6:a4:5b:82:78:11:87:d6:
1e:69:fa:50:b7:50:d3:47:88:61:17:80:11:91:16:17:51:e8:
c5:fa:85:d0:18:90:45:82:ae:62:57:a0:8c:4e:d2:8f:f4:00:
e0:0c:d7:2d:ab:56:89:69:3c:53:34:90:75:47:c1:f5:2c:21:
26:7d:87:c9:c4:33:40:d3:73:06:ba:a2:a8:b3:5d:77:7b:2b:
8d:4f:7b:f0:3d:e1:cf:29:bc:09:31:6d:85:b5:88:cf:de:09:
40:ba:3f:08:aa:16:f0:d8:89:8e:fc:e5:62:b3:b6:4b:66:5d:
3c:7c:49:73:06:86:ad:70:20:09:af:c0:89:2b:37:94:8a:da:
09:c1:1d:0b:d5:b2:9d:92:02:26:c0:17:84:04:49:a4:4b:bf:
7b:23:cf:0e:2f:33:a7:2b:eb:7b:1b:35:fb:c0:78:50:2c:df:
c7:53:56:44:3f:70:c0:ab:cb:76:9f:0a:8b:0c:d4:0d:e7:5e:
58:e7:b2:ec:7d:69:d6:4a:51:52:86:e6:00:61:6f:40:1c:6f:
00:60:ee:30:f2:34:78:67:3a:c9:d9:19:4d:38:cf:d6:32:c4:
f3:46:26:1b:b2:51:a3:18:61:02:bf:b0:c1:25:f3:a0:aa:ed:
38:16:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net