Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4fa91741-0d79-49e4-95e3-aab715851465.roa
File: 4fa91741-0d79-49e4-95e3-aab715851465.roa (raw, json)
Hash identifier: akdyU1LVVF0iTIjJ65C0i3i+lhVCXeA6cKXAHOJol2Q=
Subject key identifier: 14:10:96:37:EC:42:14:01:A1:99:AB:61:E3:05:1A:40:FE:BC:E4:02
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0855434820D6323CCFE2DCBFCD9B260A3494E99A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4fa91741-0d79-49e4-95e3-aab715851465.roa
Signing time: Sat 21 Oct 2023 00:00:00 +0000
ROA not before: Sat 21 Oct 2023 00:00:00 +0000
ROA not after: Sat 25 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:55:43:48:20:d6:32:3c:cf:e2:dc:bf:cd:9b:26:0a:34:94:e9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 21 00:00:00 2023 GMT
Not After : Nov 25 23:59:59 2023 GMT
Subject: serialNumber=4cbd3aa0241d95c1871249215fc2b46aff2c7dbb8390cd490e7e3c2876667691, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:bf:4a:0e:6e:aa:91:c9:70:18:c0:6c:9b:
c0:41:df:27:1a:45:8b:5a:36:c1:bd:43:8e:32:77:
6f:5f:33:75:76:b1:15:32:da:14:7e:13:08:05:02:
dd:f7:59:07:28:15:29:74:d3:8b:d1:96:6b:d5:78:
39:8c:70:a1:71:e8:d5:fd:99:c8:b5:47:ec:83:29:
ed:b2:6e:fa:ac:58:e0:7a:fc:83:70:94:e9:75:ce:
14:34:15:93:5f:b2:9d:5c:c8:8c:04:93:38:90:69:
29:98:73:b6:ce:46:a9:54:f5:5b:44:64:f4:9f:03:
ba:96:e7:03:96:56:2d:82:7e:09:eb:5c:2a:dd:e2:
22:20:3f:18:0f:16:2c:39:5d:37:66:73:37:16:b9:
98:37:9a:df:83:74:e3:62:9e:dc:b9:6a:36:b1:ea:
91:7e:96:73:1d:ff:b7:6b:bb:c8:3a:bf:46:c1:5c:
e8:e3:2d:99:c6:b3:5b:ae:17:dc:40:2b:94:39:02:
df:08:3c:ee:4e:73:73:5a:64:a6:e2:41:dd:c8:45:
b2:84:ac:bf:aa:fe:4e:2d:cd:4d:b1:72:31:81:be:
b2:66:c5:16:63:c1:ef:79:7d:c2:fe:4f:38:d6:b2:
3d:7a:30:9e:cd:9f:65:ea:c9:24:df:98:42:59:2a:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:96:37:EC:42:14:01:A1:99:AB:61:E3:05:1A:40:FE:BC:E4:02
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4fa91741-0d79-49e4-95e3-aab715851465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:41:3e:d8:cb:8b:82:e6:8b:31:98:3b:38:75:6e:60:ac:64:
b6:c1:90:e2:ed:d4:6b:af:a4:6c:5b:e1:a1:01:09:26:cb:ec:
a5:93:82:ed:cd:49:bd:20:92:15:c5:ad:fa:e5:e4:ae:0a:3c:
30:a9:da:b3:0f:38:f4:c4:ba:e4:8f:b1:49:aa:be:0f:34:10:
21:7c:77:f9:38:c2:d9:e1:fd:43:a2:2b:aa:20:6d:6f:7f:6a:
9f:c6:c6:ba:68:d7:66:22:d1:10:2d:93:72:bc:79:0b:5e:1c:
8b:c6:04:38:ed:ee:79:ff:e0:a3:9d:9a:23:1f:72:15:f7:98:
44:fd:58:23:45:50:d8:73:2c:f5:93:1a:cf:79:63:74:9b:12:
30:5e:40:da:d4:28:1c:f2:43:98:77:5e:d8:0c:64:ad:cf:0e:
84:59:39:01:be:c8:de:c2:18:a2:d0:1c:f2:63:6f:63:2a:f1:
0d:81:ab:2f:23:9c:73:ed:c2:d6:8c:92:b1:98:9c:98:aa:62:
3e:e2:7c:8f:96:d5:ac:c0:0f:a1:02:f5:a9:2c:1b:d8:5a:60:
3a:ed:79:ff:c6:06:09:99:9b:d4:c7:c2:89:7a:c7:82:84:4c:
11:07:7d:47:fd:b7:37:aa:d5:8f:01:02:69:94:ae:24:c4:de:
db:69:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net