Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5258ac33-f8c5-4425-bd83-da7b3c0aa0fa.roa
File: 5258ac33-f8c5-4425-bd83-da7b3c0aa0fa.roa (raw, json)
Hash identifier: yR3j+DV8JKU09IBYM/7K+5EIyU+0chHdkRRqMTv3/D4=
Subject key identifier: 05:5E:6E:2E:81:98:3B:2A:3B:DC:32:1A:D5:F8:D4:EC:44:AC:74:AC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2C75EE3B36F9EC7326E429EE65917B9E23C1F0A9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5258ac33-f8c5-4425-bd83-da7b3c0aa0fa.roa
Signing time: Wed 30 Aug 2023 00:00:00 +0000
ROA not before: Wed 30 Aug 2023 00:00:00 +0000
ROA not after: Wed 04 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:75:ee:3b:36:f9:ec:73:26:e4:29:ee:65:91:7b:9e:23:c1:f0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 30 00:00:00 2023 GMT
Not After : Oct 4 23:59:59 2023 GMT
Subject: serialNumber=a57a6ff43e09c14833a2e50e42fbf1ed424601c67d0881f9a63d99896c579092, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:19:e7:10:40:0f:21:f8:5d:1b:82:aa:bd:
1e:2c:be:06:ae:14:fb:c2:17:5b:32:93:3a:53:94:
49:e2:bf:15:d3:93:f8:98:49:10:ce:69:6c:58:0c:
77:df:98:8f:fa:06:91:a6:5d:83:aa:6b:4b:4b:5b:
49:28:52:09:a1:69:6f:a7:c6:7f:e7:58:fc:ac:e7:
86:19:db:22:5c:85:a6:8f:d1:95:73:40:72:e7:80:
b2:39:c7:52:91:60:33:07:ab:94:b2:fc:9e:bf:79:
49:cc:5d:c9:f5:d3:45:aa:79:8e:98:d6:5d:fd:e9:
70:0c:9e:40:96:ff:72:ce:74:2e:b4:91:8d:3f:43:
12:8b:d8:2d:a1:3e:88:cf:6e:07:08:a8:1b:f3:af:
f3:cf:83:f4:af:ee:ac:6b:ea:c3:56:e2:c1:ed:ef:
1d:f8:59:1f:56:b0:04:d4:39:7e:12:9e:d7:d8:e0:
24:21:0c:29:d5:61:f4:4b:21:13:70:96:7c:2a:e3:
8b:b3:b6:01:59:25:a2:9c:0a:ec:1f:45:4d:b0:69:
af:99:0f:37:f0:e5:d6:b0:0a:a1:4b:7c:59:da:2d:
b2:ad:33:0a:0c:cc:45:71:ea:84:d4:0f:39:1c:96:
a1:a8:fa:d5:de:12:cc:4e:4e:4e:e8:77:f9:90:0d:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5E:6E:2E:81:98:3B:2A:3B:DC:32:1A:D5:F8:D4:EC:44:AC:74:AC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5258ac33-f8c5-4425-bd83-da7b3c0aa0fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:5f:10:a4:92:29:81:c1:d0:d7:96:58:06:a7:63:78:c9:b4:
6f:8d:2c:e0:2f:0e:eb:a1:22:84:31:e3:5c:51:ee:b1:ac:5f:
65:fa:76:f1:10:2b:49:b3:61:08:7e:8f:98:6b:9b:b7:65:0a:
21:8f:98:70:f5:c4:26:85:9e:a1:d1:cd:a9:34:88:af:10:c8:
0c:33:9c:eb:fe:db:4e:d0:14:3c:57:9d:ae:b8:c8:e1:10:01:
0e:60:67:e7:45:4f:7f:5b:9d:07:03:1e:24:58:aa:e1:15:d6:
e6:d8:87:e3:e5:dc:86:03:80:7b:24:3b:7d:42:ab:36:c8:50:
9d:82:76:2a:e1:25:8d:b7:bd:2d:04:0c:d4:5a:df:03:cc:ed:
90:0d:00:b5:a6:bc:1b:6f:8d:50:1a:d6:56:60:cb:62:95:99:
c3:b4:28:2d:02:d9:99:50:e8:54:dc:11:4b:73:15:96:81:4e:
e8:d5:35:4f:8d:13:40:1c:74:0e:63:82:89:db:59:41:f1:2e:
23:d4:0d:70:a7:31:9d:39:45:a1:3f:0f:b2:63:73:7f:98:48:
99:a6:c4:f1:38:0c:0f:a5:88:4e:ec:e9:6a:07:17:59:f8:5d:
b9:a8:3f:7b:8e:af:7e:f0:ad:2e:2f:2d:04:ed:39:f9:16:9c:
3e:7c:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net