Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/52831ba7-2dd3-4c88-b17c-09c6e55e7856.roa
File: 52831ba7-2dd3-4c88-b17c-09c6e55e7856.roa (raw, json)
Hash identifier: zx5V371BXzV+lR/eEmyq+xYFCzM9WDM/H2Upw5lD9oM=
Subject key identifier: 47:EB:72:11:51:38:C5:E9:50:E4:FB:FC:65:E3:11:F9:B4:19:96:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3A4207A8B8BDF57FBEEA0B0367DC013DEBE3E1B5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/52831ba7-2dd3-4c88-b17c-09c6e55e7856.roa
Signing time: Tue 14 Nov 2023 00:00:00 +0000
ROA not before: Tue 14 Nov 2023 00:00:00 +0000
ROA not after: Tue 19 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:42:07:a8:b8:bd:f5:7f:be:ea:0b:03:67:dc:01:3d:eb:e3:e1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 14 00:00:00 2023 GMT
Not After : Dec 19 23:59:59 2023 GMT
Subject: serialNumber=e668e9903c322ebb4645a9f1e94c0d3d00e60d748fdfbda0bf1026d6acb5fd7e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:d4:80:ff:4f:4a:28:df:c9:77:af:a2:e3:
5f:e6:31:99:67:e8:9a:10:97:d6:df:ed:c7:d4:85:
65:3c:5a:f1:66:99:5d:62:1f:f6:13:5e:d3:dc:2f:
15:ac:7c:92:31:5c:ff:51:b0:52:c0:19:12:c6:4c:
0a:72:d4:5c:59:84:64:f5:a8:2c:eb:80:f2:7e:df:
bd:e4:bd:38:04:c5:28:57:b3:7d:17:af:52:b8:98:
d8:8f:f0:47:8c:bd:a7:de:f7:aa:86:91:85:85:aa:
6d:44:be:75:13:5c:eb:ad:a2:3e:f4:e5:46:92:d9:
ca:fd:82:53:c7:c7:02:9c:d5:01:41:78:8f:f9:9b:
49:70:6c:34:76:b2:5a:6a:c8:ef:0e:b5:d6:38:52:
1b:23:bb:00:92:21:eb:3a:94:fb:11:c3:4e:13:d6:
fd:4c:10:b7:3c:a7:7f:16:b4:63:83:db:07:fa:30:
e3:a9:c0:2c:06:4a:f5:a7:0f:f1:b4:5e:4e:de:70:
3f:6e:52:21:2a:c8:fc:7a:d5:f5:f8:47:16:97:19:
a8:2e:ce:9a:c1:97:c8:b7:08:0a:ae:fa:53:42:68:
27:6d:64:7e:f4:a4:74:b7:9e:14:e3:6d:c3:4e:53:
ff:cb:7f:d1:31:05:8e:7b:69:3c:11:c5:66:ca:26:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:72:11:51:38:C5:E9:50:E4:FB:FC:65:E3:11:F9:B4:19:96:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/52831ba7-2dd3-4c88-b17c-09c6e55e7856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:14:25:e3:a9:20:54:00:fe:9a:33:c5:e9:c2:97:98:c2:43:
89:b0:24:2e:0d:c7:70:60:8c:f4:4f:7b:cb:87:03:34:98:b7:
6e:7b:c4:9d:5d:ec:43:7c:29:83:08:08:4e:b6:4b:1a:50:ec:
13:c0:46:a3:5f:49:b4:dc:c6:14:33:de:ad:1b:41:97:8f:3f:
b0:0c:e0:bb:86:a5:c7:50:f3:39:62:26:e2:ee:c2:3e:06:e3:
90:2a:a8:c6:5f:8e:e5:fd:fe:78:5c:02:79:a0:7e:88:4c:b7:
1c:ad:cd:df:ad:7b:54:7e:e9:3e:5f:7c:c9:25:d7:35:c8:e9:
3f:78:40:71:79:04:2b:88:67:a8:bc:78:ec:7c:bf:2a:a8:45:
5c:05:14:52:e3:29:0e:26:8c:3f:94:66:bd:06:7a:fa:fb:d6:
55:3d:fb:4c:29:7f:7c:e8:6b:c0:92:7b:3d:e5:2c:8e:f0:49:
64:a9:a6:d4:c6:45:c4:22:cf:c8:5d:2b:0f:fe:35:81:80:83:
3a:84:b1:90:64:c3:5e:a4:ca:9a:96:55:b7:13:62:46:ad:af:
aa:ac:c3:81:c2:53:52:88:68:e4:c9:63:dd:90:1b:7e:a6:ed:
b7:7d:78:40:d9:22:a3:a7:ca:4e:c0:2d:85:93:08:39:51:d5:
70:02:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net