Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/53164ab1-7df9-44fa-a572-6136e11fb3c5.roa
File: 53164ab1-7df9-44fa-a572-6136e11fb3c5.roa (raw, json)
Hash identifier: 7nSI/TeMbBsVs2pisg6zJjLCc8t1lLzNDb/4NGSHowg=
Subject key identifier: BF:3B:E9:B7:FC:84:78:71:6A:04:84:55:17:AC:48:AC:69:9F:F4:54
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 66AF9AA315BEEBBAE376B1CFCE159D017043DBF9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/53164ab1-7df9-44fa-a572-6136e11fb3c5.roa
Signing time: Sat 18 Nov 2023 00:00:00 +0000
ROA not before: Sat 18 Nov 2023 00:00:00 +0000
ROA not after: Sat 23 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:af:9a:a3:15:be:eb:ba:e3:76:b1:cf:ce:15:9d:01:70:43:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 18 00:00:00 2023 GMT
Not After : Dec 23 23:59:59 2023 GMT
Subject: serialNumber=0a3622875847f8704b62aba96fd441ed1c73f4335fb6449b1b14f4e0856854c8, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:78:74:ac:f6:e5:45:95:19:d8:88:5b:c4:
44:e6:f4:d7:67:87:93:de:fd:4e:d9:2e:dc:24:29:
f4:2e:20:39:54:fd:25:ae:59:3c:36:1f:da:db:4c:
f5:65:f1:44:22:0b:ca:11:21:74:98:dc:53:59:b6:
98:13:50:66:07:d3:27:3d:0a:f5:9f:08:01:27:5a:
db:11:3a:aa:2a:a7:4e:97:99:95:d4:42:56:99:87:
75:90:b4:ed:33:db:57:a1:2a:51:b0:be:6d:81:02:
4f:e8:56:52:89:9c:f6:54:77:a3:e4:bc:b5:c1:83:
e6:29:6f:ee:2c:42:64:24:f3:d6:9c:b2:e8:39:bc:
2c:f1:eb:3a:a3:cb:54:7d:ae:4a:fe:6f:6c:ca:7d:
9c:ce:45:f3:6a:1f:f0:d4:dd:ef:74:f6:e7:d3:d2:
4a:19:d7:c0:2e:91:65:dc:dd:e9:03:47:0e:70:4a:
72:6f:3b:75:a7:c1:2d:48:00:a8:76:6e:1e:fb:d3:
60:03:c5:ba:21:f2:9b:4d:37:ad:8c:bf:c4:0f:eb:
a8:3b:36:7f:32:78:d5:a5:e9:a7:76:95:8b:d3:8b:
bc:46:e6:ed:13:9a:69:31:87:c7:4b:78:4d:8a:f4:
e8:1c:bd:54:2b:18:9e:19:6a:a1:57:64:e8:5c:b1:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:E9:B7:FC:84:78:71:6A:04:84:55:17:AC:48:AC:69:9F:F4:54
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/53164ab1-7df9-44fa-a572-6136e11fb3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:1d:ef:c7:2e:83:e9:fd:2d:fd:d2:9f:aa:a4:71:06:49:a1:
eb:67:9b:d1:71:7a:5e:8e:18:4a:79:f9:47:1e:9f:7b:18:ed:
ae:20:9b:1b:a2:a1:7b:f7:93:e4:28:17:d6:5a:4a:c3:17:4b:
ca:19:1f:d4:de:d8:02:6a:e6:8e:bf:5a:d8:04:89:88:d2:9e:
83:a2:1a:12:1d:d8:fb:01:73:d4:52:5b:8a:dd:b6:44:b7:ca:
2a:04:d3:cc:1e:4e:b0:60:12:ba:8a:c1:8d:e7:b6:eb:af:da:
3f:b1:db:be:ff:8f:1b:af:de:4a:14:d4:46:53:bc:99:f1:a7:
2c:86:c6:1c:92:a1:34:79:1a:66:8a:d6:e1:0b:eb:62:0c:61:
ec:5c:17:13:83:07:b5:16:47:90:1d:ca:01:93:20:f6:33:17:
8a:5e:79:ec:ad:a3:d4:8a:38:a3:8d:1e:ba:ff:31:0b:22:8e:
a7:4d:1f:e9:32:27:02:b1:00:5e:86:55:b9:a3:eb:75:ee:82:
b9:9d:c8:63:fe:93:d1:89:f8:f9:f1:29:a8:26:93:d0:4f:8a:
24:69:b8:f7:d2:ea:67:b9:11:58:53:bc:21:b5:e5:b6:07:79:
12:9a:c7:5b:6f:0f:91:93:0b:29:92:cc:bd:20:08:33:27:f3:
03:1d:49:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net