Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5aac3469-e0f4-48b9-b8a9-d8bb38649bc0.roa
File: 5aac3469-e0f4-48b9-b8a9-d8bb38649bc0.roa (raw, json)
Hash identifier: OzAC0Qums4ehApRnnb51xhrr9mFgmljxDGpH9PKVg0o=
Subject key identifier: 38:65:1B:62:E5:78:3F:50:8E:BE:17:92:B9:53:BD:5E:FC:EF:2C:06
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2FF8C1B6EBCCC8BCE80876B596C27B1E688E4DBE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5aac3469-e0f4-48b9-b8a9-d8bb38649bc0.roa
Signing time: Fri 21 Jul 2023 00:00:00 +0000
ROA not before: Fri 21 Jul 2023 00:00:00 +0000
ROA not after: Fri 25 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f8:c1:b6:eb:cc:c8:bc:e8:08:76:b5:96:c2:7b:1e:68:8e:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 21 00:00:00 2023 GMT
Not After : Aug 25 23:59:59 2023 GMT
Subject: serialNumber=6b09e3fbaf6efd183d63462b6f761b0fc952d1c5a2d01254f3a01424e47d9c70, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:86:a7:49:b8:ff:cf:10:82:5a:eb:7d:30:
02:14:98:18:bd:e7:c0:52:0d:f8:80:95:9d:46:f1:
ba:48:6c:3f:2a:84:16:ba:21:74:7a:0d:3d:69:9d:
5f:2a:67:2a:ab:01:a0:1c:ac:6b:90:0d:0d:96:26:
94:5b:de:b5:c2:54:75:e6:8c:74:35:e7:99:61:d9:
89:80:67:cb:6c:bb:e8:88:e5:18:db:21:e7:56:1a:
7b:d1:ea:26:9b:e9:ce:31:83:1f:eb:f3:2a:bc:6d:
2c:72:a2:ac:b6:83:de:d6:5c:7b:f2:a2:8b:42:ba:
d0:1a:b7:39:ce:96:33:3c:9b:64:f3:27:82:65:d0:
61:16:16:f8:f0:d0:9f:71:93:e0:dc:68:01:de:7d:
68:f1:13:fd:ec:e8:58:03:ec:3e:94:10:36:d0:65:
f0:f8:df:9e:40:67:09:9b:ac:4d:d2:85:36:9a:c5:
85:79:2c:15:a9:4b:a9:76:74:0d:0d:eb:ce:d3:b9:
59:e7:20:25:b0:73:7e:57:cb:9a:d8:ef:78:0c:2e:
5d:c1:2c:28:f5:a5:f8:86:d8:90:ef:6f:45:45:b7:
19:a2:48:a4:a9:ad:ec:58:4c:53:7f:dc:5e:23:e5:
62:2d:54:9b:1a:36:f1:93:9e:dc:84:bf:0f:76:42:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:1B:62:E5:78:3F:50:8E:BE:17:92:B9:53:BD:5E:FC:EF:2C:06
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5aac3469-e0f4-48b9-b8a9-d8bb38649bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
79:68:8e:98:79:39:69:e4:b6:b9:6f:53:af:4b:0e:d2:24:25:
21:1e:67:1f:04:ac:50:1c:00:0c:22:5c:34:6c:77:2f:99:0f:
6a:01:36:23:eb:42:f5:32:09:47:c0:a3:81:c1:14:f1:c7:3a:
ee:6e:93:46:33:49:d9:d2:05:ae:b0:a7:5e:80:bc:31:0b:f8:
55:3b:2a:39:92:44:dd:41:70:63:ab:fb:f0:ee:d4:94:ba:19:
29:d2:70:cc:0d:57:a0:fe:27:10:6a:8b:cf:21:d7:ec:bd:01:
a8:3b:c9:db:9e:95:43:61:6d:31:d6:71:75:04:6f:b6:cc:33:
1a:76:6a:42:86:b4:de:2c:a0:b5:22:6a:56:c1:93:04:75:7c:
c1:ff:1f:c7:4e:ce:6d:4d:bd:6a:29:60:59:29:46:a3:cc:c0:
e6:54:a3:79:e5:a6:b9:b5:27:1a:65:ee:c3:72:39:94:82:91:
1d:8b:c6:8a:54:fa:54:7e:0c:ef:31:ed:98:8e:ce:70:d6:f9:
93:6a:17:3d:9f:dd:e0:47:bc:bc:12:a5:25:93:ae:fa:b2:5d:
05:00:2d:28:80:f7:5c:de:75:c4:b1:54:a3:b4:c1:5f:b6:f6:
37:41:6b:cf:4c:8d:13:62:95:da:95:9f:01:e9:72:a3:ee:43:
a4:d9:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:49 2023 by rpki-client on console.sobornost.net