Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5bca5922-f4e4-4869-b130-47ba26e1fc7a.roa
File: 5bca5922-f4e4-4869-b130-47ba26e1fc7a.roa (raw, json)
Hash identifier: GQcjnyW+MAg5L3GuLs+S9+8iQQXBfEok1Z/6OYCKOJ4=
Subject key identifier: BC:AF:30:C7:35:1E:92:92:E5:C4:81:C4:9E:8D:E1:4C:96:B3:77:DB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 16EE5CC239A1D46DC683E4FC2B6E5674E79845C6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5bca5922-f4e4-4869-b130-47ba26e1fc7a.roa
Signing time: Sat 29 Jul 2023 00:00:00 +0000
ROA not before: Sat 29 Jul 2023 00:00:00 +0000
ROA not after: Sat 02 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ee:5c:c2:39:a1:d4:6d:c6:83:e4:fc:2b:6e:56:74:e7:98:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 29 00:00:00 2023 GMT
Not After : Sep 2 23:59:59 2023 GMT
Subject: serialNumber=f806d1125f47c5abd80fa33b7628d1c9af5d57148d5eaa06962824c9a159547b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:41:48:ea:67:38:b6:79:56:90:c4:b1:c7:
b5:e8:68:0f:ef:46:2e:1c:14:3b:96:4f:94:c9:ec:
09:47:ef:91:71:72:14:6d:e1:df:3c:38:13:93:32:
d9:24:2f:36:5f:5a:0b:2d:8a:75:8f:6f:ee:3d:76:
72:0d:a2:a8:5f:05:a2:ac:9a:b1:f4:ac:75:29:6d:
74:6f:c4:4d:cd:e5:17:7b:10:4b:54:ed:87:5f:ba:
f0:a4:72:ad:c8:ba:79:82:ae:38:54:a0:c8:1c:82:
62:c4:5a:e4:8a:22:27:a7:3e:a9:70:29:bd:40:0b:
a1:38:12:09:2a:ce:01:c5:34:e4:bc:98:5b:47:47:
7a:00:eb:ca:c8:fa:31:7f:26:48:a9:2e:8b:a7:fe:
b5:fe:d3:48:45:69:1b:8c:ff:76:6f:03:b5:08:9e:
a4:f8:2b:cf:cc:6b:6b:ad:a3:cd:79:b1:0d:48:1e:
30:64:36:83:e8:29:e9:9d:6c:94:01:f2:84:12:56:
07:ce:1c:c7:91:df:07:01:31:27:56:a5:fd:fe:ec:
e9:5e:87:2d:22:b4:aa:61:ca:b7:db:95:90:29:4a:
e7:04:10:3a:95:5f:18:5e:99:7c:b4:ce:ce:ab:c3:
be:5f:cc:6c:bb:cb:28:86:cb:e6:5f:66:5e:9e:95:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:30:C7:35:1E:92:92:E5:C4:81:C4:9E:8D:E1:4C:96:B3:77:DB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5bca5922-f4e4-4869-b130-47ba26e1fc7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b3:79:02:49:58:e3:1e:d4:e5:4d:26:06:c9:12:f7:65:d7:
1b:14:8a:a2:49:52:a7:93:d5:25:7d:7b:91:a3:5b:fd:7f:93:
0e:db:b5:0a:7f:80:0a:be:a6:0d:8f:7e:1f:f0:b7:c3:97:ff:
32:e4:6e:5c:d2:6b:91:7f:58:1f:7b:b3:a5:be:d2:da:c8:d7:
ad:64:b9:7e:06:6f:c6:3f:b3:c9:2b:bf:1f:52:fa:71:86:5a:
ad:b9:30:99:0f:a3:61:1b:1c:2f:aa:0f:30:0f:fe:9f:01:59:
f8:63:e3:05:eb:7a:63:d8:c2:9d:1d:35:ff:a4:b8:0f:97:f9:
83:9d:80:0b:b7:77:28:d6:3f:f5:01:e3:bf:f6:df:ef:c0:e3:
07:9e:f9:c5:e3:1f:ec:08:11:21:95:07:c7:65:d0:01:c2:1a:
a0:ab:6c:ed:4c:2b:d5:09:e9:01:bd:c4:e8:8a:b7:85:4f:07:
b9:e4:ea:d5:22:e9:da:0d:29:e7:af:58:37:eb:b3:21:bf:7a:
88:fe:02:61:35:fb:64:79:b6:1c:8a:ed:2e:54:7a:27:63:0e:
f2:50:7c:76:89:51:1e:d1:02:1f:05:a8:3c:c7:ad:5c:fa:f7:
3e:43:7f:8b:f1:38:29:95:e5:c8:96:32:68:7c:76:d9:70:ea:
e9:a2:84:ea
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFu5cwjmh1G3Gg+T8K25WdOeYRcYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzI5MDAwMDAwWhcNMjMwOTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BmODA2ZDExMjVmNDdjNWFiZDgwZmEzM2I3NjI4ZDFjOWFm
NWQ1NzE0OGQ1ZWFhMDY5NjI4MjRjOWExNTk1NDdiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfwEFI6mc4tnlWkMSxx7XoaA/vRi4cFDuWT5TJ7AlH75Fx
chRt4d88OBOTMtkkLzZfWgstinWPb+49dnINoqhfBaKsmrH0rHUpbXRvxE3N5Rd7
EEtU7YdfuvCkcq3IunmCrjhUoMgcgmLEWuSKIienPqlwKb1AC6E4EgkqzgHFNOS8
mFtHR3oA68rI+jF/JkipLoun/rX+00hFaRuM/3ZvA7UInqT4K8/Ma2uto815sQ1I
HjBkNoPoKemdbJQB8oQSVgfOHMeR3wcBMSdWpf3+7Olehy0itKphyrfblZApSucE
EDqVXxhemXy0zs6rw75fzGy7yyiGy+ZfZl6elfshAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvK8wxzUekpLlxIHEno3hTJazd9swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzViY2E1OTIyLWY0ZTQtNDg2OS1iMTMwLTQ3YmEyNmUxZmM3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHCzeQJJWOMe1OVNJgbJEvdl1xsU
iqJJUqeT1SV9e5GjW/1/kw7btQp/gAq+pg2Pfh/wt8OX/zLkblzSa5F/WB97s6W+
0trI161kuX4Gb8Y/s8krvx9S+nGGWq25MJkPo2EbHC+qDzAP/p8BWfhj4wXremPY
wp0dNf+kuA+X+YOdgAu3dyjWP/UB47/23+/A4wee+cXjH+wIESGVB8dl0AHCGqCr
bO1MK9UJ6QG9xOiKt4VPB7nk6tUi6doNKeevWDfrsyG/eoj+AmE1+2R5thyK7S5U
eidjDvJQfHaJUR7RAh8FqDzHrVz69z5Df4vxOCmV5ciWMmh8dtlw6umihOo=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:49 2023 by rpki-client on console.sobornost.net