Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c3bdcfc-c461-4738-9752-28bc41fc3982.roa
File: 5c3bdcfc-c461-4738-9752-28bc41fc3982.roa (raw, json)
Hash identifier: XEcAvqpQEFxN6US67DgQTqix9iZGJ54G3Wl2A9//yH0=
Subject key identifier: B1:59:89:80:46:20:41:E1:69:FA:B6:58:63:02:1B:9A:3F:72:DD:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 22789B7FFF6235D8AE7868BE252DE1572BF1242A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c3bdcfc-c461-4738-9752-28bc41fc3982.roa
Signing time: Tue 07 Nov 2023 00:00:00 +0000
ROA not before: Tue 07 Nov 2023 00:00:00 +0000
ROA not after: Tue 12 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:78:9b:7f:ff:62:35:d8:ae:78:68:be:25:2d:e1:57:2b:f1:24:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 7 00:00:00 2023 GMT
Not After : Dec 12 23:59:59 2023 GMT
Subject: serialNumber=79523c1cc61c8cb4c0c8cc203408b9eb199c5102ddafa8bd68c6c6833e9ea435, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:bb:15:b4:93:83:d5:71:ff:de:57:05:19:
27:58:aa:4a:bb:72:59:b9:b5:fb:41:63:b8:d5:a9:
c8:63:14:4d:c2:3b:16:95:4f:79:27:21:25:54:2a:
35:b2:eb:a1:cc:b5:f4:69:ee:ba:6b:5e:c7:5b:f2:
88:a1:12:b6:69:6d:fa:56:7a:75:96:34:dc:6a:c7:
00:4e:e6:ce:be:27:e1:6f:29:b2:5a:a2:ea:9c:e9:
23:d0:7e:e6:a6:7c:a7:1b:08:f8:5b:b9:01:a2:b5:
a2:dc:79:d4:3c:3f:4d:6b:51:be:5c:55:a0:95:c3:
89:4d:33:b5:74:cf:e1:0a:6c:6c:76:56:54:f0:01:
5b:56:e0:92:e1:bd:58:23:ef:cc:ad:ec:13:ac:b2:
51:68:71:ae:91:02:38:9e:30:9c:ec:e2:92:e1:8a:
14:ea:dd:31:50:6e:ea:23:b3:eb:7a:42:89:5e:e0:
35:eb:72:a6:f6:81:94:be:90:6b:88:76:bc:dd:ca:
72:92:08:41:73:1b:d6:0c:da:41:41:80:ef:67:0e:
0e:4b:64:e5:f0:a9:1e:a6:19:bb:62:c9:0a:1a:c8:
e9:e7:0a:e8:5a:3b:f2:91:dd:17:76:ad:56:0a:40:
ff:02:5b:eb:a9:32:05:6a:41:5d:b4:1c:53:79:43:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:89:80:46:20:41:E1:69:FA:B6:58:63:02:1B:9A:3F:72:DD:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c3bdcfc-c461-4738-9752-28bc41fc3982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:24:ef:d4:0f:1a:2a:b7:cb:6a:eb:91:17:1c:9a:06:15:c1:
f2:c4:ce:1c:15:da:2b:10:3e:4e:5b:7a:e2:b9:62:32:32:0e:
07:0c:53:83:63:ec:fd:44:1a:bc:dc:90:b6:86:69:af:3d:22:
83:32:c1:90:5b:30:cd:fe:bf:bc:f7:71:16:48:be:41:3c:96:
52:23:9c:55:8a:7c:33:6f:96:39:ef:18:e3:0d:34:cc:66:d0:
da:2c:4d:56:17:a0:0e:37:cd:3e:12:02:e1:b7:37:2e:5f:77:
1d:d9:ed:40:3b:07:d8:7a:0a:0f:3c:5c:40:47:c7:9c:aa:14:
0e:f4:1a:9c:9b:bc:1f:29:19:ae:6e:da:33:23:4f:0b:e0:8e:
af:0e:e4:6d:ca:0b:2e:29:3e:5c:69:b4:06:dd:5d:cf:0c:b7:
fa:64:2e:a1:ef:06:96:00:9e:07:96:28:12:8f:46:6f:98:be:
2b:8b:ba:aa:41:63:fe:7d:65:69:5c:38:f2:14:8f:b3:c9:29:
bf:e7:a4:af:92:87:84:d1:bf:10:d8:43:0b:a2:72:76:64:0b:
21:a1:2d:2d:04:8a:c2:99:dc:ab:35:95:bc:77:4a:a4:1f:65:
ac:5b:1b:db:68:d6:9e:9a:c9:49:50:38:2a:c2:5d:1e:72:ac:
be:2a:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:49 2023 by rpki-client on console.sobornost.net