Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e81cd37-293b-4b64-8bdf-bd960757fc32.roa
File: 5e81cd37-293b-4b64-8bdf-bd960757fc32.roa (raw, json)
Hash identifier: 8Ngad0WZ6KO+BIlu8leo72GrtmxFHNcCKbl62dm2CP8=
Subject key identifier: 70:79:C1:0C:6B:45:88:17:FD:87:29:1A:D3:F6:C0:5E:A1:AB:2D:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27BF7EFE00FEC4429B1083DE61D8F73BA0B073A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e81cd37-293b-4b64-8bdf-bd960757fc32.roa
Signing time: Wed 30 Aug 2023 00:00:00 +0000
ROA not before: Wed 30 Aug 2023 00:00:00 +0000
ROA not after: Wed 04 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:bf:7e:fe:00:fe:c4:42:9b:10:83:de:61:d8:f7:3b:a0:b0:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 30 00:00:00 2023 GMT
Not After : Oct 4 23:59:59 2023 GMT
Subject: serialNumber=945225425beb26797f1da28cf8741b90fee95e92506995f523d43a6829e023c2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:33:0d:06:59:85:85:d2:94:aa:0f:a2:71:
b9:78:11:f7:4f:53:a7:77:d6:6c:3f:92:f4:b0:7d:
b0:c4:3f:cc:af:e5:ed:26:94:1a:78:42:d0:84:65:
04:6d:0e:19:b5:a6:78:d0:85:a6:c0:28:e9:12:82:
d9:c0:0f:15:32:31:db:17:24:b6:de:76:f2:08:8d:
8c:1d:f4:2b:c7:1d:82:a7:1a:82:c8:d2:4e:43:77:
de:f0:31:06:11:4f:90:04:fa:e1:af:3e:2c:57:70:
de:71:44:a4:20:13:1b:b6:3a:00:21:db:53:1b:34:
6f:63:37:0f:e4:f2:a5:14:c6:c3:5f:5e:23:24:3d:
84:b4:cb:15:dc:8f:8e:c2:ad:fd:c9:f2:65:0c:23:
83:36:7c:6f:b2:b8:20:2e:93:c8:f9:87:69:cd:64:
8d:b9:87:a7:34:86:b0:e6:96:09:92:55:f6:03:82:
80:3d:ba:7d:63:5a:6e:13:1a:5f:69:51:8e:df:0a:
d4:e2:01:a7:c0:51:cf:c3:66:e2:30:a0:8d:eb:0b:
7b:d0:cd:39:6b:37:38:d9:73:4b:38:88:35:31:8c:
d5:2b:b3:38:c5:c9:26:ac:6f:eb:3f:ca:5b:1f:fe:
e3:bc:ba:1d:26:bb:7b:df:cc:85:da:d6:6e:78:a8:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:79:C1:0C:6B:45:88:17:FD:87:29:1A:D3:F6:C0:5E:A1:AB:2D:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e81cd37-293b-4b64-8bdf-bd960757fc32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2b:37:49:2a:68:f4:fb:8a:3c:5f:aa:43:83:18:67:a7:51:
8b:46:37:2d:41:5a:3d:46:5f:7e:f1:51:5d:57:ad:91:5a:c3:
bb:4f:44:85:fe:e6:43:6c:e9:9f:49:80:3b:9e:d9:80:dc:3c:
3f:2c:04:ed:13:20:4c:39:6a:6e:91:43:38:79:d7:68:c2:c7:
c8:40:0c:59:dd:93:7e:1d:a6:ed:ff:13:bb:d9:25:b8:ac:39:
cb:d4:91:ad:e0:f8:f8:3a:4d:c8:61:40:b3:32:17:7f:0b:50:
b4:49:07:4e:eb:8f:ad:df:98:0d:52:76:be:03:d2:72:fc:7c:
a3:6d:24:c0:e1:85:26:15:12:b7:de:9b:36:e5:5b:89:84:62:
33:dc:32:ea:10:a4:9d:d5:a4:40:1a:b4:fb:79:a8:28:88:e1:
93:af:76:31:3a:98:92:9a:0b:b1:99:61:99:78:1d:b9:51:cf:
06:ac:b5:27:6f:aa:5c:26:f4:ef:f3:98:9c:2a:7c:03:74:77:
c0:31:e4:8f:fc:00:cc:9c:89:91:73:b0:4d:cc:44:26:a7:bc:
b8:6c:a0:39:06:05:69:09:05:cf:73:0f:d5:84:dd:81:21:1f:
98:bd:37:76:33:c4:5f:f8:d1:5f:cd:31:fa:9a:51:4e:6d:0b:
e8:f6:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:50 2023 by rpki-client on console.sobornost.net