Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ff59a2a-bb51-4236-9eda-0f2d5d9b769d.roa
File: 5ff59a2a-bb51-4236-9eda-0f2d5d9b769d.roa (raw, json)
Hash identifier: YmNC2/m/hBfocv2DMMl0rXlAOBx4rVK4cZmr13n8kiY=
Subject key identifier: C4:04:12:46:75:61:EC:90:AA:B0:0A:D7:D3:96:1D:75:BC:25:D1:65
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4C005F0EF0B48E724E5F9C3DDD2CA4956D745662
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ff59a2a-bb51-4236-9eda-0f2d5d9b769d.roa
Signing time: Mon 09 Oct 2023 00:00:00 +0000
ROA not before: Mon 09 Oct 2023 00:00:00 +0000
ROA not after: Mon 13 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:00:5f:0e:f0:b4:8e:72:4e:5f:9c:3d:dd:2c:a4:95:6d:74:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 9 00:00:00 2023 GMT
Not After : Nov 13 23:59:59 2023 GMT
Subject: serialNumber=3c53027d42f46c63b3b992bc9a1036caa7f157e2d0f7d4822e582d6555c681f1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:56:35:89:32:85:dc:c8:d0:ba:24:0a:9f:
5d:c0:39:e5:51:af:b5:00:b4:b7:ed:7b:d8:a4:d6:
db:23:dd:c8:6d:a5:ab:e4:21:8d:5c:59:66:b3:8f:
4f:cd:07:c4:6e:4a:45:8e:73:f1:97:48:d5:4c:5a:
01:60:3b:03:0f:3e:df:2f:44:97:b2:ec:d3:6a:61:
ad:e4:79:9b:f3:72:dc:f1:c3:c0:bb:75:85:c9:3f:
1d:16:60:31:4a:a0:05:b4:f7:17:6a:4f:45:aa:d2:
3d:92:ce:7f:95:7c:cd:8b:f5:05:92:e1:45:49:91:
2c:55:87:80:ad:a9:df:57:54:21:c1:ae:ea:f0:18:
0e:aa:bd:9e:fa:ff:72:01:45:fa:13:06:5b:f6:ff:
48:64:aa:ac:6b:ee:80:c1:7b:ce:93:31:22:1e:e5:
d6:f3:d9:da:d1:3e:cb:25:8c:b9:cb:16:3e:43:5d:
52:42:e3:4d:7c:dd:ce:e0:bc:f0:fc:aa:93:0d:97:
f9:0c:28:68:7b:77:6c:d8:c9:2c:2e:4b:ce:32:e4:
1f:d2:e7:7b:8f:83:63:59:13:b0:96:84:47:08:34:
5b:43:72:da:54:ee:cb:3a:a4:60:dd:d0:2e:df:ff:
e6:55:79:2d:61:6b:9e:b4:c8:cc:d7:91:cd:45:b6:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:12:46:75:61:EC:90:AA:B0:0A:D7:D3:96:1D:75:BC:25:D1:65
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ff59a2a-bb51-4236-9eda-0f2d5d9b769d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3f:5f:c3:66:0a:49:b7:eb:e3:6b:43:f1:0d:3f:eb:66:d1:
4a:cd:a7:39:c7:5f:38:45:d6:73:ea:66:04:7b:5c:28:19:9a:
37:ef:d6:27:63:cc:74:97:ad:75:b7:3b:45:e6:bc:99:dd:47:
3f:d4:8c:32:a1:f2:d5:50:b8:d3:7e:84:31:d5:57:30:99:49:
c4:13:23:f2:7f:1d:d3:07:9d:3b:c1:fe:a9:a7:16:7a:ef:55:
ed:a1:78:ba:a0:c7:49:da:dd:eb:12:f4:c9:99:51:6c:5f:42:
b1:b1:e1:82:85:01:4e:79:7c:ab:23:e8:9a:8d:c7:16:da:c9:
e2:63:18:de:29:3c:ed:44:60:16:b9:1a:ad:77:62:fb:a1:7e:
f9:8c:76:25:40:2c:5e:61:c7:c2:9f:c4:60:dd:a0:dc:25:0c:
fd:f0:cc:d5:f1:eb:ed:ed:a5:33:6c:6e:02:4a:22:fc:12:06:
6e:6d:03:34:12:67:aa:fa:4e:dd:50:b6:71:4d:72:e4:a2:40:
16:29:df:a1:c0:82:e0:9a:0d:c4:b4:2b:f6:49:cf:13:18:4e:
ea:6c:3d:cc:59:d6:dc:bb:8c:5e:22:0d:fd:64:f6:c0:ed:cc:
ba:b6:2f:f2:d1:1f:f6:b9:1f:bc:8d:16:51:22:7e:17:f1:35:
45:50:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:50 2023 by rpki-client on console.sobornost.net