Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63d2987c-79a8-4f95-a459-aecc0aa0b55b.roa
File: 63d2987c-79a8-4f95-a459-aecc0aa0b55b.roa (raw, json)
Hash identifier: FNI7I3dFj3eQmw+XMMGaAomUVZdnz9guxs/sSLn+TJc=
Subject key identifier: 89:53:8B:8F:C8:1C:8B:9C:56:59:25:C4:DD:76:7D:0A:F8:13:C1:81
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 42B0E705A20803AA0635E447E0405EF757D2D790
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63d2987c-79a8-4f95-a459-aecc0aa0b55b.roa
Signing time: Fri 15 Sep 2023 00:00:00 +0000
ROA not before: Fri 15 Sep 2023 00:00:00 +0000
ROA not after: Fri 20 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b0:e7:05:a2:08:03:aa:06:35:e4:47:e0:40:5e:f7:57:d2:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 15 00:00:00 2023 GMT
Not After : Oct 20 23:59:59 2023 GMT
Subject: serialNumber=e10dbe482f83d557555823808ab6fdda1825302db80dca5391ffa03f1c36c582, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:03:b8:8f:9a:1a:81:72:f9:e9:37:8b:13:
1e:dc:58:af:50:3f:f1:8e:e5:7c:80:c2:93:67:b2:
3d:ac:5e:a0:a8:2f:89:82:e1:cc:9e:80:0c:16:dd:
6e:f2:c3:1a:43:e4:eb:7d:97:19:de:71:f0:ab:58:
2c:5b:32:ec:85:fa:52:d6:cf:63:38:db:e1:71:ee:
8c:08:e1:b9:64:31:be:cc:06:6d:da:5d:db:e8:a5:
e1:9a:19:d2:33:18:5a:5b:d5:66:5e:7e:35:d5:c5:
ca:ca:0f:56:88:c4:29:fe:5d:9c:1d:af:5f:57:1f:
e7:4c:c9:31:9c:0a:09:ab:de:3d:d8:54:22:22:f6:
16:1b:9a:5c:22:2e:50:81:84:8a:63:4f:66:5f:d7:
c7:57:da:32:2d:a9:23:df:11:9d:bb:53:bd:e7:76:
b8:40:19:8a:cc:ba:23:9f:4d:de:96:89:e0:5d:6f:
13:ff:b6:cc:ca:9d:fc:c5:3c:dd:4c:7d:54:8e:d7:
11:a4:a3:7e:05:66:71:df:2c:50:75:02:51:19:8d:
84:67:00:f0:2e:37:6c:45:1e:03:c9:f0:b3:6c:ec:
bc:58:1f:d8:22:14:9f:fb:8b:a7:ac:3e:a5:96:84:
8e:2d:a1:80:74:33:ad:d1:8e:29:7a:12:a9:a9:e1:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:8B:8F:C8:1C:8B:9C:56:59:25:C4:DD:76:7D:0A:F8:13:C1:81
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/63d2987c-79a8-4f95-a459-aecc0aa0b55b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9e:0c:2b:9f:53:ff:5a:03:58:f4:d7:e0:4f:28:d0:49:5e:
c2:1f:c6:b6:25:a0:87:6e:0e:87:8a:8d:98:6f:28:ff:7f:1c:
b7:3c:55:9a:ab:e7:7f:b8:d4:f2:24:61:31:98:85:7d:05:3b:
11:e5:c9:3c:e3:38:3b:d1:7f:72:bd:d8:3f:ef:27:d5:bb:f3:
eb:87:02:e0:6a:41:b0:5a:d1:ed:2b:3c:fb:fe:3d:72:d0:43:
6a:0f:92:6f:4d:bc:ab:63:ca:7f:a5:8f:a3:91:08:41:dc:fd:
c1:45:0a:37:ea:ac:66:8a:7e:49:51:20:7d:1d:6b:b2:9d:c9:
d8:32:43:ff:d1:78:7d:17:d8:be:fd:5f:12:9b:d8:42:2c:44:
e4:17:b0:17:94:bb:78:7a:f1:80:e5:39:2d:34:5f:8c:33:91:
da:66:9f:f8:00:ff:61:2a:d8:29:8e:67:27:34:2c:df:b4:b6:
e0:6e:f2:1a:a8:f1:5d:9f:87:1b:6e:2d:f3:9d:e8:36:fb:4e:
e6:5b:af:d1:26:d2:4a:fe:ec:2a:79:04:8a:0b:c8:7a:7d:5d:
87:ed:98:58:ca:13:58:cc:50:a6:5e:2d:99:04:25:ad:42:8e:
1d:fa:a5:fb:7d:18:57:65:c2:2d:46:b4:ff:c2:63:46:02:51:
3e:cb:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:50 2023 by rpki-client on console.sobornost.net