Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6be7bde4-8037-4825-b5d8-126dd3c8890b.roa
File: 6be7bde4-8037-4825-b5d8-126dd3c8890b.roa (raw, json)
Hash identifier: fC7VcRz5+E7baW1qb5kS+MpU/xun1T1VZ4ckcyTsdog=
Subject key identifier: 84:E9:FF:74:4D:57:49:DC:73:01:7F:21:5B:0A:70:F4:3D:56:CA:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 492C3C3B48695C06A2A5E48F7F2256ADE092BFF2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6be7bde4-8037-4825-b5d8-126dd3c8890b.roa
Signing time: Fri 03 Nov 2023 00:00:00 +0000
ROA not before: Fri 03 Nov 2023 00:00:00 +0000
ROA not after: Fri 08 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2c:3c:3b:48:69:5c:06:a2:a5:e4:8f:7f:22:56:ad:e0:92:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 3 00:00:00 2023 GMT
Not After : Dec 8 23:59:59 2023 GMT
Subject: serialNumber=bcb3f1dac8f9ae769bf185cd9c37196b1059e1ecdc257caef3790fc8117fb0c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:7c:df:cc:f5:07:32:38:b3:b2:88:f3:de:
c4:b7:ca:22:9c:c7:0c:d9:99:b2:15:f4:6a:d0:a6:
24:55:fc:cc:ba:fa:c9:0f:dc:2f:ba:1d:36:cb:ab:
c7:c1:a3:e8:3e:e4:29:88:2c:39:13:3f:ee:dd:99:
90:32:0e:42:e9:a6:c6:dd:1a:11:71:e1:d9:e8:c8:
fd:16:6b:df:0c:02:9a:60:a4:90:7e:68:4f:41:6d:
a0:c8:98:4a:1f:35:25:a0:f3:bb:61:b2:6d:87:6a:
3b:1c:f3:f7:83:cd:c9:0b:8c:0b:03:d8:71:5f:e6:
2d:f2:c4:fb:6a:c2:c4:6e:98:b8:8c:28:98:3d:60:
9c:bd:f0:21:f9:cc:a4:05:e2:2a:b0:3e:2d:88:58:
9a:19:7c:41:fd:5c:06:7b:b6:c3:11:9a:0e:e9:05:
c7:b6:b9:fb:68:1e:f0:a6:8b:4a:76:ef:b0:0c:10:
ee:80:42:43:4a:44:c2:7b:1e:ec:47:6a:c8:fd:c3:
c3:f5:14:58:15:f7:6d:f7:41:92:21:da:d6:07:49:
7d:2a:21:15:64:51:bb:a1:57:a8:c9:c2:32:48:b7:
76:92:3c:c0:0d:1a:35:64:5f:4a:07:21:7a:55:ce:
15:ee:ae:ec:3b:c8:6a:05:1b:4c:10:2e:ec:ed:53:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:FF:74:4D:57:49:DC:73:01:7F:21:5B:0A:70:F4:3D:56:CA:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6be7bde4-8037-4825-b5d8-126dd3c8890b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
60:01:c2:4f:3a:4c:d3:38:9d:c5:5e:34:ab:20:58:df:e7:bf:
a1:9d:8a:e0:54:73:b4:85:29:1e:85:61:5a:04:bc:07:ec:8d:
83:44:ea:59:e6:8e:d3:1e:88:ab:5a:1c:70:68:9c:aa:ad:ee:
25:0b:b7:a1:b8:74:91:89:d2:fb:ec:20:12:d5:4a:ce:ef:e6:
e9:2d:26:ba:14:fb:03:fe:42:7b:57:61:b2:6a:db:00:b8:2a:
b8:77:ea:b1:09:48:ce:e8:da:06:78:11:e8:98:81:00:51:96:
bf:a0:2d:f8:f1:6c:bd:04:cf:f9:9a:87:31:76:39:fd:79:ec:
0e:c2:c5:1f:c6:a0:f4:09:b1:7e:f3:81:e6:8b:42:5c:96:f8:
e8:32:04:a6:7b:fd:08:72:7f:02:46:37:bb:39:16:d2:39:fb:
9d:99:a9:71:81:86:3e:86:89:b8:2e:03:1e:c7:de:7c:40:8a:
18:f1:fa:19:f2:2a:51:80:2f:0e:ff:d5:7a:10:20:6b:ce:a5:
1f:14:d6:da:cc:96:82:38:be:47:2f:29:cd:d9:31:7e:aa:89:
9d:57:cb:22:5a:55:9a:ab:59:94:41:49:8d:1d:94:10:b2:0b:
e4:03:0a:91:ca:57:bf:9d:b6:c5:89:f8:ea:a4:8b:00:91:5d:
52:d2:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:52 2023 by rpki-client on console.sobornost.net