Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/763f1151-d8b5-482d-a741-23af9dc88ea9.roa
File: 763f1151-d8b5-482d-a741-23af9dc88ea9.roa (raw, json)
Hash identifier: yHmjgx26WBy48nVHVrbUTDs+CDS+hqKlQ/giABskg5o=
Subject key identifier: 0E:EC:3A:A5:95:E8:80:70:D6:BC:FE:64:BF:3E:BF:94:BE:5C:08:27
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6D91DDD180CAC27AFD6D52BF7A1AF4ACB5C4BD05
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/763f1151-d8b5-482d-a741-23af9dc88ea9.roa
Signing time: Sun 27 Aug 2023 00:00:00 +0000
ROA not before: Sun 27 Aug 2023 00:00:00 +0000
ROA not after: Sun 01 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:91:dd:d1:80:ca:c2:7a:fd:6d:52:bf:7a:1a:f4:ac:b5:c4:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 27 00:00:00 2023 GMT
Not After : Oct 1 23:59:59 2023 GMT
Subject: serialNumber=78d8a7ea555c7377ae6c0ba05d7c4bf24c84e0b5606e5ceac93ee4759c893a53, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:e2:4e:2d:be:13:0f:00:54:21:5f:5e:ab:
8f:8f:39:26:30:35:33:f3:50:0f:74:00:7d:36:d3:
9f:97:d3:5d:05:a7:f6:c0:6d:b4:d7:70:42:97:7f:
c7:c6:7a:f1:c0:fd:eb:e7:c4:52:33:94:ea:04:59:
2b:bb:e8:94:06:e2:5c:98:7e:44:51:cb:c5:ca:dd:
1e:64:87:ad:05:dc:bb:89:fa:6a:0b:8e:1c:1d:90:
c1:24:13:6d:22:a7:7d:c8:a7:b4:cf:22:8e:b5:00:
3d:08:23:23:e4:b1:0d:3e:05:0c:b6:30:fd:f1:30:
87:91:99:65:ca:2c:7f:6c:7b:44:30:98:09:ac:99:
49:c6:ee:39:44:24:af:a6:8b:fe:4a:9f:64:96:6b:
ac:52:5c:2f:8f:67:9b:8e:8e:fa:04:33:3b:04:8a:
85:21:4a:a6:41:2c:ad:b4:82:92:72:87:67:0d:85:
de:65:10:eb:d4:d7:96:44:cb:65:42:22:60:15:45:
1e:22:96:33:5c:e4:a7:a2:b5:89:eb:a8:48:44:50:
04:b1:37:20:b6:03:3d:82:2b:3a:a4:29:9e:6e:08:
b5:26:8a:64:65:9b:1d:4e:ae:c7:c5:4c:3f:e2:73:
41:e4:35:ac:29:29:53:13:5c:c9:f6:90:c4:c0:03:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:3A:A5:95:E8:80:70:D6:BC:FE:64:BF:3E:BF:94:BE:5C:08:27
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/763f1151-d8b5-482d-a741-23af9dc88ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:55:c7:33:02:af:53:81:69:60:1a:54:a3:e2:36:54:61:cb:
01:73:6b:20:81:87:49:12:f7:82:1c:6f:b2:04:ce:5f:52:a8:
3c:ff:f4:9f:25:bd:ab:23:ed:4e:42:b2:60:ac:0d:f6:fc:04:
ad:35:c0:3f:6b:75:b6:ce:98:81:c1:d8:ff:1c:40:9e:db:f6:
02:35:5b:c6:bb:67:0b:a3:49:48:ca:67:9f:32:d8:a0:b7:7f:
98:1b:0d:bd:62:9b:58:27:31:38:10:a5:62:8f:34:1f:b9:94:
16:be:89:33:63:ff:ad:4b:b7:05:79:da:b3:1e:e7:3b:90:91:
08:00:98:de:7a:8c:bc:29:fc:6e:f9:bd:be:2e:f5:5d:f9:32:
e2:60:7e:fa:14:e2:01:fe:87:7e:a2:a7:cd:e4:d0:84:95:e5:
a4:1c:18:cd:e5:df:dc:77:bc:1b:c1:fb:1d:72:88:c4:42:0b:
1f:1e:75:f3:de:4b:d6:06:bb:a2:9d:56:45:32:16:48:8b:a1:
5f:dc:f6:7b:1b:62:8f:97:f3:70:c6:1b:1e:4e:87:29:98:97:
cc:c0:23:35:e7:e2:21:5d:5d:6f:61:37:c8:6f:3d:3f:7a:bb:
31:7c:fb:b1:59:ce:b9:3b:64:af:34:ca:66:ee:a3:49:65:64:
9d:4b:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:55 2023 by rpki-client on console.sobornost.net