Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/774eb06f-3426-4597-9f39-ada5f35783b4.roa
File: 774eb06f-3426-4597-9f39-ada5f35783b4.roa (raw, json)
Hash identifier: egbuyxrSGOBBfvkoAFH7OBUYpMP5in0zf16LO5O44OM=
Subject key identifier: 79:D1:CF:45:65:FE:0D:ED:54:53:30:D8:2C:94:6D:3E:4B:F3:2B:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AEBFFE28CF94921AFDB11BE266F6655E66D8329
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/774eb06f-3426-4597-9f39-ada5f35783b4.roa
Signing time: Fri 30 Jun 2023 00:00:00 +0000
ROA not before: Fri 30 Jun 2023 00:00:00 +0000
ROA not after: Fri 04 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:eb:ff:e2:8c:f9:49:21:af:db:11:be:26:6f:66:55:e6:6d:83:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 30 00:00:00 2023 GMT
Not After : Aug 4 23:59:59 2023 GMT
Subject: serialNumber=83c4e0e670f4290b9fc7ee14168a00943f565018b47f647dfd02171f05743878, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:ab:db:76:b3:aa:54:fc:05:60:76:7d:31:
fa:e8:37:dc:d6:5a:ec:8e:f9:b3:f9:63:1f:fe:75:
23:72:ff:8a:47:84:12:1a:51:1f:94:28:16:8c:6d:
9d:fe:cc:9c:b8:15:c7:45:32:ca:0f:88:11:47:0c:
69:b0:65:e8:95:00:bf:d9:ff:72:77:23:33:3c:af:
fc:c8:7d:8b:ab:ce:3b:9d:ff:b6:2e:08:f4:fb:3e:
00:a1:1c:48:63:f9:0e:18:1d:aa:52:85:0c:88:b8:
cb:ff:61:99:7e:47:dc:7c:ab:b1:1c:a5:3a:4b:33:
31:0d:79:77:83:6f:7e:dc:cd:cf:5e:4c:99:e0:a6:
01:f4:2d:de:d0:c2:ac:b8:63:cf:90:16:cf:51:d5:
e6:42:02:db:56:e9:8d:b8:d9:64:e8:d7:78:32:6a:
3b:ce:f3:25:56:87:4f:f6:bf:7b:34:b4:fc:ba:a5:
53:4c:e8:30:e5:e6:7f:71:da:09:de:39:c5:1b:af:
a1:78:93:48:ac:20:48:37:34:57:d5:8c:17:ab:c0:
dd:41:91:72:1a:75:a4:5f:1f:1b:f9:9f:37:b3:27:
7b:0c:b4:7e:34:8a:03:80:3a:d8:1c:f6:d8:28:50:
9a:8e:e7:52:43:1f:df:71:bb:b9:73:00:66:a5:83:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:CF:45:65:FE:0D:ED:54:53:30:D8:2C:94:6D:3E:4B:F3:2B:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/774eb06f-3426-4597-9f39-ada5f35783b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a8:97:d8:a0:49:73:3b:87:0d:bc:a5:ce:78:96:f8:52:89:
7c:8b:b0:12:07:b7:94:f3:68:c5:91:d1:27:57:34:b9:f2:15:
1c:25:c8:93:57:f7:74:7d:b9:03:b7:bb:92:f2:06:f7:24:10:
ff:74:50:eb:1c:ac:6e:e6:7c:59:a3:f8:c0:89:fb:cf:dc:77:
34:8e:21:df:00:75:49:5a:da:44:2b:4e:58:f6:1f:54:b2:f9:
7a:68:d7:9d:27:92:b0:07:44:83:6f:c2:90:b4:06:a7:a5:47:
89:98:5b:d5:25:50:a7:7f:43:91:60:2c:e5:ed:1e:57:a8:8c:
5e:66:c4:1a:0b:9f:cb:d5:6a:0b:41:92:6e:bf:d6:4d:f6:87:
84:9f:ca:bc:92:d4:65:c6:7a:3f:f2:9c:d5:ea:cf:3d:38:55:
2d:76:d9:e8:66:0b:a4:db:7c:8b:97:55:14:99:45:60:66:8b:
95:f5:9f:3c:96:61:28:ec:fb:f9:1e:d0:be:15:07:01:c2:04:
6d:1d:11:d4:69:1d:a1:7e:bc:92:56:9c:31:99:79:56:1a:3d:
a9:5e:6c:de:7a:42:2e:a8:12:fc:19:f8:d8:b9:0b:06:d9:9f:
46:5b:dc:ad:5b:67:22:9c:ff:84:20:2d:6e:b5:72:85:3d:1f:
61:ae:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:55 2023 by rpki-client on console.sobornost.net