Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78e96346-9f93-405e-b867-52dd47e529e4.roa
File: 78e96346-9f93-405e-b867-52dd47e529e4.roa (raw, json)
Hash identifier: 4dEALLWYj4d76S8lCEzo//tPrP55TLOrGJt+bZTVS/s=
Subject key identifier: 8D:7B:F2:5F:2F:D9:FD:71:9B:98:89:C8:B7:97:E2:85:24:F5:B0:AC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D9E62E92FB4508D02F00D1454061778D439CBD0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78e96346-9f93-405e-b867-52dd47e529e4.roa
Signing time: Fri 03 Nov 2023 00:00:00 +0000
ROA not before: Fri 03 Nov 2023 00:00:00 +0000
ROA not after: Fri 08 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9e:62:e9:2f:b4:50:8d:02:f0:0d:14:54:06:17:78:d4:39:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 3 00:00:00 2023 GMT
Not After : Dec 8 23:59:59 2023 GMT
Subject: serialNumber=d0d546826d60641e407b48c58c948d356a8c8c6d814610376c85bbd1854822a9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:3b:a7:7f:9c:ab:79:56:f6:2c:cb:f8:b1:
db:92:f3:51:5a:46:1b:8a:cd:50:3a:f6:c7:24:33:
00:26:10:bb:61:c0:ad:ec:78:a5:07:db:06:b5:e9:
fb:60:e1:82:93:80:59:39:a5:a3:e3:0c:1e:7d:b0:
5b:42:ed:18:89:db:f2:09:34:cb:6c:84:05:f1:61:
14:91:54:d8:1c:4f:c5:5b:b9:ee:4b:d9:44:7d:a6:
0a:bd:7a:8d:20:dd:bd:38:e3:bc:24:d9:22:02:6e:
cf:a8:76:e1:98:b7:1d:8b:5e:d6:8c:ec:d3:65:fe:
b2:6b:28:7a:2a:2f:da:d5:b6:9e:4f:52:e9:f5:ca:
9e:f9:43:f1:39:6e:3b:8b:e8:6a:29:48:2c:04:fd:
fe:e6:4e:01:98:51:91:4b:85:ff:5e:a4:91:1f:29:
ad:a0:2d:d2:e0:f6:1a:30:e7:2b:e0:f9:60:c0:05:
fa:f3:c6:0e:bb:90:7a:31:7f:32:97:90:e3:21:7b:
a7:63:b0:d6:18:45:b6:cb:f7:da:51:b4:c9:e0:77:
37:c3:25:c1:79:b1:8a:78:9d:31:60:9e:51:74:12:
12:70:48:0f:e3:9f:e8:ba:d4:43:9e:03:54:f6:ea:
3f:65:64:f1:05:82:95:56:ce:00:61:04:df:16:1c:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:F2:5F:2F:D9:FD:71:9B:98:89:C8:B7:97:E2:85:24:F5:B0:AC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78e96346-9f93-405e-b867-52dd47e529e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9b:d7:ff:c8:48:b1:fe:86:a7:80:d8:56:ae:01:5c:6d:53:
6e:d9:d3:8e:a3:85:62:c0:ce:45:4a:5c:2e:e2:76:2f:9b:d4:
1b:90:d6:3d:59:c6:97:1f:d4:77:34:da:0b:6f:b2:70:5d:67:
c1:84:8d:e9:70:8f:01:cf:4e:98:a4:a6:da:14:59:f0:df:9d:
0f:c5:dd:63:db:3c:fc:51:e1:67:90:03:5c:db:8f:27:89:dc:
23:4b:43:d3:be:14:06:78:56:69:d2:35:b6:8b:87:60:ae:a8:
45:50:3f:6c:71:8f:83:f3:49:38:d6:67:ae:10:b9:2f:ea:e4:
ec:ce:a1:ea:dc:98:30:d8:09:e5:2f:44:12:ba:fd:c7:03:e2:
7a:9e:0b:d4:54:a5:e9:fb:22:c1:56:52:0e:5a:c7:e1:fb:ec:
20:e8:86:33:bd:56:bd:fa:bf:ae:92:e9:3a:bc:a8:ad:e7:f1:
f4:d9:ae:a1:3e:88:e7:e8:4b:0f:65:4e:72:5c:1d:0f:d3:cc:
94:82:e6:b5:a0:eb:a7:f4:c4:58:94:87:8e:42:b9:cc:08:ad:
02:4b:f6:04:8f:13:92:d6:64:49:be:41:69:8e:8e:d7:53:4e:
0e:d2:03:52:2d:62:69:f8:fe:5b:43:9a:b0:89:37:fe:5a:aa:
51:73:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:55 2023 by rpki-client on console.sobornost.net