Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a99cf18-5094-49c2-a1c8-791d6245adef.roa
File: 7a99cf18-5094-49c2-a1c8-791d6245adef.roa (raw, json)
Hash identifier: V2Neqk4j7GSXgY8C6I7/CdZLUFja8KgIjh9MEzFdZ0o=
Subject key identifier: 88:FF:60:FD:B5:9D:14:F4:41:D1:0B:25:02:60:00:14:98:42:97:F7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 019C62D81BC3C438CC72CB1877D9448540F52AAB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a99cf18-5094-49c2-a1c8-791d6245adef.roa
Signing time: Thu 02 Nov 2023 00:00:00 +0000
ROA not before: Thu 02 Nov 2023 00:00:00 +0000
ROA not after: Thu 07 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:62:d8:1b:c3:c4:38:cc:72:cb:18:77:d9:44:85:40:f5:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 2 00:00:00 2023 GMT
Not After : Dec 7 23:59:59 2023 GMT
Subject: serialNumber=9e3e88fea52a99407ed56479962dde191d545aa641bd3ed06db1d494dfef3aa3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:88:06:b7:6a:71:00:c0:5b:d5:32:2a:a1:
74:60:1e:b7:b9:c9:ee:b7:48:5e:59:6a:a6:52:13:
ea:05:c6:8a:70:48:9c:d4:d5:55:a3:d1:fa:99:bc:
85:43:04:0f:3d:2f:37:1b:ae:06:79:0c:63:bd:13:
1c:5a:a0:4f:f6:1a:63:35:39:df:ab:fd:c5:f1:f8:
bf:37:c2:99:b2:0a:3f:99:3b:a8:3d:9c:f6:26:45:
c1:f2:97:bd:f6:f7:20:ef:55:9e:7c:74:c8:59:bd:
6d:84:57:fb:0b:80:99:d3:3c:cb:84:ee:7e:69:62:
57:4d:ac:e5:09:f4:88:51:e9:82:c7:8b:00:2e:3c:
72:fe:76:f8:bf:fd:3d:b5:ef:fa:1e:be:1f:44:67:
d6:84:96:a8:1a:05:91:69:73:f1:26:64:88:25:0a:
9a:f0:f6:4f:53:e0:d1:9a:02:23:8c:df:b5:c1:a5:
f4:0c:f5:ab:69:af:74:5f:e1:7d:d1:85:3d:01:38:
c8:8e:6b:db:a5:c3:cf:ef:32:f7:0b:a9:37:1b:76:
98:88:2b:ad:7c:d0:f0:48:ea:64:cb:73:9c:6d:a4:
e9:b0:39:c0:c3:57:86:19:e7:a4:02:43:e3:4e:b8:
cf:68:17:5f:b3:87:67:cb:63:9e:46:61:d9:8e:2e:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:60:FD:B5:9D:14:F4:41:D1:0B:25:02:60:00:14:98:42:97:F7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7a99cf18-5094-49c2-a1c8-791d6245adef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ac:88:24:be:c6:67:b8:9a:5d:6e:2b:cf:34:e9:d9:1e:e1:
4d:4d:cd:a0:03:5c:8b:d5:79:2c:ed:3c:fa:89:7e:64:6e:50:
f4:18:c5:5c:07:97:3a:05:81:62:52:76:05:c8:e7:8d:0a:cb:
d2:a5:9c:73:66:6c:13:a1:df:d9:fe:63:5e:1f:1b:a9:12:25:
04:99:b0:79:a8:e7:92:5d:92:73:88:3f:3f:b7:70:da:4f:b8:
88:0f:11:73:a2:59:09:f8:6c:06:a3:f8:05:b5:d2:64:38:dd:
08:7c:c2:c2:67:ae:bf:a0:e4:30:9c:25:be:5f:fb:bf:26:dc:
be:0c:3c:ed:15:ac:37:b5:24:3b:96:ad:61:09:66:dc:82:38:
4b:b4:20:c9:1d:bb:0b:e7:81:8f:d9:5d:54:fc:10:9e:b2:bb:
55:f2:d8:a1:21:cb:f0:7d:19:e3:12:cb:bf:b5:54:38:31:c3:
e1:ed:01:ce:9c:ac:16:eb:8d:88:08:1b:a6:b9:0d:20:b3:b9:
4a:16:64:e3:39:b9:49:c3:76:b2:75:b6:da:9c:c9:af:83:a7:
19:eb:7f:b9:d4:06:b5:8f:c3:04:be:5a:d0:32:90:2a:11:b2:
bc:c5:cc:6b:c3:27:d6:01:58:cf:d9:74:0b:41:54:83:7c:1a:
5c:a8:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:56 2023 by rpki-client on console.sobornost.net