Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7ea53cc9-040e-43a8-8ede-884a24dc70bf.roa
File: 7ea53cc9-040e-43a8-8ede-884a24dc70bf.roa (raw, json)
Hash identifier: AieVicX++HYo8omdjAt/nFM2fBFYEehHSz/7ud566n4=
Subject key identifier: 05:C5:4B:95:A6:F8:5C:46:B9:10:9C:61:20:4B:F8:4E:D8:50:78:45
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 22B2E492E0264EF696BBDC3177CE919F2577ABC4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7ea53cc9-040e-43a8-8ede-884a24dc70bf.roa
Signing time: Wed 27 Sep 2023 00:00:00 +0000
ROA not before: Wed 27 Sep 2023 00:00:00 +0000
ROA not after: Wed 01 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:e4:92:e0:26:4e:f6:96:bb:dc:31:77:ce:91:9f:25:77:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 27 00:00:00 2023 GMT
Not After : Nov 1 23:59:59 2023 GMT
Subject: serialNumber=486f4f39812a03b53a94f38124d0d0a58c4716abcd223bebccb36319c08eda32, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:c7:a3:6f:f2:16:74:87:9e:33:51:c8:ef:
b4:13:d9:2a:d5:e3:e5:4b:14:d3:9d:2e:04:46:7f:
b6:e5:70:48:b3:c0:4b:61:09:b3:be:89:ed:ea:d0:
5d:da:da:10:21:d4:45:16:03:51:fb:d8:79:55:43:
89:01:1c:7d:d1:50:c3:85:eb:45:ea:d8:79:e9:9a:
6b:72:2b:5a:b2:d8:f4:64:17:36:8b:88:fc:4f:cd:
1c:54:f7:75:ff:2a:6b:74:d5:01:93:bb:3c:1a:86:
1a:20:2e:2e:31:e3:2c:a3:60:de:a4:2b:da:97:89:
af:90:0d:9f:96:49:40:fe:90:ca:e3:b5:4d:cf:02:
08:a3:09:84:14:4b:3f:fe:1d:25:b3:b8:00:cf:d2:
6a:db:ca:a2:b8:8b:f6:f7:2b:d9:a3:55:d2:a2:72:
60:49:c1:f7:7e:fe:99:53:bb:bd:a4:f5:55:82:32:
ad:a4:44:b2:af:82:9d:ab:86:4f:91:9b:89:06:b4:
34:d5:36:fe:f7:0e:e3:26:c2:45:b0:f9:4b:b5:d4:
40:1c:2a:85:11:78:98:bd:fd:b5:2b:93:17:d5:5d:
90:9d:f0:f8:32:1a:a1:a2:55:c6:04:ea:dd:b0:df:
97:ce:65:d1:0c:36:34:ec:d1:08:c8:77:7c:4b:28:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:4B:95:A6:F8:5C:46:B9:10:9C:61:20:4B:F8:4E:D8:50:78:45
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7ea53cc9-040e-43a8-8ede-884a24dc70bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:af:51:0d:ad:2d:9e:e1:a6:a9:5e:65:06:12:b4:b2:f2:70:
2a:53:0d:71:25:02:f3:4f:40:9b:a9:c1:6d:e1:ec:db:df:d2:
82:df:09:89:56:de:1c:13:b4:cd:4c:1f:d5:bf:f9:26:24:8e:
ef:c7:e2:84:f8:d7:68:84:e0:0a:85:aa:79:88:32:7e:b0:51:
8d:5e:a6:0d:af:19:af:59:b3:ac:7e:3d:b0:98:e6:6b:4f:1e:
d5:7c:83:21:7e:ec:db:af:0a:02:e1:13:6f:30:a9:b3:bc:28:
8f:03:0a:b9:e9:bd:e2:b5:99:bf:53:64:a1:a8:93:56:c1:92:
ea:f0:f6:e2:33:77:46:2e:02:53:b1:e5:22:35:85:17:5d:f7:
fd:11:ca:c7:42:5c:6d:af:13:4f:b8:83:36:e1:3a:4c:64:48:
5e:a7:70:ff:f1:b5:34:66:fc:5f:ff:bc:10:d8:98:5c:da:5e:
22:70:3c:f2:74:c9:37:90:fe:84:eb:1c:50:1d:16:b3:32:80:
85:39:52:6f:40:c0:25:25:5e:40:ea:92:8f:d9:8d:6f:e9:3c:
6d:10:cd:43:17:fd:61:93:50:90:cf:4a:a8:a3:bb:f7:07:4b:
5b:8d:2c:3c:43:e1:fe:d9:20:8b:e0:da:67:28:71:03:87:2b:
44:48:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:57 2023 by rpki-client on console.sobornost.net