Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81351608-a4dc-44c8-b490-88b4a72a3d5c.roa
File: 81351608-a4dc-44c8-b490-88b4a72a3d5c.roa (raw, json)
Hash identifier: dAYSwbvhxDmM+D2TBL9BhamGNSiBybHKIC3UplNIxb0=
Subject key identifier: 3A:F9:D1:88:46:5E:59:8E:80:75:80:C3:2E:11:D6:71:81:68:4F:75
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2201149BF3B077227762011661609AF805C6EB7B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81351608-a4dc-44c8-b490-88b4a72a3d5c.roa
Signing time: Tue 31 Oct 2023 00:00:00 +0000
ROA not before: Tue 31 Oct 2023 00:00:00 +0000
ROA not after: Tue 05 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:01:14:9b:f3:b0:77:22:77:62:01:16:61:60:9a:f8:05:c6:eb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 31 00:00:00 2023 GMT
Not After : Dec 5 23:59:59 2023 GMT
Subject: serialNumber=68e737caae0ba6d46c30f47394f7634492ed7767d3d5ef7964a081daea4f023f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:93:89:b3:36:6d:47:bc:37:ca:1d:bf:b9:
08:d6:e2:d6:da:44:ad:7f:40:42:84:a2:ab:82:e4:
b1:77:09:59:5c:e9:a3:37:5d:86:df:6c:a8:be:69:
9d:cf:b9:5d:fa:58:d2:9e:b6:12:03:e1:17:15:6d:
25:30:e2:29:0f:20:9b:a2:e4:80:23:47:19:29:9f:
86:db:16:b7:3d:6b:f0:00:b4:f0:c3:c3:9b:c1:8a:
da:0b:b1:90:a5:98:be:4a:60:3f:a6:65:3b:61:10:
b8:3c:1a:2b:9b:06:09:62:8b:fa:89:92:8e:bf:16:
10:b9:70:30:8f:57:2e:74:5e:a8:e4:48:d6:ec:a9:
ee:3f:c8:37:0c:09:c9:f0:15:4f:b7:c5:13:cd:96:
93:58:f0:9e:a5:05:53:78:21:e9:df:b5:8b:d5:66:
3d:51:fd:19:4f:6a:05:b6:d1:1e:dc:1e:89:0c:42:
66:a8:21:da:88:0d:7a:df:a9:be:cf:a6:2e:90:74:
ea:36:ff:42:e6:4c:7d:27:90:41:93:59:2d:57:d9:
7b:2f:2a:f5:6c:a0:b6:5b:f6:ab:60:9c:58:dd:40:
11:8e:8c:8e:05:af:d4:33:f2:c8:1a:a1:be:35:7e:
78:67:9b:78:0c:a2:36:48:23:94:47:14:40:83:de:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:D1:88:46:5E:59:8E:80:75:80:C3:2E:11:D6:71:81:68:4F:75
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/81351608-a4dc-44c8-b490-88b4a72a3d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:34:5f:93:2f:5d:e7:48:ab:47:35:d2:a8:c3:43:c4:5a:4e:
66:c9:42:89:82:96:97:9a:91:45:11:0f:72:a5:24:c5:1b:8d:
a7:01:7e:01:46:be:29:bd:ad:94:3b:fd:2a:15:46:31:28:66:
9f:d2:1f:47:cd:c0:c4:90:f3:89:07:78:bf:7e:3d:1d:6f:d1:
53:d1:5f:50:55:2a:31:81:77:c1:b7:2a:8e:4c:27:32:14:b4:
95:21:9d:13:99:f3:dd:78:3f:9d:43:4f:f0:bd:4e:5f:c7:68:
0a:a9:dc:2b:7b:02:4e:87:a8:67:c1:da:18:29:73:45:37:1a:
6b:4b:15:f8:18:c8:65:7f:78:7e:9d:66:4b:94:01:bf:1c:28:
ae:42:bb:6e:79:6e:b0:fc:c5:69:4a:f4:92:2a:8c:47:ed:77:
5a:2f:7f:c5:b1:c2:64:9d:c9:cb:e4:08:56:5c:7b:05:c5:a4:
ef:40:6f:f0:12:7d:53:6a:25:13:1a:d1:a0:5c:fe:be:42:d9:
b8:25:8e:20:05:e0:35:26:2b:e6:cb:97:96:07:5b:e3:c0:95:
2c:e3:85:be:03:51:20:0a:ac:29:72:a4:06:17:82:77:0a:73:
0b:5d:7d:e4:a6:cf:1b:32:9f:9b:86:66:96:ef:c5:ac:1d:c1:
4c:fb:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:59 2023 by rpki-client on console.sobornost.net