Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c1137b-308e-4d59-9ea4-ed3905588c6a.roa
File: 83c1137b-308e-4d59-9ea4-ed3905588c6a.roa (raw, json)
Hash identifier: nyfew3TfsQ4hZpJcS1uqfDrCZWru0mtleUz/VGSkDfo=
Subject key identifier: D1:CB:49:48:2B:22:BD:03:3C:53:5B:D1:7A:F8:B5:5A:2D:5D:62:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7F82869D58962405397256197DEA08BC0EEF72A8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c1137b-308e-4d59-9ea4-ed3905588c6a.roa
Signing time: Thu 31 Aug 2023 00:00:00 +0000
ROA not before: Thu 31 Aug 2023 00:00:00 +0000
ROA not after: Thu 05 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:82:86:9d:58:96:24:05:39:72:56:19:7d:ea:08:bc:0e:ef:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 31 00:00:00 2023 GMT
Not After : Oct 5 23:59:59 2023 GMT
Subject: serialNumber=5613b9781382dd07dc92f1b7b4f9c4dc00afe8aff17701f64df1bd583184fee3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:4f:29:9e:c1:fe:8b:60:ae:cc:72:ea:59:
96:36:e5:35:34:22:a4:b1:e8:b0:e2:8e:8a:7e:cf:
5a:1b:a7:90:91:91:0e:6f:45:bb:d1:76:75:46:4e:
71:f3:98:4f:22:7c:5e:a1:ba:34:a4:47:2f:01:ee:
db:e1:42:72:d2:9a:7a:ac:4b:39:25:f5:c4:c4:62:
a2:31:28:aa:e7:48:49:64:57:68:f1:63:78:67:e5:
e2:8c:c5:cb:3d:b1:ab:74:2d:49:94:e4:05:53:98:
b3:0b:21:c5:76:15:0a:88:3e:80:57:97:f0:99:7a:
fe:9b:77:c0:73:76:71:29:8d:6c:a3:3b:8e:8a:fa:
c3:ab:bf:4f:89:49:a7:5e:75:44:02:88:9c:d3:21:
99:57:5d:bb:70:16:43:41:5f:4a:e2:c5:69:b7:2a:
20:74:8d:7b:f5:be:b0:29:5b:4a:44:8c:ef:89:2b:
56:94:a1:b9:7f:a9:d0:c6:d5:4e:64:88:6a:8f:e5:
66:d2:e7:ee:05:ed:ea:dc:83:bb:f0:53:a5:64:dc:
e0:ef:6e:66:ea:5b:97:63:20:0c:70:44:7a:c6:e9:
36:c0:0e:af:dd:1f:bf:49:e6:25:6e:79:7d:5f:2b:
a4:45:ce:7d:28:c8:88:3b:4a:71:3c:bc:e3:c2:ad:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:49:48:2B:22:BD:03:3C:53:5B:D1:7A:F8:B5:5A:2D:5D:62:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83c1137b-308e-4d59-9ea4-ed3905588c6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cd:d3:43:a2:af:dc:43:c5:ec:ce:17:83:83:fd:f6:fe:12:
9e:e2:34:9a:13:24:9d:ad:c2:81:ec:d9:b8:d2:65:d7:bb:9d:
e0:93:74:a3:bc:35:cd:f6:ab:c4:87:01:f9:6d:65:f8:c7:c3:
07:5c:0b:0a:d2:db:c1:ed:da:24:9e:d7:67:82:d7:13:7a:96:
80:3b:0b:d6:99:d1:5c:70:32:c9:f7:48:cd:56:ed:e5:90:8f:
97:7e:79:fb:23:b3:a1:8d:95:07:cc:91:05:69:74:b5:76:bd:
56:33:bc:d5:2a:8b:90:4b:e1:b3:45:b3:8b:df:7b:80:df:88:
df:32:20:99:bf:37:e0:21:34:88:85:85:e9:91:f1:24:b9:b4:
5f:15:c3:e1:7d:f9:53:2c:5b:a6:c8:64:8a:a1:00:92:c4:9c:
96:aa:54:89:db:b7:ae:0e:9d:fb:c0:6a:59:06:c8:2a:17:3a:
aa:34:9f:2d:bb:d9:8d:fd:bb:5f:33:ed:3c:3c:f4:76:96:2c:
40:2c:a1:5e:d8:da:7e:d0:bd:6c:36:67:45:be:f3:14:20:e6:
ed:74:d2:cc:1f:11:05:c4:cf:30:94:2e:6e:81:b7:a0:d4:64:
43:63:7f:e9:4a:b4:1e:fd:ef:6c:08:c3:b8:9d:d5:f9:13:d1:
ff:2d:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:00 2023 by rpki-client on console.sobornost.net