Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84ce3529-ee6b-4dff-ad71-ce2ac74b164a.roa
File: 84ce3529-ee6b-4dff-ad71-ce2ac74b164a.roa (raw, json)
Hash identifier: cFZkr+rqIcdkQ8CrZ4jMRU6xqEH3zNZSlwpDA/H9Mdw=
Subject key identifier: 57:93:D8:F6:FB:FD:9C:19:DC:61:8A:D1:9E:ED:08:DD:47:F8:18:31
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15472A4AA391B891B0E08399D705DDCB54A3D30B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84ce3529-ee6b-4dff-ad71-ce2ac74b164a.roa
Signing time: Mon 30 Oct 2023 00:00:00 +0000
ROA not before: Mon 30 Oct 2023 00:00:00 +0000
ROA not after: Mon 04 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:47:2a:4a:a3:91:b8:91:b0:e0:83:99:d7:05:dd:cb:54:a3:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2023 GMT
Not After : Dec 4 23:59:59 2023 GMT
Subject: serialNumber=c79cfe1fc0b91b94c5704baadc7a0c1827f6b62ddb553453e613833c3c3efb5d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:72:c9:3b:1b:9c:6f:d0:b8:77:e3:d3:b4:
84:85:49:2f:c3:e5:71:f7:18:2a:92:8c:58:30:9a:
65:77:86:07:b3:7a:3b:c3:20:61:91:2d:33:cf:6e:
81:ec:dc:31:18:c5:bb:20:da:3d:c5:65:ba:ed:0d:
0f:fd:b9:63:2b:00:b9:e5:c8:b4:02:6e:12:02:38:
9c:85:33:ca:0e:c5:de:6f:b6:8a:2b:de:d8:f3:0d:
4f:d0:63:b4:8c:bf:79:99:69:76:15:49:34:6e:0d:
f9:10:7b:92:3f:a3:c9:0c:95:60:59:a4:9d:f8:35:
32:a4:df:37:66:9e:91:5d:15:2f:d0:b8:98:f9:8f:
bb:50:d4:b6:bd:5c:8e:e7:7a:ea:31:0b:4e:d7:9a:
1d:f0:ce:6a:6c:22:2f:cc:a4:68:ce:b0:98:8e:9a:
6b:35:37:cf:3a:ed:3d:cb:2d:5e:1b:a1:ea:5f:8b:
41:77:d1:37:35:4f:63:93:4e:c2:2d:68:77:d7:a7:
a2:fb:91:82:e3:e8:23:64:ee:d3:4c:3f:ca:79:36:
30:92:8c:50:02:85:4e:b2:69:c2:c4:98:3a:8b:ca:
8b:59:01:07:5c:2b:d0:f5:60:dd:e0:ac:49:e8:16:
93:ec:4b:a1:97:84:65:bb:6d:ce:5f:09:eb:d4:84:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:D8:F6:FB:FD:9C:19:DC:61:8A:D1:9E:ED:08:DD:47:F8:18:31
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/84ce3529-ee6b-4dff-ad71-ce2ac74b164a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5b:a9:6a:f8:46:13:e1:d4:af:89:19:4b:29:f9:4c:f2:47:
cb:b7:14:66:b2:13:92:47:a8:06:92:b7:4d:aa:17:c3:18:eb:
f6:4a:d5:9a:d4:e2:a7:eb:e5:ae:f1:dd:e5:be:13:93:12:05:
2c:e1:a3:7f:e9:90:b4:75:57:a2:8b:ab:19:4b:5d:d3:a1:2b:
b4:76:ad:f1:43:86:f8:e5:1b:71:c8:fb:ba:12:39:55:31:37:
40:3a:5c:e0:fd:c4:1c:86:5a:c7:a6:ab:33:a2:0e:f0:5d:96:
dd:48:d1:39:a5:86:8a:5f:2d:b4:38:23:aa:a2:bf:fd:34:45:
6a:97:52:7c:c2:25:da:2f:d5:21:3f:88:d0:4e:1c:7e:c8:94:
8d:29:e7:13:09:bc:31:ca:23:ec:64:a2:25:3d:69:a5:35:43:
33:72:4a:7e:8d:00:1b:2d:5f:78:cb:7e:b9:99:e8:25:bd:10:
26:e5:13:29:08:10:8e:62:3c:18:56:1f:e3:bf:9a:b3:66:b8:
8a:ce:e8:b9:0b:aa:cd:6c:fd:bc:04:88:ec:2d:d4:ca:0c:d3:
9d:fc:20:a8:75:db:4a:7c:01:2d:ef:1a:49:97:ea:bf:53:d1:
4b:da:4b:6b:0f:44:25:4f:29:73:bc:e1:1d:e9:b6:89:2d:84:
19:f8:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:00 2023 by rpki-client on console.sobornost.net