Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87267976-6aeb-463c-8cbc-12b6c7695452.roa
File: 87267976-6aeb-463c-8cbc-12b6c7695452.roa (raw, json)
Hash identifier: 6jUgZ5Xw6b5Pa2ICun6VpQjHsXQOgp9zAbgcj0fgpMc=
Subject key identifier: 58:BA:72:C2:43:80:4A:82:2B:2B:51:F5:E2:FF:CC:ED:68:1A:FD:52
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 434B00FE6949219D5A688CF89A1BD277B4F496A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87267976-6aeb-463c-8cbc-12b6c7695452.roa
Signing time: Sun 03 Sep 2023 00:00:00 +0000
ROA not before: Sun 03 Sep 2023 00:00:00 +0000
ROA not after: Sun 08 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4b:00:fe:69:49:21:9d:5a:68:8c:f8:9a:1b:d2:77:b4:f4:96:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 3 00:00:00 2023 GMT
Not After : Oct 8 23:59:59 2023 GMT
Subject: serialNumber=1633ec52e0ccd7229eb735b7794530a95ebb41db80e4afc4138e862e641630d6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:1a:83:27:93:d5:66:37:0a:9b:2a:5a:9c:
2a:4f:13:94:de:0c:a0:50:23:96:6d:4b:36:86:fb:
eb:f5:5a:09:90:94:6d:63:ae:2a:4c:f5:c7:50:a8:
11:83:dc:a4:aa:f8:eb:18:e7:ed:f9:4b:b2:5b:91:
60:78:34:1c:e8:50:87:66:65:e8:29:50:9a:f7:f1:
d8:fb:33:a6:df:b5:4d:f8:d2:03:a9:f6:aa:e1:d0:
22:7e:29:bb:b1:b4:d8:8f:35:73:b0:0b:97:19:f4:
39:b2:2a:e3:76:37:8a:80:99:cc:46:25:8d:15:c6:
0a:be:16:0d:1a:4d:db:94:9a:b8:67:20:91:92:28:
39:b3:f4:76:c3:a9:c1:b2:8f:6d:5e:22:e5:df:f7:
90:ab:e0:84:2c:2c:12:79:76:05:07:66:8f:49:5c:
2f:46:47:76:dc:fe:9b:71:95:26:f3:38:d7:6d:59:
ee:7b:d0:1e:10:57:ff:a0:e9:2f:fd:ef:9d:cf:99:
2d:20:a4:5e:cd:0a:ed:c0:03:3b:4a:ff:a5:ce:41:
ff:c4:83:61:e4:01:f4:03:c9:15:83:c5:52:3e:34:
53:8f:51:36:fd:d6:56:3d:1b:44:80:94:69:ad:77:
25:13:2a:0d:33:c6:2b:14:98:e7:d1:5c:f7:d0:15:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:72:C2:43:80:4A:82:2B:2B:51:F5:E2:FF:CC:ED:68:1A:FD:52
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/87267976-6aeb-463c-8cbc-12b6c7695452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:37:58:0a:03:0f:29:3d:0b:e2:7f:26:87:7e:da:a5:02:c0:
56:37:fb:73:be:35:0e:9f:5f:bf:5d:43:d1:0d:b8:80:9e:ea:
48:d1:d2:d4:de:d1:0f:22:a2:4c:d6:33:60:ad:cf:c1:6e:ea:
50:c6:1f:89:68:d8:d5:53:03:d1:5a:14:5a:8e:6e:d2:59:c4:
93:a5:16:3f:07:d5:07:1d:ae:3d:0d:2f:ea:91:db:aa:c3:bd:
4c:cc:2d:10:57:3f:ae:e8:d8:75:b1:b0:0b:2b:ee:0d:62:a5:
c6:15:b4:d5:c0:06:53:ee:ec:f2:95:81:70:3d:97:25:2c:c1:
84:74:86:37:72:fd:85:a2:cb:3e:87:3c:8c:f5:03:a9:5e:a3:
b8:04:e4:87:59:97:61:00:ac:61:47:56:ba:11:06:c2:b5:ec:
32:00:18:8d:2d:f9:3f:fc:47:5a:9c:d3:63:db:11:c1:f0:74:
37:ed:00:e7:96:0c:fa:88:da:bd:bf:6f:a7:df:b0:e9:70:f2:
91:bb:2a:f7:3a:6d:bd:87:fd:67:4d:da:7d:bd:8f:2a:dc:9c:
f9:23:b8:fb:88:4e:38:9c:bd:78:7d:11:ca:50:4a:50:dd:c3:
30:68:07:1e:27:37:9d:44:7f:03:19:e7:40:89:e2:58:d3:b6:
ea:fd:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:00 2023 by rpki-client on console.sobornost.net