Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8918e301-fb40-441f-ab90-230eab522369.roa
File: 8918e301-fb40-441f-ab90-230eab522369.roa (raw, json)
Hash identifier: lYMQN1Wa0X/KChrYZvaGfOsXouLtztpukGzsUr0YLto=
Subject key identifier: 92:EC:DB:BF:19:77:CA:D0:8C:1A:B5:DF:E0:5E:7F:5F:F5:97:2B:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5274255A9E350492147B7A140FF6EDD98E315A59
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8918e301-fb40-441f-ab90-230eab522369.roa
Signing time: Wed 04 Oct 2023 00:00:00 +0000
ROA not before: Wed 04 Oct 2023 00:00:00 +0000
ROA not after: Wed 08 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:74:25:5a:9e:35:04:92:14:7b:7a:14:0f:f6:ed:d9:8e:31:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 4 00:00:00 2023 GMT
Not After : Nov 8 23:59:59 2023 GMT
Subject: serialNumber=37786e317a2cafe8a963c3de97184d3456ce2e29e1c4911e25138bc2a91c9fdc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:e8:5b:3f:41:59:33:b4:fe:07:a7:9f:ad:
f3:9f:4e:f7:c1:ea:83:20:a3:31:1f:44:8b:21:4b:
c3:4a:d5:32:97:15:86:62:ca:1d:a7:c7:0e:d6:d4:
56:36:ad:14:24:56:b4:64:58:99:b0:d9:86:23:06:
14:0a:ec:12:71:e6:94:95:c0:ba:3d:ab:b4:43:b7:
06:81:09:a4:13:0c:de:24:a1:92:a6:7e:c6:7c:e2:
8b:0f:0a:c1:e3:78:da:6d:d8:b1:dd:a2:e2:fe:47:
2f:1c:f4:ef:0a:b5:fe:5b:19:79:6c:2b:a7:1c:e6:
42:be:2b:6d:ed:90:eb:22:0f:0a:5a:8c:c6:29:1e:
ea:d8:a4:c2:71:1c:83:3b:5b:d9:71:10:50:23:d1:
4f:56:87:ca:00:aa:18:7a:7a:8a:5a:66:ed:67:df:
8d:e1:ed:15:ac:86:43:64:fd:64:d8:13:b1:36:9f:
6e:d0:a4:b5:ef:19:1d:40:5b:fd:4c:ce:9b:bc:9b:
da:36:06:d3:d1:15:80:01:3e:d1:61:4c:dd:62:c8:
d3:0d:ca:67:ca:5a:a0:fb:f1:0a:7c:a6:60:f5:60:
f5:13:35:0f:ce:86:ae:4b:e4:7e:e5:0d:73:39:c5:
ed:d9:ed:05:09:87:e9:fc:f1:4f:da:95:66:27:d3:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:DB:BF:19:77:CA:D0:8C:1A:B5:DF:E0:5E:7F:5F:F5:97:2B:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8918e301-fb40-441f-ab90-230eab522369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:44:66:13:9f:4d:88:e0:f0:a6:92:e2:93:9f:c7:aa:02:a2:
f3:fb:c6:ea:07:9a:76:5c:a9:14:53:24:46:5a:f4:35:1a:86:
f3:d2:39:92:94:1f:9a:f3:70:ee:29:9a:fe:b3:27:73:38:86:
8c:47:b4:31:e1:3d:cf:b9:b0:9f:3a:56:f3:d7:2e:ff:d1:0d:
c7:f0:8a:6f:53:00:6f:1d:86:86:a8:bb:05:f1:f3:15:71:df:
3e:d9:0d:f5:6b:a8:d3:f7:17:8c:69:51:90:1a:f3:0e:fd:98:
36:1c:11:0d:de:7d:25:20:f6:d1:83:e0:c3:41:19:0b:93:db:
b5:cb:02:ac:57:42:b7:90:7f:bd:fa:1a:e8:d1:9b:1f:b3:0c:
5c:6c:39:2d:f4:d2:46:ae:77:8e:26:db:d0:8a:48:46:e5:ac:
d5:e2:31:79:63:c9:3e:5c:d5:ca:21:87:31:5b:4f:b8:54:c3:
4d:42:d9:c5:35:6e:87:48:3c:3f:4e:0f:5f:ad:61:8f:53:6b:
ff:e5:bd:c7:03:c3:3b:e8:42:5e:b9:0b:22:37:08:a0:21:ee:
ef:38:43:4b:6c:e5:69:b0:c7:e1:ac:73:fc:f2:eb:d0:73:29:
7b:ba:5c:41:5a:5b:c1:f5:5c:51:8e:2b:98:48:60:7e:90:0c:
3e:8a:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:01 2023 by rpki-client on console.sobornost.net