Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8bb274fe-e88b-40fa-b5ef-92f1d3f25690.roa
File: 8bb274fe-e88b-40fa-b5ef-92f1d3f25690.roa (raw, json)
Hash identifier: cluGR+kw2d5Ff/jx73dsEIiHbN2AQgIsiMj5Pngn8Js=
Subject key identifier: 4F:00:1D:12:69:71:91:A7:E4:F3:B2:99:86:A8:30:32:D2:C7:12:7E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 15923326A4441314B48689A717AAE2C8587A2C32
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8bb274fe-e88b-40fa-b5ef-92f1d3f25690.roa
Signing time: Sat 28 Oct 2023 00:00:00 +0000
ROA not before: Sat 28 Oct 2023 00:00:00 +0000
ROA not after: Sat 02 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:92:33:26:a4:44:13:14:b4:86:89:a7:17:aa:e2:c8:58:7a:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2023 GMT
Not After : Dec 2 23:59:59 2023 GMT
Subject: serialNumber=fbc5c2f2618271778f5539967dc5a298b27d7ce99092124bb6e78070ae8e3b68, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:aa:ba:a7:a1:77:a7:f6:f9:1d:6a:1b:34:
8d:97:03:1b:1a:fe:6e:57:31:9c:71:5e:a7:82:2b:
e2:75:b9:f6:8f:ae:e7:be:1e:8d:ba:fa:1e:3b:e9:
73:86:96:8e:f9:36:3a:c7:95:cc:95:b0:7e:97:1c:
e9:95:5b:b7:41:38:d3:ed:3e:1b:3e:c4:e6:10:4b:
86:98:66:6e:ad:6e:fd:8c:c9:56:54:bf:97:37:0d:
8b:ad:b8:07:87:6e:7a:5d:17:1e:d1:c3:b2:01:57:
83:1d:84:30:44:ab:40:bb:61:2a:45:c5:10:63:3e:
80:b9:9d:a1:74:3a:19:7f:30:73:88:e8:8d:79:20:
bf:45:9f:2c:f0:e8:3f:f3:63:d5:90:87:a1:c1:02:
56:64:c9:4b:0d:e2:bc:14:db:04:73:c0:b7:6d:fc:
6d:c1:69:cd:1b:fe:49:f6:5d:13:4a:92:c9:55:84:
c5:b3:7a:68:90:86:20:6a:44:7a:8b:a6:ac:eb:b5:
3f:dd:40:d3:d1:03:3f:92:59:52:55:fe:52:8d:66:
66:75:0a:1f:a4:8c:61:01:72:3a:46:47:71:7e:16:
c3:8a:7f:5e:73:94:8b:0e:f6:1d:5f:38:ad:22:aa:
c3:28:7b:ef:75:c5:6e:bd:ee:1f:9e:00:6b:68:d0:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:1D:12:69:71:91:A7:E4:F3:B2:99:86:A8:30:32:D2:C7:12:7E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8bb274fe-e88b-40fa-b5ef-92f1d3f25690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b4:d3:9d:00:8a:15:54:3d:f6:35:cd:5c:b7:d2:cd:71:2a:
5e:bf:ae:28:7d:70:92:a4:3e:d2:ed:53:b9:ef:cc:3a:f2:a7:
4e:be:c2:86:6d:2c:e1:96:17:14:03:5c:f7:6a:81:f6:b5:00:
6d:9a:2a:18:76:65:16:96:fc:27:40:fa:0d:df:56:d7:e8:ae:
3a:b0:ae:63:9c:c0:c6:b6:18:74:dd:33:bd:90:bf:31:ff:77:
23:d5:5c:c9:32:02:22:c1:5a:87:0c:68:df:c3:91:d2:9c:13:
20:ff:71:34:a4:5f:80:08:09:f4:72:0f:a0:9a:b6:1a:dd:f5:
21:df:c9:9c:dd:df:48:50:32:20:98:e3:df:7a:15:45:c3:12:
82:80:74:8c:d9:01:15:21:17:86:91:6b:09:a4:4a:00:f0:8e:
99:9d:de:94:37:e6:5b:fa:ea:41:5c:5e:98:e4:9c:51:3a:0b:
ca:71:bc:18:a0:52:77:9b:ea:a0:42:fd:d9:de:db:80:7e:b7:
20:af:a4:d9:9b:ae:a0:30:dc:d4:7b:9f:a0:27:14:6c:7d:79:
21:ec:8c:ba:18:81:7b:4b:d2:a5:73:9f:f4:0e:43:ee:37:da:
93:a1:be:75:32:be:4d:c5:9a:a9:35:51:2e:b9:b9:c8:24:a6:
47:37:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:01 2023 by rpki-client on console.sobornost.net