Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e531477-9214-4676-ac66-bd9a3d4bae03.roa
File: 8e531477-9214-4676-ac66-bd9a3d4bae03.roa (raw, json)
Hash identifier: fSgns9bQF/rN+i/JK48ZYqp6KI5aM13Wm0QQcr2idaA=
Subject key identifier: C0:64:DD:AE:C1:B0:61:FE:40:BE:C0:24:04:60:EC:CA:E8:F1:98:D8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5703545E7A6DFFEB44EA0D558D99947DED1298F6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e531477-9214-4676-ac66-bd9a3d4bae03.roa
Signing time: Mon 31 Jul 2023 00:00:00 +0000
ROA not before: Mon 31 Jul 2023 00:00:00 +0000
ROA not after: Mon 04 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:03:54:5e:7a:6d:ff:eb:44:ea:0d:55:8d:99:94:7d:ed:12:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Sep 4 23:59:59 2023 GMT
Subject: serialNumber=58e899bde8983566f5d89ca5e2f96fb93871b8636f34c91733ad7dcc657b5b26, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:bb:43:f5:15:c6:66:05:33:a9:89:f3:7f:
fd:0b:bd:fa:01:4b:85:80:16:bc:76:ed:cd:e5:33:
04:64:38:2e:d9:c9:f8:7a:56:e6:04:fb:b5:b7:b0:
ee:96:15:17:43:2e:99:18:b6:a2:1b:67:51:de:2b:
c8:4d:27:37:a5:e5:4a:79:f8:c0:86:78:26:59:01:
b8:63:4b:4e:37:91:bb:b8:0b:fa:bc:54:ec:fe:f9:
e4:6f:b2:e0:7d:2a:e9:68:9c:b5:87:d2:15:ae:e4:
ce:d3:24:7a:c7:1e:21:6f:a9:a6:00:9a:82:93:80:
0d:cf:d7:2f:bc:c7:32:73:b0:3c:29:c9:95:28:68:
e8:dc:8e:fd:44:2f:c2:80:e8:87:08:62:8c:3e:10:
29:a8:dd:f0:ac:6b:ff:48:7d:12:5c:16:74:13:85:
dc:aa:d6:e3:f8:87:26:97:d3:19:60:bf:66:2b:7c:
5e:e2:9a:4b:aa:aa:0e:f7:2b:d2:84:49:3f:e8:90:
4d:7a:a5:7a:f8:53:29:37:21:76:71:42:41:f4:bd:
84:ef:8b:0e:3f:1d:3d:4e:07:c7:73:da:4c:b2:36:
82:85:f5:0d:92:40:34:b0:05:8d:5a:4e:4f:89:06:
e1:34:f2:8b:60:e3:a7:e8:b3:39:0e:c4:21:6c:db:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:DD:AE:C1:B0:61:FE:40:BE:C0:24:04:60:EC:CA:E8:F1:98:D8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e531477-9214-4676-ac66-bd9a3d4bae03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
25:87:3b:37:e8:7f:ac:32:69:91:22:26:6b:f9:94:ac:3a:08:
cb:09:17:2c:e7:c6:c6:23:26:5d:ed:9b:98:7c:84:5a:00:c5:
2d:67:c2:1a:20:e6:1f:05:2b:16:cc:b2:d1:bc:13:64:48:ef:
20:d9:06:a6:82:eb:b7:4e:f0:8e:0d:e6:db:56:0c:01:71:70:
c8:54:fd:b5:b6:05:01:7b:c4:4f:4e:a7:7d:99:0c:68:16:e8:
78:0e:4b:b9:0f:89:8c:72:5f:8e:0a:e5:5b:7e:f0:eb:50:7e:
0b:42:7d:fa:6f:2d:1f:49:de:46:10:c0:a8:fd:b0:72:cf:8a:
a3:d1:ff:9b:47:99:cf:b4:fc:3d:06:95:8d:62:dc:42:db:8d:
45:2d:0a:fd:97:dd:52:02:3b:b3:3a:e0:95:4d:f1:3b:53:c3:
11:df:1f:ec:a8:a0:04:1b:7c:cb:2f:d9:64:38:b5:af:d5:cd:
70:11:58:0d:b8:21:98:15:61:61:e8:40:46:41:0c:05:b4:a7:
9e:16:e8:d9:52:03:65:78:65:f7:fb:66:48:87:6d:79:f0:68:
fc:b2:cb:1d:63:21:c0:b3:dc:e3:db:41:ed:19:93:2b:c3:39:
58:ef:c6:a9:c2:07:2b:07:95:6e:33:e0:0f:bd:bd:14:10:1c:
1a:e9:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:02 2023 by rpki-client on console.sobornost.net