
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8fe51f81-73d9-4220-a648-4553d0e84bc3.roa
File: 8fe51f81-73d9-4220-a648-4553d0e84bc3.roa (raw, json)
Hash identifier: bxt1JWL5UJ8PGmF5tq4Z6sfOOMDOliQ8VZ2rCpVIl04=
Subject key identifier: 40:DE:08:09:9D:01:40:E7:C8:A9:A4:D8:A8:0C:B0:1B:ED:F3:75:39
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 039322D2863943DE04DC5E82E4DAFF4E70232E9D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8fe51f81-73d9-4220-a648-4553d0e84bc3.roa
Signing time: Sat 02 Sep 2023 00:00:00 +0000
ROA not before: Sat 02 Sep 2023 00:00:00 +0000
ROA not after: Sat 07 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:93:22:d2:86:39:43:de:04:dc:5e:82:e4:da:ff:4e:70:23:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 2 00:00:00 2023 GMT
Not After : Oct 7 23:59:59 2023 GMT
Subject: serialNumber=e87676060ce1337b3836b5494f8e5714681a2e5e8c10e55ab05d4fdde538c4ef, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:ac:d0:47:31:b0:3d:df:14:7f:b4:bf:18:
95:b0:af:78:38:f3:38:4d:a1:92:10:36:6d:ea:75:
68:95:f0:e9:4c:fc:c4:d3:30:43:20:d3:e5:68:a2:
a0:ed:19:be:b2:98:14:b2:45:7e:b6:41:75:3e:97:
20:b9:27:7f:9d:9d:54:9c:27:a5:99:09:f3:bd:73:
ea:92:70:48:c2:04:dc:ac:01:83:f4:ff:d6:c4:ff:
96:c1:67:4c:bd:49:b4:37:d9:a5:56:c7:6f:cb:99:
e5:9f:aa:15:bb:75:95:34:78:00:91:f8:9b:bd:e7:
af:ed:3f:3a:b5:1c:d0:e0:cc:dd:8f:37:e6:09:f7:
d9:7d:e5:19:3b:7f:cd:78:8a:4a:31:78:30:5e:ba:
bf:79:33:0d:e5:50:14:48:d5:98:ed:90:c4:01:90:
ac:5d:7c:de:c9:c1:27:04:fd:40:1c:44:c8:3e:68:
13:7f:d1:df:61:7e:34:ea:e1:62:d6:10:3c:2a:49:
a2:ca:cc:0a:09:2d:ed:d0:f3:c5:b3:b6:44:51:e5:
2e:03:eb:05:ce:6d:2a:ed:f0:f9:20:10:fa:39:05:
d7:6c:0c:b2:9a:e8:5e:83:08:a7:17:a3:89:81:7c:
ad:64:40:2f:2a:11:0a:db:33:e4:d7:c6:6d:ee:0c:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DE:08:09:9D:01:40:E7:C8:A9:A4:D8:A8:0C:B0:1B:ED:F3:75:39
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8fe51f81-73d9-4220-a648-4553d0e84bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6a:b4:04:61:46:86:04:d3:0b:15:0c:d8:89:54:7e:ed:e1:
30:48:2c:7e:ac:c4:79:7d:0e:83:27:38:2c:44:ad:9e:de:59:
03:18:0e:9b:51:ef:f9:6a:26:50:f2:fc:be:dd:6f:90:25:12:
10:41:19:c7:05:23:1e:d5:5d:0f:11:ee:da:59:3c:75:12:ad:
cb:a2:ea:22:b5:9c:35:9e:94:8c:04:21:5a:7e:c3:97:2d:ee:
12:91:c6:9c:d4:c3:83:47:0a:5b:da:2b:67:1f:8a:44:33:73:
3c:ae:6b:7b:c8:31:26:ca:ed:83:a6:42:85:5b:64:a7:97:d6:
cb:4e:5e:85:96:24:a8:bf:ba:88:8b:e4:88:63:20:85:5d:27:
4c:c8:6e:98:f7:b3:13:a9:54:c1:b8:41:d4:e1:b3:b9:50:af:
ad:e5:57:ae:61:9d:79:f5:ea:e0:97:82:13:2c:c1:38:0c:b4:
43:5e:ab:bd:d2:a4:35:cc:85:16:3f:6d:ae:39:10:a4:c0:65:
0f:d5:b3:a9:34:97:e3:c5:c4:6c:c2:9a:53:57:b8:b2:0d:34:
cc:ab:49:ed:d7:1c:43:54:7d:ea:d8:19:3c:00:63:1e:a6:89:
99:a3:ba:3e:37:d1:59:cd:d0:44:23:49:1b:ca:4e:8d:7f:66:
6b:be:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:02 2023 by rpki-client on console.sobornost.net