Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92c394b5-9677-443e-b086-0259d5ec8bbe.roa
File: 92c394b5-9677-443e-b086-0259d5ec8bbe.roa (raw, json)
Hash identifier: BM9k0VC1zvJ2KGtkBCqIHVUF6OSbJRv7uPYF2T8/8nQ=
Subject key identifier: 4C:FE:3B:EA:EC:E7:44:4E:7E:FA:57:BA:23:2D:0F:44:11:06:37:C2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1198A52107FE66CCC96F48BF6CE877526D52BAE1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92c394b5-9677-443e-b086-0259d5ec8bbe.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:98:a5:21:07:fe:66:cc:c9:6f:48:bf:6c:e8:77:52:6d:52:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: serialNumber=89d1052b1e3e90882af8e2f52569040b4e4b823efbd4fc0fd1e4971af16c82a3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:e8:a9:1e:40:89:8d:61:4f:72:b4:5b:9b:
cf:4a:3d:97:50:3d:3c:39:61:1a:09:cb:ef:78:b0:
ea:84:bc:e5:1f:48:29:c5:a1:ac:3c:52:cb:c9:ef:
a3:03:b4:b0:8e:ed:8c:25:fd:52:41:7f:dd:87:4b:
8a:34:a1:cb:b5:92:ba:22:bf:ea:6b:f6:e5:58:cc:
9d:a1:65:91:a0:cb:47:e8:d8:8a:76:6a:f0:44:fe:
a9:bb:c5:cc:9f:f6:25:bc:c1:65:82:e9:3e:fe:dc:
bf:ea:13:97:d2:34:c5:29:5c:bc:23:23:eb:34:2c:
1b:35:92:c8:8a:17:e4:ef:36:05:25:c9:0d:61:6b:
7c:4d:2e:29:e2:2e:02:61:d7:bb:19:ba:c7:f7:cc:
2a:9e:ea:bc:55:2c:d7:29:7f:0a:6e:91:cd:ee:d6:
96:a6:e6:a5:4a:4e:a8:78:5b:b6:ba:a2:be:a5:70:
3e:a2:1b:b4:90:82:fc:2d:ee:57:bb:17:53:00:cf:
cf:32:2d:c8:d3:37:88:66:23:5d:f2:67:1f:4d:37:
74:69:ad:80:29:3a:6d:6e:25:c7:2b:ff:51:b3:88:
df:82:09:38:e1:4d:5b:12:1d:b2:10:ca:72:38:e0:
1f:9c:9d:75:6f:57:26:06:a2:18:8a:dd:71:5a:c7:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:3B:EA:EC:E7:44:4E:7E:FA:57:BA:23:2D:0F:44:11:06:37:C2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/92c394b5-9677-443e-b086-0259d5ec8bbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a7:3e:0f:1b:e5:b3:72:59:c0:1c:84:a3:5b:00:38:09:d5:
9f:06:44:bb:86:b6:55:9b:c0:11:d0:4f:c9:f0:3d:8b:b8:b8:
d6:d3:e0:8b:16:00:8f:23:b6:f1:26:d9:fb:8d:0c:4e:cc:ca:
9d:cc:73:e6:5e:fd:6e:a9:60:c0:8f:db:1d:17:c9:58:ba:76:
b4:e2:72:76:28:f5:30:2e:59:11:55:92:aa:a4:85:c3:ea:64:
04:67:e9:52:b6:4a:e1:5f:23:ab:34:59:bf:0e:06:ff:e7:ba:
1e:e7:53:43:ea:ee:31:6b:a2:12:74:e0:40:0c:11:39:e8:c7:
88:40:5e:91:d8:93:db:92:95:f8:7c:40:5d:6e:21:50:ae:cb:
b4:d7:f9:33:9a:b6:43:fd:7d:b0:b3:7e:65:5f:db:e2:f1:5c:
4f:57:8d:73:9d:f2:f5:b8:0b:8b:50:90:2d:13:b0:6a:95:b1:
40:34:70:44:00:09:ad:09:db:07:8f:29:eb:29:77:f9:9e:24:
6c:5a:93:8e:1e:29:18:61:dd:cb:95:73:81:1d:e7:02:6f:8c:
ee:90:0d:ee:ef:3f:4c:fb:61:f3:a3:58:f6:ff:f4:a1:c3:58:
ad:c1:f4:3b:a1:64:da:3b:96:a6:cf:24:b1:cf:9a:38:d1:c9:
e9:e0:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:03 2023 by rpki-client on console.sobornost.net