Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93b2f4ff-84ad-45ec-a82b-3424e5330dae.roa
File: 93b2f4ff-84ad-45ec-a82b-3424e5330dae.roa (raw, json)
Hash identifier: jroYKzBcO97yqq5ywmhzOeg1ZJwI3aBMqjjgiFJU0c8=
Subject key identifier: 37:1A:7E:91:90:E7:C5:9A:59:9D:A3:B6:7C:B0:A5:AA:10:A8:D1:85
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7326DDABB9303D6CD3729B3B71758DAAADC683FB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93b2f4ff-84ad-45ec-a82b-3424e5330dae.roa
Signing time: Tue 01 Aug 2023 00:00:00 +0000
ROA not before: Tue 01 Aug 2023 00:00:00 +0000
ROA not after: Tue 05 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:26:dd:ab:b9:30:3d:6c:d3:72:9b:3b:71:75:8d:aa:ad:c6:83:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 1 00:00:00 2023 GMT
Not After : Sep 5 23:59:59 2023 GMT
Subject: serialNumber=24c7570cfe9eb7c764e5f18f8cee51010e767f493885e3e0d5a083b797085f80, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:5c:4a:a5:ba:75:4e:93:75:79:75:c6:6a:
42:b5:32:ff:65:f3:76:a2:5f:da:ea:47:a3:e9:62:
a6:26:96:e5:04:4f:52:9c:9d:73:20:e1:73:e0:51:
a7:57:bb:ca:a0:c7:5b:96:0e:27:ec:2a:d2:d7:c5:
4f:ce:23:98:38:74:08:a2:4b:83:cf:71:a8:0a:1f:
79:c9:5d:92:82:3b:87:87:dd:69:6c:6f:49:83:03:
c7:79:57:06:51:41:ed:7e:74:fc:b5:c9:8b:8f:64:
1a:03:72:c7:aa:48:e6:df:16:64:a9:5a:1e:3f:2c:
e2:44:86:6e:2f:37:e7:41:09:6f:49:7e:b0:14:b3:
95:d9:ed:e2:45:d5:00:82:3d:68:18:48:10:ab:6c:
29:93:b0:ce:b2:76:8d:9a:6d:c1:dc:60:a0:b6:fa:
71:4f:84:b3:04:62:70:89:c8:ce:74:4e:ca:e4:11:
62:79:2e:75:71:96:ec:52:e3:12:11:4b:d0:ec:2f:
26:bc:6a:c5:78:39:cb:2a:6c:27:51:e8:d1:7f:75:
95:45:64:63:c3:08:69:58:0a:24:df:2c:e7:72:da:
d4:70:51:47:7f:f5:6d:59:cb:f3:d5:e9:98:50:6b:
c7:02:9d:b3:18:0a:57:74:fb:18:b0:b9:b9:77:7e:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:7E:91:90:E7:C5:9A:59:9D:A3:B6:7C:B0:A5:AA:10:A8:D1:85
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/93b2f4ff-84ad-45ec-a82b-3424e5330dae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e6:b9:3c:25:e8:a4:2a:36:cc:ce:ff:f7:56:3c:31:06:8d:
87:69:4f:b5:b1:eb:4b:0e:69:5f:5f:9b:93:7b:b8:c3:85:65:
66:48:52:32:88:ce:b5:e3:fe:c1:4c:56:fd:e7:60:18:22:b0:
2c:54:66:29:92:f9:48:c1:87:54:89:54:32:f8:97:f2:10:43:
b8:e0:96:c8:44:79:39:28:45:d4:c1:4b:1c:7e:ba:0c:92:d9:
21:2c:25:2f:5e:0f:39:65:2b:ed:a9:b3:1f:0a:35:20:48:22:
73:2f:ea:87:36:09:85:df:c5:c0:c7:1d:a6:a3:c7:03:4f:d0:
3d:16:7c:6d:4a:3c:53:89:38:87:3a:ca:1c:b4:02:e6:f4:e4:
1a:0b:ca:83:e1:b6:f0:e0:d7:18:a5:b4:cb:70:0b:cd:d2:5f:
c6:6d:e7:b4:fa:ac:ae:d7:f5:96:16:c2:c6:d3:de:7e:f5:44:
d1:a4:7a:cb:70:3c:00:27:d1:f6:5d:fd:f8:28:e8:15:e8:41:
3f:a9:2b:b7:8a:52:2a:6e:ce:0a:f1:db:78:9a:df:b3:91:47:
13:c0:de:8d:58:43:17:3b:de:de:c6:23:18:1d:3a:c1:bd:66:
b0:a8:63:ea:de:56:f4:a2:00:c0:df:8a:1b:e9:2d:40:b4:c5:
8f:b5:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:03 2023 by rpki-client on console.sobornost.net