Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/997b0212-bb77-4266-840f-76af8ce874d9.roa
File: 997b0212-bb77-4266-840f-76af8ce874d9.roa (raw, json)
Hash identifier: cbQGkKLP+j3wbjtVUESAMafkYS2NCx2pKskYPcwQLag=
Subject key identifier: 52:3F:7D:AE:8E:BD:F3:70:3F:0C:C3:DA:76:3F:78:C4:8C:93:67:CB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3004441D6CA7E45D4BAB8767D685198CFEE1FF93
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/997b0212-bb77-4266-840f-76af8ce874d9.roa
Signing time: Sat 28 Oct 2023 00:00:00 +0000
ROA not before: Sat 28 Oct 2023 00:00:00 +0000
ROA not after: Sat 02 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:04:44:1d:6c:a7:e4:5d:4b:ab:87:67:d6:85:19:8c:fe:e1:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 28 00:00:00 2023 GMT
Not After : Dec 2 23:59:59 2023 GMT
Subject: serialNumber=8bfa6f863a29f07fd1b0851cf5e76d135c95040c9ff0b11347b86ca03fea2e09, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:7d:f0:c6:7a:78:05:a0:a2:5e:e1:7a:28:
2a:3c:31:62:92:69:a9:8c:c3:e9:0c:cd:44:1f:58:
38:de:a0:3b:1c:ef:20:79:ac:20:0e:45:a9:a8:53:
82:76:82:88:9a:87:36:35:52:5a:3f:58:60:84:e8:
54:5d:29:b0:06:96:21:80:89:ca:94:8f:2a:af:51:
5b:55:14:f1:aa:c2:f7:d1:53:78:32:28:c6:0b:37:
ff:6e:80:0b:fd:6a:6f:8f:22:ec:87:84:1a:51:d7:
8c:2d:1d:e0:61:38:67:ed:a6:4c:24:8b:70:f2:51:
8c:c2:38:0e:4a:d4:b7:e7:1f:2c:24:f8:f8:ed:cd:
8c:eb:8d:a3:93:c1:63:66:0a:11:78:d3:e9:5a:77:
81:73:75:93:8d:0f:88:97:90:60:d4:99:5f:27:9e:
49:72:05:66:d1:8d:37:6f:0f:59:37:f0:8d:87:f2:
e5:eb:03:a0:28:ea:1c:61:c6:27:97:a6:c6:73:a8:
f0:a5:d3:13:31:e7:0d:64:0c:ac:1e:69:bd:f3:64:
78:a0:52:e8:92:b5:b0:0b:14:23:73:f3:21:cf:d7:
e5:8d:2c:da:5a:20:92:f2:a4:c1:1b:49:df:da:62:
90:2c:3f:ca:61:48:90:fb:f1:b2:c3:73:28:5d:bc:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:7D:AE:8E:BD:F3:70:3F:0C:C3:DA:76:3F:78:C4:8C:93:67:CB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/997b0212-bb77-4266-840f-76af8ce874d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5f:9a:5e:25:62:52:9a:e9:a1:42:ba:87:03:03:4a:f6:97:
78:c3:40:11:8e:df:17:3f:41:a6:dd:3c:5a:74:2a:2c:51:44:
cb:b0:35:9a:e1:c5:a3:98:16:2d:4b:0b:0c:18:96:21:55:17:
bb:a5:f9:e2:09:44:47:38:5d:f9:6e:14:06:df:97:a8:2d:e8:
44:6b:7f:c0:df:15:d3:68:7f:10:ce:9b:3a:8e:df:92:31:ee:
99:91:9a:ce:f2:14:79:46:ac:57:ae:4c:91:ca:b2:80:e6:99:
c6:42:fe:4c:d7:1d:78:7f:f8:95:89:48:df:61:41:3f:63:85:
3f:f6:1d:f8:49:1a:f9:f4:8d:6c:f8:d8:c5:2e:3d:2c:29:ee:
21:1e:ff:5e:1d:64:fc:aa:f4:d4:72:dd:6d:eb:fb:26:43:cd:
28:8a:bc:47:69:25:9c:83:eb:3b:d2:3d:2a:02:b0:f0:73:6e:
eb:c0:37:85:b8:89:46:8e:01:92:a9:aa:6a:b9:2e:3b:c1:77:
e9:10:43:cf:47:bc:88:45:53:25:7a:b3:e3:b2:17:86:68:eb:
b3:db:d3:47:62:4e:b7:32:01:90:ba:b7:bd:a9:0b:7a:0a:ad:
ff:88:a7:87:e6:dc:1b:eb:81:a4:fc:78:f8:32:46:e5:e7:53:
3b:4d:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:04 2023 by rpki-client on console.sobornost.net