Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9af4ec25-8418-4933-9869-8f9f69c39042.roa
File: 9af4ec25-8418-4933-9869-8f9f69c39042.roa (raw, json)
Hash identifier: CKPSdkFCDNuVw76IF7yt+7f3sT3fxXC/ErKmcTYGIVM=
Subject key identifier: 8C:C0:1E:80:F8:4E:4F:3E:67:B0:F5:55:FC:CD:6F:43:A1:FE:70:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0D8BB54AFBC2D7D1060C694A486989C366804F07
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9af4ec25-8418-4933-9869-8f9f69c39042.roa
Signing time: Mon 23 Oct 2023 00:00:00 +0000
ROA not before: Mon 23 Oct 2023 00:00:00 +0000
ROA not after: Mon 27 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8b:b5:4a:fb:c2:d7:d1:06:0c:69:4a:48:69:89:c3:66:80:4f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 23 00:00:00 2023 GMT
Not After : Nov 27 23:59:59 2023 GMT
Subject: serialNumber=956c9658a4604b7d4371360a8261f5ae582c2c13e16520ace827dea03008d146, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:eb:f8:39:b1:8d:26:0e:d6:35:58:40:55:
bf:88:5e:be:27:73:8f:b2:ed:8d:93:3e:62:8c:e6:
2f:ed:41:8b:be:ea:62:4b:69:18:49:1b:12:79:5d:
68:59:fb:40:40:32:fe:fd:ea:3e:17:79:2d:dc:8b:
70:1a:65:21:9c:e5:15:68:36:58:d4:2d:f2:d4:0c:
2a:8c:3c:cc:9a:f7:e6:53:57:e1:70:63:10:5b:14:
0f:21:af:95:30:63:9f:08:29:25:3e:f2:6c:68:b9:
f5:c2:a4:cc:ae:91:5d:49:6b:4c:81:99:f8:2b:99:
f6:85:35:90:45:19:72:59:bc:35:cb:45:d0:3a:59:
1e:52:db:4e:28:ca:32:54:8b:d7:44:d2:ab:ee:6c:
20:87:0d:df:05:be:a0:01:d8:fd:57:a9:cb:3d:2d:
73:a5:90:31:32:f8:fe:45:3d:ff:c7:76:67:f4:c5:
90:2c:33:39:7d:82:25:5a:64:c7:56:57:cd:68:8d:
de:a9:6b:21:14:cb:1a:3f:dc:f8:7d:a8:6d:e3:40:
44:cd:35:6d:2c:89:73:45:f9:95:71:3c:fa:83:a7:
53:9c:81:0a:aa:10:0a:f6:86:08:2c:a1:ab:e6:e2:
7b:df:63:80:38:c6:ab:f0:08:d4:42:51:21:2d:9f:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:1E:80:F8:4E:4F:3E:67:B0:F5:55:FC:CD:6F:43:A1:FE:70:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9af4ec25-8418-4933-9869-8f9f69c39042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d0:f1:c6:99:64:4a:e3:bd:c0:f4:78:cc:4f:f7:b5:cd:c7:
68:82:3d:fc:a5:73:f8:1e:44:3b:b7:b2:93:66:a1:d6:81:31:
60:77:9b:81:80:7c:7a:ce:48:a3:cb:2e:a7:f7:04:f7:ce:48:
f8:cb:d7:35:84:2d:39:04:a2:e3:d8:30:d9:bd:89:5a:5f:16:
f1:22:10:6f:94:43:89:f3:65:48:c4:7c:90:ab:c4:8a:19:f1:
80:be:d3:66:44:40:94:36:16:45:b7:0f:8a:a7:a6:96:2e:ed:
d9:14:61:a5:82:d2:e2:6e:60:05:6d:90:1f:0d:13:d6:82:2e:
c9:9e:15:3d:18:56:0f:45:78:43:a2:10:73:04:9e:bd:3f:01:
69:42:74:f5:87:27:fb:84:ce:1c:fe:e1:bb:74:69:f8:53:0b:
f7:18:11:39:e3:ce:ac:56:52:57:52:39:a1:f5:83:20:37:e9:
a4:2a:d5:db:6f:89:d7:f1:f2:53:a1:44:b5:cf:b6:d6:99:f8:
64:70:6d:2c:4a:68:13:67:8f:6b:0b:4b:10:4a:12:f2:11:7f:
2e:94:88:ab:cd:7f:10:50:50:b6:e1:e7:7e:c4:9d:f2:f0:ca:
4d:c2:80:56:9d:a8:27:67:75:22:fe:5f:06:d0:ba:c1:c2:3e:
16:91:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:04 2023 by rpki-client on console.sobornost.net