Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9eb24f06-3503-45a6-a9ae-8ea32e4370b8.roa
File: 9eb24f06-3503-45a6-a9ae-8ea32e4370b8.roa (raw, json)
Hash identifier: 2TdhbMfJm+5dk6DqSta2vmwPzrkthcC3fpz17CMighs=
Subject key identifier: 7B:18:D4:07:F3:79:E7:62:20:D4:05:DC:DC:1F:6C:1A:B0:4C:95:5F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 19D64119D18B8823B4A0B195106A4802F0F35566
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9eb24f06-3503-45a6-a9ae-8ea32e4370b8.roa
Signing time: Thu 06 Jul 2023 00:00:00 +0000
ROA not before: Thu 06 Jul 2023 00:00:00 +0000
ROA not after: Thu 10 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d6:41:19:d1:8b:88:23:b4:a0:b1:95:10:6a:48:02:f0:f3:55:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 6 00:00:00 2023 GMT
Not After : Aug 10 23:59:59 2023 GMT
Subject: serialNumber=87efeefc1f99489336f40994af4c9ff85be4771a4b9a50091452b590c84df583, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:48:5b:a5:2f:92:5e:74:3f:7c:3a:34:41:
61:50:27:f9:99:a5:8d:1e:9e:2d:8a:59:50:91:3b:
ca:3a:84:33:ef:f5:74:b7:11:83:2a:fd:8f:b2:6e:
09:84:15:df:ce:fd:88:9f:ee:03:84:73:7f:49:cc:
e9:37:60:ee:1e:06:35:fe:bd:c4:5a:4c:62:b3:d1:
40:14:fd:e9:9a:bc:40:e7:38:5a:21:a1:62:15:bc:
d8:4e:be:c5:32:a6:85:6c:f9:72:6c:ec:58:ce:a8:
c6:db:c4:fd:8d:30:55:6d:60:b8:b4:c3:8d:d2:3b:
f9:b4:54:aa:bf:ba:a8:1e:f8:70:7f:78:86:e6:e7:
19:a1:f9:66:0c:76:7a:ef:85:ef:73:6c:c4:49:48:
bd:d7:67:46:be:16:71:6d:c0:72:08:11:c7:21:61:
b3:75:6e:07:15:92:b8:a6:50:b5:4b:25:a7:36:08:
40:c1:20:69:23:bf:0d:61:8d:55:0b:76:04:68:dd:
71:12:75:4c:96:61:6d:63:a1:a1:08:67:0d:6d:76:
b2:49:69:75:24:d6:de:d7:69:6d:9a:57:db:b2:a6:
f7:d2:6d:37:af:ce:bc:1e:90:e6:a3:88:c2:6f:74:
76:8c:7f:1f:f3:33:18:03:9f:45:91:69:c0:be:78:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:D4:07:F3:79:E7:62:20:D4:05:DC:DC:1F:6C:1A:B0:4C:95:5F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9eb24f06-3503-45a6-a9ae-8ea32e4370b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e1:39:4c:cc:70:89:7d:10:58:6f:c9:11:e0:4c:b0:40:ba:
fe:d3:7f:45:da:69:fe:e8:9a:94:64:38:45:d1:1c:bf:97:50:
2b:a3:88:92:43:cf:49:04:38:97:bf:1d:74:0d:1d:64:91:9b:
fd:01:ec:bc:55:13:a9:47:f6:17:ef:11:b3:d1:05:ec:29:b9:
f3:51:ce:59:22:e5:04:fb:f4:34:96:c4:4e:22:7e:59:17:99:
d2:16:e9:a8:33:70:27:a8:04:ff:3b:a7:0a:11:e6:46:0d:5d:
c9:34:8b:ee:3a:a0:d3:8b:08:f4:94:96:ea:36:88:f7:97:fa:
10:78:12:f7:09:c3:f4:0b:7b:48:eb:13:00:55:18:82:18:b1:
7e:cf:46:5a:2b:c8:d8:be:c1:2b:04:dc:5f:94:89:1f:f5:ef:
0e:c8:52:c9:94:3f:02:c2:88:fb:c5:a6:06:8f:c8:d4:7f:3e:
78:b2:71:33:d4:93:c2:52:ef:97:ae:be:a7:5c:be:39:00:92:
81:7a:bd:fb:0f:f8:2e:25:ff:d2:51:21:b5:7b:3a:90:5a:60:
f8:90:1f:a5:31:eb:6a:95:09:d6:eb:fe:da:e4:cd:e7:83:3c:
5b:38:f5:3e:46:4b:85:6b:45:05:eb:d9:83:62:07:03:a2:bc:
16:ba:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:06 2023 by rpki-client on console.sobornost.net