Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a258ce1d-9dc5-4d6a-8b23-1632daf2db80.roa
File: a258ce1d-9dc5-4d6a-8b23-1632daf2db80.roa (raw, json)
Hash identifier: BxjpYzB/1R+n63GLPQXGeczW9UOFAIpyCWXEpQRPGCU=
Subject key identifier: C9:13:4F:93:13:A6:83:CF:57:06:79:3D:5D:0C:9F:73:78:0D:24:95
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 26C5B0F5D7D31A3091EBDCCE8CCC515A1FD5C637
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a258ce1d-9dc5-4d6a-8b23-1632daf2db80.roa
Signing time: Mon 09 Oct 2023 00:00:00 +0000
ROA not before: Mon 09 Oct 2023 00:00:00 +0000
ROA not after: Mon 13 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c5:b0:f5:d7:d3:1a:30:91:eb:dc:ce:8c:cc:51:5a:1f:d5:c6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 9 00:00:00 2023 GMT
Not After : Nov 13 23:59:59 2023 GMT
Subject: serialNumber=24db2b1d6e01a83dad07476e6efbcceb3b15867a68cd43b32a6d876887bc0d23, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:9c:51:e7:84:a9:a0:e4:d2:11:9a:4e:a7:
47:5d:9d:12:5e:77:82:c8:cc:e6:9b:59:94:23:0f:
13:50:59:03:08:01:05:58:36:ce:40:45:cd:01:ec:
78:d1:a9:80:52:6e:e4:8b:bb:c1:d1:7e:b7:9b:07:
cf:1c:01:75:dc:ce:21:7b:69:b3:0d:ae:2c:3f:34:
17:27:0e:4b:9c:90:f7:97:fe:84:69:23:7f:eb:87:
83:38:47:ae:3e:d0:38:a9:6b:1f:40:70:ef:bb:0b:
8c:38:08:87:ab:fd:fa:1d:ac:a0:81:db:65:03:a4:
9c:28:22:49:09:dd:e4:23:c8:4c:5f:9a:fb:ba:4a:
01:9e:6f:ca:44:99:9b:49:94:94:5f:c5:06:31:e9:
48:a0:8d:34:c1:63:85:08:90:32:11:10:74:da:2b:
c4:93:e2:7a:9d:6c:06:aa:d4:6e:a5:23:04:db:2b:
c4:6e:36:f5:be:bf:97:77:ea:eb:de:f4:7c:a0:21:
39:98:60:34:22:5e:4b:8b:06:38:6b:b7:ce:03:da:
e1:35:41:5d:28:f9:61:15:c6:11:dd:66:b7:e0:e5:
ed:91:e2:c0:57:fa:a6:fc:fb:42:6a:04:c6:a6:74:
25:bb:03:71:4b:8f:b9:d8:57:9c:d1:4e:50:5a:1d:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:4F:93:13:A6:83:CF:57:06:79:3D:5D:0C:9F:73:78:0D:24:95
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a258ce1d-9dc5-4d6a-8b23-1632daf2db80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bc:98:01:8d:a0:35:7d:d8:0c:f8:df:b4:e4:26:e9:59:7c:
a9:5d:da:56:90:cc:8a:2b:dd:eb:7f:81:1d:8a:f2:ea:2a:d4:
c5:7d:b5:a0:5d:57:f7:3c:1c:bf:d2:13:35:48:e4:24:d3:3d:
07:d6:10:30:cf:c3:3e:f6:56:d4:22:fa:60:e8:1e:41:53:ce:
3e:4b:e1:70:51:3d:28:2a:6d:c9:49:70:2b:ba:5a:cc:c6:ef:
80:e0:8b:12:6e:01:73:aa:46:be:25:b8:2a:a3:b5:9d:f4:b4:
c0:e7:8b:28:5f:b5:53:a6:b8:4f:d2:22:9b:ee:de:00:fc:83:
b9:77:f2:53:20:1a:2b:e3:ea:a2:a8:5d:8e:73:eb:e4:07:44:
a8:44:0a:e7:93:89:c2:51:24:72:6f:2a:ce:2a:56:8b:62:cd:
a5:10:b2:ef:1d:de:20:6e:c1:56:0c:cc:11:fb:2b:09:32:6c:
18:31:e1:8d:a1:eb:b0:da:07:3f:80:69:10:74:8a:4f:5f:21:
01:f6:e1:3a:9b:93:07:91:54:08:cd:c1:9e:fd:23:bd:a8:b0:
7e:00:3d:8d:f9:ad:f0:b2:3d:8f:60:ce:d6:47:31:ab:a7:7a:
16:b6:53:79:7f:fd:28:3b:f0:e0:5d:57:a2:79:45:c0:68:c7:
73:bd:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net