Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a27d2497-2f95-43a8-9414-4965ac15b38b.roa
File: a27d2497-2f95-43a8-9414-4965ac15b38b.roa (raw, json)
Hash identifier: UlFpBoRRQhUhog7zPsCsWHxVReLOSXM6R8VHgXbkbdo=
Subject key identifier: E1:E6:17:46:C5:AB:CF:9D:51:40:21:E7:A9:BF:5C:BA:46:7A:5D:5F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5C0340743A237DAD5CFA5A5BA648E7FE17AAFAAD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a27d2497-2f95-43a8-9414-4965ac15b38b.roa
Signing time: Tue 24 Oct 2023 00:00:00 +0000
ROA not before: Tue 24 Oct 2023 00:00:00 +0000
ROA not after: Tue 28 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:03:40:74:3a:23:7d:ad:5c:fa:5a:5b:a6:48:e7:fe:17:aa:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 24 00:00:00 2023 GMT
Not After : Nov 28 23:59:59 2023 GMT
Subject: serialNumber=00323957b437d344c14833715c3678c69d3c66188008858c375d214d8151a63c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:68:5c:34:65:13:97:51:31:91:a7:d1:f3:
20:2c:41:0a:99:06:dd:7f:d0:da:42:07:e9:d0:fc:
a6:f8:d9:15:91:db:cd:f6:12:61:94:2e:88:c8:9d:
b8:1e:b4:9d:25:e8:fe:55:d9:a1:9f:82:1f:99:f7:
70:b1:b5:34:a9:f7:06:e5:eb:f8:be:6d:54:ae:03:
8c:19:f7:21:9e:e1:c8:9f:ab:5a:f1:de:37:bc:00:
70:7e:49:e4:c8:4f:04:9d:af:4a:5f:64:ec:b9:07:
4c:57:80:f1:df:f0:ce:67:18:47:84:3e:a2:da:26:
e9:8a:ac:75:ec:b2:4b:75:5f:dc:20:62:f9:3e:be:
4c:ea:de:af:f1:6e:82:c9:0b:22:c2:d5:7d:5e:68:
6f:3e:e8:18:94:ee:53:36:1f:94:54:1d:68:91:21:
cd:a8:ea:94:27:ef:27:85:32:09:9b:a5:1b:0f:0a:
8c:4f:1d:c7:df:ce:d1:0a:88:65:b8:1e:86:b2:79:
99:f0:26:09:99:96:f5:24:c8:c9:23:40:78:31:22:
7c:aa:04:fb:dd:51:ba:ed:bf:f9:90:66:d5:3b:46:
bc:07:c8:0d:e8:8f:61:cd:52:6b:84:6a:c6:b1:0a:
15:ee:5f:50:67:dd:c2:fb:a3:7e:9d:d1:46:4d:33:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:17:46:C5:AB:CF:9D:51:40:21:E7:A9:BF:5C:BA:46:7A:5D:5F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a27d2497-2f95-43a8-9414-4965ac15b38b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:20:4d:65:b4:04:ab:48:f4:92:27:56:b2:93:8c:e8:ce:dd:
22:ef:ed:9b:6e:de:9d:9c:e2:58:55:b7:20:39:57:94:10:a8:
3c:44:6b:0c:b3:6f:c0:be:c6:67:c7:da:f0:15:f3:58:ac:4a:
eb:00:b1:11:73:a7:b7:15:c9:a6:e8:25:40:ac:0f:cd:d4:c1:
39:89:08:9f:57:43:76:2b:07:fc:e3:59:73:5e:e9:84:98:09:
1f:ab:d8:a0:29:2f:f2:ba:c4:85:c4:73:ba:16:53:2b:e1:94:
d7:8f:34:8a:8f:ce:c2:dc:63:19:f6:44:b5:8b:60:f8:7b:e6:
e9:ff:3f:8e:f1:6d:32:27:29:22:4e:7b:d4:2a:52:87:6b:68:
f0:de:14:34:9f:39:26:90:32:1d:44:78:ac:27:4e:af:2d:b7:
ae:91:d8:0d:c2:a6:99:f6:15:d1:78:72:e4:ec:69:42:1e:0e:
0d:02:40:df:bf:1e:7c:87:32:70:40:b0:00:cf:69:41:63:78:
73:b9:6b:dc:8c:c9:c4:78:cc:97:77:e8:4d:38:15:94:19:74:
5e:5a:58:d1:2d:7c:7c:09:ec:b9:c9:44:eb:03:3c:94:b2:98:
76:95:02:18:34:8d:0d:6b:d3:50:5b:fd:f1:86:26:0f:d6:1b:
a0:ff:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net