Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4fe2f0e-2c4a-4ac3-87f9-263f7d573f10.roa
File: a4fe2f0e-2c4a-4ac3-87f9-263f7d573f10.roa (raw, json)
Hash identifier: Q7j7MsqptHW4PWTSqjqCJGlG96cHSYQkzwwsvDlbBdQ=
Subject key identifier: 1D:B5:21:71:0C:7F:4C:CD:EF:77:90:37:70:C0:27:06:8F:51:4F:80
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 341C5BD1BD272D35AFAD5B808BBB01342249B198
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4fe2f0e-2c4a-4ac3-87f9-263f7d573f10.roa
Signing time: Mon 13 Nov 2023 00:00:00 +0000
ROA not before: Mon 13 Nov 2023 00:00:00 +0000
ROA not after: Mon 18 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1c:5b:d1:bd:27:2d:35:af:ad:5b:80:8b:bb:01:34:22:49:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 13 00:00:00 2023 GMT
Not After : Dec 18 23:59:59 2023 GMT
Subject: serialNumber=ea85f421928dd3456f019859c8adfb4deb4b724661733d55c92d8c6eddfb6b63, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:d4:a9:bc:71:0c:85:05:1e:1f:11:3c:d4:
41:81:f3:98:29:dd:c4:60:fb:17:e5:96:23:46:df:
bf:b6:d2:f7:ca:e8:ee:56:83:eb:a9:48:30:87:70:
3d:41:1f:04:4a:e7:20:a4:05:14:d4:da:48:08:33:
5b:99:96:03:4a:1f:7e:9f:c8:da:1a:e2:87:c9:a2:
91:8e:74:94:db:e3:44:39:00:b7:60:50:f5:3c:f4:
6a:7c:f3:16:7b:99:76:78:4d:57:57:15:d2:f8:85:
11:bc:d1:69:01:98:83:88:a6:f7:f8:fd:58:33:32:
96:89:25:0c:c8:fe:38:93:d1:7c:ec:25:36:c4:77:
3f:2d:0f:a0:29:1b:c8:dd:16:7d:70:f7:46:57:42:
68:63:55:74:d3:fd:fe:de:4f:89:e0:60:00:88:fa:
ef:18:02:69:b5:94:a2:47:22:3c:54:a5:91:7e:1d:
2a:1b:aa:54:b5:96:d8:04:a8:79:07:a1:c5:63:77:
3c:96:5e:dc:2b:8d:82:da:d8:d9:82:77:e3:b4:00:
82:7a:8c:30:64:33:43:bf:66:ce:c0:cb:52:47:3d:
9e:0e:5d:fc:d1:18:2a:8e:d1:5b:4e:7f:c9:d1:47:
c6:24:66:e3:ba:08:2a:65:78:a4:2b:2c:8c:08:a3:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:21:71:0C:7F:4C:CD:EF:77:90:37:70:C0:27:06:8F:51:4F:80
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a4fe2f0e-2c4a-4ac3-87f9-263f7d573f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e2:0a:74:2d:95:b5:12:24:5d:11:05:74:fb:01:68:f8:69:
66:b9:06:a7:d9:af:ab:ea:a0:25:f3:cb:d9:c5:e9:a1:26:d3:
8d:46:44:e8:a1:5f:da:29:40:04:da:9d:e9:69:3b:42:97:51:
1e:40:1e:2d:98:a3:e1:ed:ba:27:35:4b:45:e1:9c:5a:98:6c:
5d:90:a8:a6:97:6a:98:e6:d9:06:62:1b:ea:33:89:ba:33:c2:
25:de:97:71:e8:1f:34:ca:72:18:f6:a8:80:3e:83:5d:dc:81:
28:23:b3:8d:d4:1a:63:9a:34:45:43:b5:b8:0e:a5:87:95:43:
5b:cf:b5:80:1d:6a:73:46:56:67:f5:d4:99:22:15:5a:3e:e5:
72:8c:88:de:af:88:51:7c:da:b5:c7:94:c4:c0:54:2e:85:42:
09:27:e2:97:e6:67:e6:0f:09:a7:19:8a:a3:7d:0b:6b:38:77:
62:46:55:49:a5:e9:13:68:e4:28:af:72:80:8c:10:1e:0b:50:
cf:5a:4e:a9:8d:2c:19:7d:ff:db:85:a0:70:b6:07:e6:1e:ec:
46:20:e2:c6:58:19:59:9a:94:e9:6c:80:7b:d8:5e:28:b2:7c:
11:49:ed:36:4d:60:5d:79:f7:6c:82:e5:3d:c0:18:d6:df:f5:
bd:d0:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net