Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8d75e53-8301-45a9-84b5-48d08fb08166.roa
File: a8d75e53-8301-45a9-84b5-48d08fb08166.roa (raw, json)
Hash identifier: EbOBWCg9gzppGF/DICulsGelLOX2kDVxPYztbRWQZHE=
Subject key identifier: 9C:05:2D:63:11:C9:B9:D7:68:AE:6C:9C:02:51:BB:65:0C:EF:E2:1D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 73F206A31159FAE3D6DD36BBC10A9E85F5FEB234
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8d75e53-8301-45a9-84b5-48d08fb08166.roa
Signing time: Fri 21 Jul 2023 00:00:00 +0000
ROA not before: Fri 21 Jul 2023 00:00:00 +0000
ROA not after: Fri 25 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f2:06:a3:11:59:fa:e3:d6:dd:36:bb:c1:0a:9e:85:f5:fe:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 21 00:00:00 2023 GMT
Not After : Aug 25 23:59:59 2023 GMT
Subject: serialNumber=694e3fc824a5d74cf31f94bd106ec0259100bbe041b4ef2663ce7bfdb837decd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:db:6d:5d:23:fe:3d:8f:63:c3:5e:77:e9:
0c:de:48:6b:85:2f:2e:22:5b:80:3a:bb:55:47:ee:
90:f5:2a:c6:7c:21:0b:9c:d5:c4:57:35:a3:1d:ad:
ce:62:e0:f3:20:f8:ad:a3:a4:58:67:67:c9:95:87:
98:90:4b:95:02:9b:a9:c4:41:8d:cf:5c:0b:ab:0a:
28:96:21:53:41:f0:f0:da:4a:f2:9a:eb:f4:bc:f6:
63:10:e3:07:94:b1:57:fe:7f:03:6b:1a:05:7b:2a:
d5:b7:08:b1:b6:36:04:7c:37:30:5d:68:3f:92:5b:
5a:98:bb:08:9e:5c:dd:19:49:9d:33:f1:a6:3b:cf:
9d:52:f9:98:00:0c:00:55:09:4c:9d:ec:83:0a:43:
a2:b9:1f:33:27:05:7d:bc:cb:2f:be:54:2f:26:17:
e5:ea:ce:45:78:4d:e7:42:86:b5:4f:5f:76:7f:bb:
9f:10:5f:63:2b:22:ff:86:d6:b2:06:4e:ef:fe:d8:
52:bf:27:a5:a8:4f:88:73:3a:be:b8:39:1d:b6:1b:
fc:01:9b:a8:a8:ab:48:2e:3b:06:52:9b:af:94:90:
d1:b3:99:e5:63:d8:a1:f9:df:7b:e6:79:1b:58:00:
a6:54:ae:69:ad:a4:7d:91:5f:1a:ae:6c:aa:60:7c:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:2D:63:11:C9:B9:D7:68:AE:6C:9C:02:51:BB:65:0C:EF:E2:1D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a8d75e53-8301-45a9-84b5-48d08fb08166.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6a:1c:2b:27:0f:b6:76:09:04:dc:38:b3:8c:54:96:70:0a:
fe:05:a1:90:fd:8d:dd:d4:6e:34:09:e1:18:b3:27:41:c9:1a:
81:d4:e2:8f:a1:9f:59:b6:4d:80:87:b5:5d:fc:b6:75:70:f0:
d9:fe:5a:d2:7a:79:b8:3b:e8:37:aa:36:fb:44:66:cb:ba:1e:
e9:ce:6b:69:40:42:3c:8a:81:ee:da:4f:d1:c3:24:5c:d9:eb:
4b:d8:6c:a9:f4:c7:ae:05:5d:9a:4f:34:79:3a:a9:45:66:ab:
d3:c3:26:79:7b:85:ed:bc:ef:97:0f:43:31:37:d4:28:3b:5d:
7b:d7:da:99:5d:04:82:aa:e0:b0:d1:9c:32:5b:d2:27:db:62:
84:16:88:b6:a3:34:90:f5:12:70:21:6f:19:4c:3e:1e:a5:f9:
55:8a:80:80:65:31:23:b9:f6:28:b6:af:1e:b7:b1:46:4e:90:
5d:6f:a6:02:e5:fc:44:92:8f:cc:d2:ee:81:74:2f:1a:e9:16:
d5:3a:04:77:8b:0e:15:a3:b6:fb:45:06:87:96:e3:de:e7:2b:
09:08:0c:0e:b3:04:08:8e:ad:41:14:1b:fb:bc:be:da:47:f1:
16:b6:16:12:1e:0d:8d:bb:4d:fa:91:07:72:d5:59:d0:53:c6:
ec:d7:fc:87
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc/IGoxFZ+uPW3Ta7wQqehfX+sjQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzIxMDAwMDAwWhcNMjMwODI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTRlM2ZjODI0YTVkNzRjZjMxZjk0YmQxMDZlYzAyNTkx
MDBiYmUwNDFiNGVmMjY2M2NlN2JmZGI4MzdkZWNkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxmdttXSP+PY9jw1536QzeSGuFLy4iW4A6u1VH7pD1KsZ8
IQuc1cRXNaMdrc5i4PMg+K2jpFhnZ8mVh5iQS5UCm6nEQY3PXAurCiiWIVNB8PDa
SvKa6/S89mMQ4weUsVf+fwNrGgV7KtW3CLG2NgR8NzBdaD+SW1qYuwieXN0ZSZ0z
8aY7z51S+ZgADABVCUyd7IMKQ6K5HzMnBX28yy++VC8mF+XqzkV4TedChrVPX3Z/
u58QX2MrIv+G1rIGTu/+2FK/J6WoT4hzOr64OR22G/wBm6ioq0guOwZSm6+UkNGz
meVj2KH533vmeRtYAKZUrmmtpH2RXxqubKpgfJVVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnAUtYxHJuddormycAlG7ZQzv4h0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2E4ZDc1ZTUzLTgzMDEtNDVhOS04NGI1LTQ4ZDA4ZmIwODE2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIhqHCsnD7Z2CQTcOLOMVJZwCv4F
oZD9jd3UbjQJ4RizJ0HJGoHU4o+hn1m2TYCHtV38tnVw8Nn+WtJ6ebg76DeqNvtE
Zsu6HunOa2lAQjyKge7aT9HDJFzZ60vYbKn0x64FXZpPNHk6qUVmq9PDJnl7he28
75cPQzE31Cg7XXvX2pldBIKq4LDRnDJb0ifbYoQWiLajNJD1EnAhbxlMPh6l+VWK
gIBlMSO59ii2rx63sUZOkF1vpgLl/ESSj8zS7oF0LxrpFtU6BHeLDhWjtvtFBoeW
497nKwkIDA6zBAiOrUEUG/u8vtpH8Ra2FhIeDY27TfqRB3LVWdBTxuzX/Ic=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net