Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9d00b87-7917-41f0-9e21-140c0466ba8e.roa
File: a9d00b87-7917-41f0-9e21-140c0466ba8e.roa (raw, json)
Hash identifier: 6N/aVvAqIJT6iMh30UXm81SmFBHzTN9D2YYYo0v4QJc=
Subject key identifier: 43:FE:A1:09:EA:AD:D8:84:5C:CF:CD:B1:61:47:48:9E:63:D8:C9:96
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3FAA1E5A40342CFB4D66EE24D8730CAC76B43EDA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9d00b87-7917-41f0-9e21-140c0466ba8e.roa
Signing time: Fri 20 Oct 2023 00:00:00 +0000
ROA not before: Fri 20 Oct 2023 00:00:00 +0000
ROA not after: Fri 24 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:aa:1e:5a:40:34:2c:fb:4d:66:ee:24:d8:73:0c:ac:76:b4:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 20 00:00:00 2023 GMT
Not After : Nov 24 23:59:59 2023 GMT
Subject: serialNumber=aa3720be7429be19c5846e3166173e5cd4ae01076ef4b6359329d6b50a6ee783, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:2a:1f:ba:e9:d1:fd:5d:24:af:75:83:d8:
33:9e:5c:be:68:62:7b:84:0c:47:e9:38:5e:6d:0d:
21:d1:17:9a:d8:63:a6:80:69:61:13:fe:de:70:7f:
46:85:0b:db:b5:29:01:22:51:9f:fd:05:05:e4:65:
c8:6f:fe:b8:da:7b:e3:f1:fd:0b:be:74:95:29:03:
87:b0:ef:8c:bf:d9:b5:21:88:28:dd:3f:88:63:aa:
49:8a:8a:c8:20:9c:f5:51:6d:01:1a:3f:c8:05:d9:
d4:ef:85:51:29:5f:15:d3:1a:ce:2d:5e:a0:12:15:
ee:22:b3:11:c4:e4:8d:48:2f:ed:a2:80:13:20:ce:
e5:34:81:ce:2f:5d:fd:f8:59:5b:b8:20:fc:44:73:
da:59:ad:b6:17:81:38:88:f3:1c:ed:3a:81:12:75:
7c:34:1d:0a:fe:f7:f7:fa:d4:fa:78:26:1e:07:22:
33:14:51:d3:83:ef:ce:a1:93:b0:a9:37:0f:fa:d3:
05:fa:ab:69:df:86:83:6c:1a:96:b0:8a:d7:95:82:
83:7c:76:ca:0a:4b:81:e9:b2:35:0b:b1:36:65:09:
62:6b:af:be:e2:da:12:20:d7:de:c0:e1:34:d2:56:
c5:71:1c:80:30:bc:07:b9:30:63:07:05:da:6f:03:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:A1:09:EA:AD:D8:84:5C:CF:CD:B1:61:47:48:9E:63:D8:C9:96
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a9d00b87-7917-41f0-9e21-140c0466ba8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:aa:de:1d:f8:ff:e6:cf:bf:5f:51:d2:92:07:ed:25:bb:4c:
c2:f7:3c:ee:47:b6:7b:00:3f:23:b9:30:c4:e9:12:78:57:90:
29:cd:c2:01:5a:4b:2a:21:da:ad:5d:e8:6f:a4:c0:73:6c:ee:
b0:38:68:e8:90:67:96:c4:ab:fa:68:52:e2:60:6b:a7:8f:2f:
2f:e5:13:c1:9f:e7:c1:7a:40:53:07:3e:86:a1:90:f2:ec:a0:
5f:b8:74:80:cb:84:94:e2:df:3d:6f:21:74:ea:f2:a8:80:60:
38:0a:98:fe:a4:b9:56:13:56:2e:1e:47:61:9a:d4:ba:86:42:
e3:78:4f:e8:7e:e8:c9:ec:2a:25:b4:51:f8:14:b4:89:4f:d9:
39:c2:65:ee:13:15:68:a6:d7:a0:cb:41:5a:31:32:bb:38:29:
21:ab:27:71:02:3d:7c:1b:98:86:cc:cd:6f:04:58:04:ab:76:
47:0a:64:ce:b0:98:7d:58:ad:1e:c8:d9:95:f2:50:ca:54:ba:
72:19:72:a8:4f:c8:58:bd:d8:19:68:78:06:dc:44:0d:24:ac:
f5:d5:21:be:8e:10:7d:7a:13:5a:0a:7f:d9:52:02:a2:ad:31:
4e:4a:ba:db:eb:b7:34:fb:8c:cb:cd:8a:f2:41:dc:8c:f0:fd:
47:a3:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net