Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ada51c72-a054-41d3-a405-bb71236970e3.roa
File: ada51c72-a054-41d3-a405-bb71236970e3.roa (raw, json)
Hash identifier: aXaQcwcgzi2s1VsLP3ZCYOKyWtrZMs6dw/vEMXLQp2k=
Subject key identifier: 4D:E9:F8:27:C1:80:CD:B7:1E:4D:2C:74:9A:E0:DB:C7:3F:62:8B:72
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 60060B33EC7BC3B90F26B5F858C1C56577006CE2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ada51c72-a054-41d3-a405-bb71236970e3.roa
Signing time: Sat 02 Sep 2023 00:00:00 +0000
ROA not before: Sat 02 Sep 2023 00:00:00 +0000
ROA not after: Sat 07 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:06:0b:33:ec:7b:c3:b9:0f:26:b5:f8:58:c1:c5:65:77:00:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 2 00:00:00 2023 GMT
Not After : Oct 7 23:59:59 2023 GMT
Subject: serialNumber=eb10ecfcc4c7264ef269d99e8ae15b9b5d2fe28b9ef9a63277dc76364581333f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:46:89:7e:2a:37:88:ce:26:bd:7e:47:3f:
b2:70:8c:fd:73:fb:38:5a:9d:2a:2d:60:6c:c0:80:
4a:ea:e1:30:37:e7:8d:bf:53:7e:dc:69:09:9f:78:
01:f4:4e:0c:c3:72:f9:99:b6:d0:6b:ad:d0:4d:d0:
aa:2d:18:01:34:8e:2e:ab:c8:83:e4:f8:02:af:de:
6c:60:d2:b7:0f:27:54:9b:09:78:51:5f:8f:93:dd:
6f:a6:73:38:7e:02:62:cf:14:3b:c9:79:71:62:8f:
db:97:77:84:d4:9b:05:f8:4d:9d:f8:ec:ae:a6:3b:
2a:9f:ce:67:b1:80:df:e6:98:3f:a9:77:c8:06:1f:
c0:7d:77:4f:fe:85:ed:ae:2d:1d:ad:97:b3:82:d2:
13:bc:51:2c:d0:da:01:3a:3d:6c:96:ac:59:d2:bc:
a4:fb:66:c2:48:a8:54:4e:d9:df:11:ab:f9:2c:8c:
b8:91:4e:68:0e:e9:6f:d5:82:b6:34:9a:03:f5:fc:
ac:a7:0b:cb:67:79:ef:12:60:19:19:82:aa:89:d6:
0a:5b:74:8e:3a:be:bc:52:9c:6e:b3:36:ef:64:3a:
2b:0e:51:05:a2:70:cd:17:94:66:c8:04:d2:a4:38:
f8:bc:57:91:bb:89:4b:74:f7:f0:03:b0:70:c9:38:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:F8:27:C1:80:CD:B7:1E:4D:2C:74:9A:E0:DB:C7:3F:62:8B:72
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ada51c72-a054-41d3-a405-bb71236970e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
91:76:68:03:8f:c8:ef:3b:be:c6:c6:53:3b:b0:dc:0f:1d:42:
20:e7:44:0c:ce:0f:6f:62:f3:01:5b:05:d2:16:f0:25:f6:fd:
77:a5:2b:91:66:37:fe:bb:e3:bb:9d:9c:f5:80:93:e4:49:0a:
dc:31:90:21:f9:0f:12:ff:c5:ad:33:76:b2:5f:6d:75:d3:70:
da:d0:f9:6b:c1:d3:50:3b:38:35:5b:f3:09:02:a5:4e:12:65:
32:98:7c:95:a7:72:5a:8b:d3:1b:4a:52:88:ae:5a:e2:c2:d6:
63:d7:58:ff:1a:9f:3e:e7:ac:54:7a:94:69:cf:29:47:6f:7a:
16:44:cf:b5:bb:60:82:85:59:d9:e2:42:43:c9:5a:01:c0:ad:
ae:85:e7:ed:88:88:59:b4:b0:dc:04:e4:b2:60:ac:e3:c0:d9:
2d:41:e7:fe:4f:bf:33:44:3f:55:a7:18:4e:84:f1:91:59:98:
d5:7c:47:5e:7c:c7:bb:b3:6c:d7:bd:69:4c:25:b4:96:9d:86:
bc:ba:e0:c3:c1:46:90:3a:56:2e:fe:2e:18:71:a2:d1:ce:e0:
a0:87:dc:73:77:ed:52:18:78:0a:97:9f:5d:21:37:46:cf:5c:
ce:86:26:66:ae:01:4f:38:aa:22:4d:fe:58:93:74:9b:12:fe:
21:68:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:09 2023 by rpki-client on console.sobornost.net