Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b15d0961-69b8-4a96-97ef-57b70c25a22d.roa
File: b15d0961-69b8-4a96-97ef-57b70c25a22d.roa (raw, json)
Hash identifier: CWS4TWhVja0o6jEWLD5zTAXReIZHXjeFA4f0+p9Mqb8=
Subject key identifier: 4D:C0:0A:4F:36:D0:7D:0D:DE:96:73:56:46:76:DF:90:A0:9C:50:70
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 332183E60610AE052DC95C58B76762E1CA95CB1A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b15d0961-69b8-4a96-97ef-57b70c25a22d.roa
Signing time: Mon 25 Sep 2023 00:00:00 +0000
ROA not before: Mon 25 Sep 2023 00:00:00 +0000
ROA not after: Mon 30 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:21:83:e6:06:10:ae:05:2d:c9:5c:58:b7:67:62:e1:ca:95:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 25 00:00:00 2023 GMT
Not After : Oct 30 23:59:59 2023 GMT
Subject: serialNumber=2fd0e5876b04e6b6f5ec07f5e8063b0d66cc6e6c391338d1df5a5b72c033743f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:37:2d:e8:03:ab:71:63:b9:86:d0:0a:c7:
d3:6a:67:d9:13:8f:0f:38:17:00:f0:95:70:2c:be:
be:78:60:c7:fd:6d:4c:52:6c:18:72:6d:a1:bd:fe:
51:50:81:0b:2d:54:41:21:03:db:ed:72:47:54:bf:
19:ec:44:7a:ef:1c:cd:62:1f:75:5c:1f:53:2a:28:
7a:32:8e:6f:e3:4a:d8:f6:9b:3c:e2:2d:65:71:d3:
b0:24:bc:be:bf:ce:77:03:60:4c:01:26:5f:f9:d4:
9b:e3:c9:c3:ab:cd:47:2f:3d:b5:79:6e:95:d1:ee:
51:bd:ea:22:30:40:e0:87:48:67:fc:df:70:93:32:
ec:20:51:98:6f:7a:63:d7:26:3c:63:b8:3b:17:1b:
1e:4b:18:b1:9d:39:6f:4b:7a:f4:77:27:cc:2c:a3:
55:61:62:82:40:4f:9e:ac:5d:14:da:e7:2e:1c:2f:
da:e7:8e:43:d5:00:ce:45:70:69:53:95:9d:ff:d1:
18:35:b6:e8:a9:0c:ae:86:a1:ce:52:c6:6f:2b:a4:
1c:b5:2e:cb:ae:5b:c2:41:9e:b8:e2:4e:8f:b1:3a:
19:6b:3e:ef:59:68:4c:64:10:74:6b:9d:0c:80:da:
3a:16:05:af:a4:cd:92:4f:1f:1d:36:3a:14:e2:b6:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C0:0A:4F:36:D0:7D:0D:DE:96:73:56:46:76:DF:90:A0:9C:50:70
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b15d0961-69b8-4a96-97ef-57b70c25a22d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:76:16:ef:08:6b:61:28:b8:41:97:e3:71:39:73:7b:af:9c:
47:2d:dd:32:a1:26:96:92:64:f6:e9:44:3b:34:e8:c6:09:23:
be:e6:b2:7f:71:06:c9:90:72:10:b5:66:51:11:25:4f:22:67:
2e:8d:d7:5c:fa:71:82:4a:b0:ee:64:e0:ef:3e:71:a6:8b:9a:
20:61:1c:5c:ef:9a:95:60:61:34:9f:6c:6b:85:4e:f6:00:9c:
01:2e:2e:d9:45:77:b0:89:57:30:25:c6:92:b2:99:25:d1:25:
b8:91:5b:bd:d6:e8:31:22:01:78:e0:fe:b9:f9:a1:7c:e3:4d:
5c:e0:5b:52:19:8b:16:c3:37:f1:54:b3:0a:48:de:13:15:dc:
97:1d:88:22:09:5a:04:96:a2:46:be:b1:bd:99:3d:72:89:7e:
35:10:7a:2c:c8:14:13:ed:49:5b:0f:b1:60:68:5d:be:48:46:
4b:fe:26:16:45:8a:53:8b:8e:c8:35:f3:02:4e:a6:83:dc:3a:
06:ad:bf:47:e8:7f:b7:28:8f:4a:12:d3:fd:8e:b7:0f:a8:e4:
23:76:1a:09:b1:36:2a:f3:7e:a9:10:a8:18:ae:d4:22:f7:ed:
1b:f2:0b:33:6a:02:2d:88:28:fe:de:7d:d2:53:04:bb:70:21:
20:ea:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:09 2023 by rpki-client on console.sobornost.net