Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b2f1bda9-9252-4490-8fbc-562d077e596e.roa
File: b2f1bda9-9252-4490-8fbc-562d077e596e.roa (raw, json)
Hash identifier: +bZLavsDZx8RnrKdSejH+0IqOTpGfUCfPNI0GEfL494=
Subject key identifier: F2:0E:B5:E1:9D:6F:07:18:9A:8F:5B:AE:96:C6:76:A1:EB:7C:D1:B7
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 229F0A05EA4713867270D96F6366CCC7216A873C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b2f1bda9-9252-4490-8fbc-562d077e596e.roa
Signing time: Tue 03 Oct 2023 00:00:00 +0000
ROA not before: Tue 03 Oct 2023 00:00:00 +0000
ROA not after: Tue 07 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9f:0a:05:ea:47:13:86:72:70:d9:6f:63:66:cc:c7:21:6a:87:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2023 GMT
Not After : Nov 7 23:59:59 2023 GMT
Subject: serialNumber=544c93186862b39b02b4fe64a717de69a30a344a7c7a0033cb4377bb83344c79, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:5b:30:07:86:a8:2f:41:43:c5:c8:3f:24:
0b:00:04:1f:02:f0:b8:71:fa:ec:36:d0:5f:68:1a:
3a:3d:01:69:61:cf:6b:b6:19:fb:36:76:6a:fc:eb:
3f:e8:78:69:b3:82:5d:9d:b0:90:77:37:7d:49:c6:
4a:7a:a5:ad:ce:ad:31:34:bd:4f:a1:cc:b3:f1:1f:
8a:b6:44:c5:59:8b:38:44:e6:65:d3:eb:cd:2d:40:
b4:fe:ae:32:ae:57:b9:79:b9:e4:76:4b:fb:bb:b1:
d7:85:d8:e0:a5:88:7b:34:c8:c3:b9:fc:eb:9c:b8:
1f:48:3c:80:cc:31:2d:51:32:1d:af:42:7c:79:2b:
f5:b1:61:fe:d0:fb:87:fd:87:e5:ad:4e:85:7d:a6:
50:61:79:5f:b2:92:60:1b:26:d8:01:6d:cc:be:02:
fa:43:43:d9:be:83:dc:64:c6:9a:86:04:d5:97:5b:
0f:53:68:0c:f9:54:89:e7:73:68:50:04:d9:6c:f0:
51:e6:87:59:f9:50:e3:5f:50:a0:93:af:1d:23:eb:
ea:97:1a:6c:16:f8:b3:ec:f3:44:6d:60:e4:75:10:
6b:3a:64:35:51:00:10:92:ba:f1:66:d1:07:87:ed:
28:94:cf:b4:5a:c2:17:0e:80:5e:1f:a4:ec:c4:4b:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:B5:E1:9D:6F:07:18:9A:8F:5B:AE:96:C6:76:A1:EB:7C:D1:B7
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b2f1bda9-9252-4490-8fbc-562d077e596e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:12:34:d0:48:0c:7c:24:ac:c6:03:10:75:c1:a4:83:d8:b0:
14:c3:2d:a9:c2:12:07:04:dd:37:9a:e1:79:2c:8f:74:a5:ab:
db:07:55:60:1e:39:8b:41:b3:78:f2:61:6a:2b:15:1b:c1:24:
21:da:a3:b0:0c:04:b8:be:27:91:62:10:7e:b1:38:be:b1:f2:
28:b7:ae:50:31:6a:38:59:37:25:68:89:c9:f5:ce:e3:e9:cf:
de:2b:38:a1:12:e0:e6:5e:fc:00:90:5a:d2:59:e3:93:1d:7b:
61:6f:d4:4c:e4:9d:18:f6:4a:c2:f9:ee:b1:15:ad:6b:0a:ee:
28:92:35:ea:b5:9d:b8:bc:3e:cf:48:a5:48:c5:35:2a:3a:32:
fd:f1:d4:81:f7:c6:3a:5f:c0:1c:13:36:d3:0f:df:81:67:7c:
d5:62:12:6b:eb:44:1c:e3:f3:8e:a7:fa:9a:22:fa:48:9a:a5:
0a:50:b0:c9:09:73:73:b2:03:01:09:c4:67:84:4e:a8:5d:0f:
c5:a7:20:6d:c2:c5:51:be:60:df:84:76:69:ab:42:6e:72:08:
23:95:b2:fe:cf:fb:5d:16:35:9b:84:f8:c6:f8:1b:53:a0:67:
69:67:e5:1f:25:3a:3b:5c:69:d3:6c:3f:42:6a:e3:9f:49:fa:
b6:d8:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net