Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4122821-a94e-46fc-bc72-f64d36149a4a.roa
File: b4122821-a94e-46fc-bc72-f64d36149a4a.roa (raw, json)
Hash identifier: v8wW4Rag4ouUTrVwNpIG2xkwdGHV3ZMVpjd+wtd98F0=
Subject key identifier: B2:1B:47:11:3A:18:34:17:F9:5E:DE:AA:5A:8E:A0:51:22:F3:75:27
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6349B60AD11E0B19D81556012476E775D9D2929B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4122821-a94e-46fc-bc72-f64d36149a4a.roa
Signing time: Mon 20 Nov 2023 00:00:00 +0000
ROA not before: Mon 20 Nov 2023 00:00:00 +0000
ROA not after: Mon 25 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:49:b6:0a:d1:1e:0b:19:d8:15:56:01:24:76:e7:75:d9:d2:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 20 00:00:00 2023 GMT
Not After : Dec 25 23:59:59 2023 GMT
Subject: serialNumber=d9b82c4005c1dd7a97dbce49de047fbb71645be9768e7b28f5b8234a0584da8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:48:e2:77:a8:45:2f:8e:c1:62:5b:ca:1e:
8b:70:7e:a7:d3:ad:5f:23:e9:8f:de:4e:c4:00:b0:
42:c1:21:46:80:d5:b3:4d:65:3b:20:35:02:06:8d:
0b:74:f6:9f:ab:43:f5:29:fc:8f:ac:e0:4f:2f:da:
3c:95:01:f7:14:1c:4e:d0:0f:16:12:80:f3:75:8c:
b0:21:fe:b7:e4:5b:63:f4:42:00:28:b3:c5:cd:1d:
54:e1:70:53:fb:b8:4f:71:a5:6c:86:b0:ea:5c:08:
2e:f6:c9:65:bd:9c:46:62:6b:8b:d6:4b:83:86:ff:
67:f8:9c:9f:1e:77:88:d9:d1:dc:fd:6f:fb:99:94:
04:2e:1b:d0:95:3d:75:64:cd:85:40:e4:e5:d6:de:
b8:d5:5d:b5:d9:fe:e6:25:97:2d:45:6d:93:a5:ea:
c4:74:5a:2a:86:5e:80:31:88:ea:30:22:67:7b:d3:
f9:9f:92:a6:84:fe:6c:09:b1:c4:c4:a8:40:87:e6:
13:39:8b:43:3e:fc:54:d1:ec:7d:16:dd:f0:f1:37:
51:70:49:16:e0:24:ae:9c:2e:9d:a9:9a:11:9f:a2:
86:40:bf:91:45:c4:5e:42:e8:3c:00:76:b6:aa:a6:
fe:f0:95:fc:78:a5:49:d3:ad:b5:77:b0:a3:4f:d3:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:47:11:3A:18:34:17:F9:5E:DE:AA:5A:8E:A0:51:22:F3:75:27
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4122821-a94e-46fc-bc72-f64d36149a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:da:5c:08:f9:99:1d:30:e6:a3:14:ba:37:e6:82:5e:b9:ec:
52:54:51:9f:4c:8b:00:a1:0b:44:fd:18:2e:53:da:18:55:dd:
b8:63:ac:11:ab:59:3e:3d:5c:36:93:22:ef:27:45:75:0c:8b:
b5:18:e9:83:51:f3:33:b4:74:7f:b1:35:e9:bd:35:8b:ac:2f:
b8:70:bc:17:aa:a1:be:57:ce:43:77:40:80:c2:c7:f0:57:d3:
ae:da:2a:3b:b7:f3:77:f6:87:22:44:cb:4a:f4:62:66:7c:20:
36:32:67:3d:c8:7b:d4:7b:e7:2c:9c:40:4a:6b:74:d0:18:16:
78:e1:af:65:d8:3d:9a:be:85:4b:4c:9e:53:b5:ae:7b:de:07:
5c:5a:bb:31:9a:fb:55:87:50:e2:8d:12:a9:57:fe:2a:9a:3b:
0c:4c:d0:b0:ea:bf:af:03:8d:7f:47:b7:f5:a4:10:e2:ea:cc:
30:9d:e8:77:06:81:6f:e3:17:85:cd:c4:f7:aa:45:c4:b2:8c:
a6:65:51:23:42:b3:96:85:4d:ff:bb:0a:79:2e:33:17:36:30:
50:40:1a:6b:1a:b6:75:10:7f:4d:d4:66:28:ed:9b:ad:35:de:
fe:1f:a9:b2:7c:66:f6:62:9e:b5:9c:e4:d8:ca:ca:62:96:58:
ac:11:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net