Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b448fb94-02a2-4a0c-b2fa-933cf499770b.roa
File: b448fb94-02a2-4a0c-b2fa-933cf499770b.roa (raw, json)
Hash identifier: UpAJ3D3N2UplVqxqGTKm0smbalWIffUIj98+OyIYCdE=
Subject key identifier: 6A:C2:8A:65:7D:4C:40:DA:FA:95:2C:C2:87:8A:D1:B9:A6:CD:45:2C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1E6BC73F8212BAD516BFBC791C5A4D9B2840A7CA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b448fb94-02a2-4a0c-b2fa-933cf499770b.roa
Signing time: Mon 28 Aug 2023 00:00:00 +0000
ROA not before: Mon 28 Aug 2023 00:00:00 +0000
ROA not after: Mon 02 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6b:c7:3f:82:12:ba:d5:16:bf:bc:79:1c:5a:4d:9b:28:40:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 28 00:00:00 2023 GMT
Not After : Oct 2 23:59:59 2023 GMT
Subject: serialNumber=26429c0638073ef876ec0233788963c31b41935240dda06f90e29992d7a0831f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:02:cf:25:e3:19:48:10:ab:c1:ab:05:5c:
3a:54:c8:b2:97:4c:50:77:3f:3d:ae:6c:f8:8f:19:
34:f5:6e:57:01:15:73:25:fe:b4:75:9b:f8:05:62:
6a:63:e5:a3:a9:52:75:39:01:fe:8a:b9:80:41:ca:
50:e0:6a:35:18:dc:b0:64:17:cb:90:09:6a:9d:b5:
8c:21:87:0d:95:4d:5a:85:cc:9d:12:1c:96:91:c3:
a5:fc:b5:0e:59:10:59:b6:4d:24:56:ee:ba:e0:5f:
39:4f:7b:de:49:6d:fd:fc:83:ee:2e:d9:7d:10:3a:
49:d8:ab:78:2b:97:aa:cb:ed:5e:85:e9:37:52:f5:
8a:d9:04:b5:ef:59:05:1c:05:6e:e7:6f:8a:55:b6:
67:55:8b:9b:d2:35:7a:04:dc:9e:a1:59:6a:4c:9c:
37:fb:40:0a:c2:a6:62:c2:18:e2:8f:0b:3f:60:86:
02:00:f8:d3:bc:68:6a:2b:55:d2:02:a6:0d:dc:7f:
38:4a:37:7a:4c:b9:45:5a:0d:b1:f4:c3:10:29:8a:
30:1e:8a:51:70:8e:c6:4b:9b:70:37:04:cc:99:2e:
05:5a:da:ed:73:2b:57:ee:ae:07:90:92:28:79:eb:
99:7e:5f:6f:9a:b9:07:13:25:d0:ae:6b:a0:5f:9a:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:8A:65:7D:4C:40:DA:FA:95:2C:C2:87:8A:D1:B9:A6:CD:45:2C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b448fb94-02a2-4a0c-b2fa-933cf499770b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:be:45:bf:3e:c8:40:32:f5:01:95:1b:49:cf:db:15:89:af:
33:22:28:88:b6:0c:f3:4b:e0:45:48:23:79:04:b2:63:fa:52:
e9:4b:a9:65:6b:2a:e1:50:2a:a0:45:66:42:09:56:96:ae:5f:
87:c4:87:20:dc:6c:05:b0:5e:65:c1:aa:29:e9:2d:47:b5:68:
7a:3c:62:fa:de:9a:8f:6e:cc:8f:41:a1:16:58:71:42:28:76:
f3:69:71:2e:d5:25:4a:c1:0d:55:6b:01:c1:68:ab:f0:f9:bf:
16:5b:80:85:84:ff:ea:8c:c2:ae:d5:a2:13:59:a0:ab:23:d2:
54:6c:63:22:48:be:0e:7a:65:df:96:bb:86:38:02:96:a0:15:
4c:d3:3e:30:e5:0d:32:88:9f:a8:91:65:c8:91:f7:f2:4f:84:
1e:4c:e0:d7:80:58:1a:df:d4:fc:41:d3:fd:61:2c:2b:27:79:
33:e6:fb:b3:aa:84:9d:42:48:8b:3d:3e:ae:4e:9a:b4:68:40:
20:cd:89:f7:54:37:18:f2:d7:9c:cf:a6:23:f4:42:fa:9d:d9:
30:cc:61:06:82:9a:d3:a1:88:37:81:d9:68:6e:e7:16:be:19:
6c:ac:dc:67:35:23:37:8a:6c:1d:ff:b1:c5:ef:91:cf:a2:1c:
9b:e4:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net