Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4a48665-2a22-419c-a1d9-a1854651c23b.roa
File: b4a48665-2a22-419c-a1d9-a1854651c23b.roa (raw, json)
Hash identifier: uW4bYnKsa2F6EqmT9lDWJGu5BKQZCVXVHxNQ4YShyPY=
Subject key identifier: 7B:34:2F:9F:C3:F7:B8:D3:F6:33:4C:C0:80:52:8F:CF:9E:BA:5A:07
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 784F1D93573925388FDFC04FC4ADD00A1E942626
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4a48665-2a22-419c-a1d9-a1854651c23b.roa
Signing time: Mon 23 Oct 2023 00:00:00 +0000
ROA not before: Mon 23 Oct 2023 00:00:00 +0000
ROA not after: Mon 27 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4f:1d:93:57:39:25:38:8f:df:c0:4f:c4:ad:d0:0a:1e:94:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 23 00:00:00 2023 GMT
Not After : Nov 27 23:59:59 2023 GMT
Subject: serialNumber=18e87cd35d88a36cb73d7af3feec21e05a22b9e274cc35fe8394997b832ae0e6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:7e:39:d6:c9:57:46:98:7d:e9:a2:17:2d:
e7:ab:20:63:06:55:c0:26:bf:c4:fb:e7:4a:9a:ca:
16:85:c2:ad:9d:72:67:78:12:b0:f4:59:f9:70:68:
c8:24:6b:95:9c:52:88:68:46:df:a6:54:de:e5:6f:
30:d3:af:c7:fc:a5:9a:02:17:23:96:d0:2c:1d:4c:
66:c8:c8:57:d1:23:e2:b2:54:d0:38:0a:8d:eb:2f:
11:40:ef:06:c5:9d:f5:a6:0f:63:d5:28:ef:ef:7d:
c3:f2:fe:cd:d2:71:94:84:1c:09:4e:f6:d3:db:b9:
91:fc:18:cb:71:57:88:fb:4e:0b:9d:17:2d:3a:14:
7e:8f:45:33:bd:d6:0c:94:f5:7c:ff:57:27:00:03:
1e:28:92:9f:86:4c:d9:96:9b:d2:df:02:ef:a7:0f:
1f:fc:24:72:3e:46:d2:1e:a2:e4:a3:25:40:32:98:
31:86:e7:3c:0b:0d:10:05:b6:18:56:d6:5f:c9:cf:
76:c0:de:c4:8e:24:26:dc:b2:fa:32:ee:cd:6c:ef:
a5:21:d1:6c:b0:d7:95:68:a6:53:51:53:2b:8a:15:
3f:20:24:e5:ef:27:50:11:0c:ee:05:b9:cd:af:41:
77:d2:93:6f:6b:15:61:1d:c6:46:99:e2:2e:57:7e:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:2F:9F:C3:F7:B8:D3:F6:33:4C:C0:80:52:8F:CF:9E:BA:5A:07
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4a48665-2a22-419c-a1d9-a1854651c23b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ed:52:41:93:51:c3:b8:01:da:06:e1:5a:6c:9d:a1:c5:97:
de:97:79:75:11:be:00:ea:02:c5:2d:67:58:0f:42:62:1e:a5:
b4:7c:af:41:fa:58:46:27:70:f4:bb:2c:33:80:3b:ab:fe:53:
69:6f:53:0b:7f:66:0b:ad:f3:0e:6f:94:bf:37:31:22:5b:ac:
1e:54:3d:e0:a5:1c:2e:85:0b:2b:11:6a:c6:f7:7b:e1:3a:4a:
61:db:80:8f:6f:75:46:45:bc:20:35:da:11:0d:d2:c4:59:0c:
d6:73:dc:3a:14:41:11:18:dd:dc:b5:cb:18:27:a6:27:93:a3:
72:d5:83:35:ca:ca:fc:3f:c5:bd:ab:60:6c:c4:a2:18:78:23:
b6:41:78:26:93:74:b3:2f:73:d6:72:2a:4b:d9:e3:94:60:1b:
d9:62:dd:9e:e5:19:43:07:76:24:b3:a8:ac:98:3d:b0:6d:70:
cf:b9:5f:60:81:b0:d1:fc:e8:be:79:24:d7:54:02:bf:f5:6f:
51:96:99:54:94:99:96:51:4d:ec:5f:cb:94:b9:65:62:76:6e:
6e:ce:c0:be:29:a2:91:7e:99:01:ae:20:a9:02:a7:3a:83:2b:
73:24:c5:24:c0:8a:ba:10:8d:42:da:42:36:57:49:8c:61:6b:
98:e5:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net