Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4cc3dab-d75a-430e-8f61-f97f55e01fa4.roa
File: b4cc3dab-d75a-430e-8f61-f97f55e01fa4.roa (raw, json)
Hash identifier: w6gARDqzUx21qVKkAZEsL+IBsQofwJ5lIGbFYaeqdr4=
Subject key identifier: 1C:95:45:A3:AA:C0:69:DB:A5:E3:A5:FC:AE:4F:22:CD:D1:3A:43:BA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3325D766BC21C186164B1CC5E8BAEF82294AC60C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4cc3dab-d75a-430e-8f61-f97f55e01fa4.roa
Signing time: Sat 01 Jul 2023 00:00:00 +0000
ROA not before: Sat 01 Jul 2023 00:00:00 +0000
ROA not after: Sat 05 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:25:d7:66:bc:21:c1:86:16:4b:1c:c5:e8:ba:ef:82:29:4a:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 1 00:00:00 2023 GMT
Not After : Aug 5 23:59:59 2023 GMT
Subject: serialNumber=b672ef66a1c27f72072423e6577599a1e82e56bb05596e199227112b88fb91bd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:ae:1d:d7:b1:9e:9f:79:44:be:8b:a9:05:
51:3e:b5:6e:bd:d5:fe:2c:4a:73:e7:b4:8b:81:24:
9e:29:02:32:f9:00:bd:2b:d5:82:28:f9:1c:a5:3f:
88:f6:93:2e:c6:25:61:17:76:5e:ec:4d:28:07:83:
e0:ff:cc:ac:b7:85:79:ce:be:60:01:f5:ff:37:e5:
e0:5f:b8:26:94:05:76:55:c6:9f:3e:80:23:2a:23:
18:28:5e:76:30:cb:50:ae:51:eb:d9:a1:00:b2:ed:
98:a0:55:bf:7c:95:52:ae:24:23:6e:36:61:c3:ff:
89:bd:a7:8d:2b:7d:9e:d2:86:7c:fa:a6:a2:ae:b3:
bc:49:65:a3:ab:26:6e:df:47:42:ca:7d:f3:09:16:
d6:a6:48:7a:5f:b5:53:42:b4:ac:4b:81:8f:71:f0:
8d:03:d0:14:ac:17:73:94:fa:08:b6:0d:bd:fe:72:
c5:2a:88:0f:07:12:b1:47:de:eb:73:79:40:14:f1:
ad:33:a9:1e:50:85:29:49:26:06:3d:a6:8f:a4:b4:
cf:b7:f3:67:2e:ae:0e:5e:ee:12:f8:f9:ec:5d:c5:
d0:2e:6d:2c:1c:49:1a:4d:e5:9c:8c:e7:32:a3:f3:
c8:70:80:d8:9d:1f:77:57:e4:25:37:88:38:f5:99:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:45:A3:AA:C0:69:DB:A5:E3:A5:FC:AE:4F:22:CD:D1:3A:43:BA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b4cc3dab-d75a-430e-8f61-f97f55e01fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:55:3b:e9:e1:18:a6:31:b6:a0:34:e3:85:c0:fd:97:33:48:
e7:c0:da:02:37:9c:45:4f:64:80:f1:3f:61:ae:cb:3c:dc:07:
dc:22:72:3f:ba:b3:14:d1:37:62:5e:a3:18:32:0b:fc:7f:93:
25:1f:29:c0:a0:74:15:ec:a3:53:8b:fb:e1:7d:44:6c:dd:00:
6e:06:62:e4:a8:7b:4e:7e:88:9b:4a:23:6f:81:5d:18:f0:f6:
d3:a6:6c:e0:10:04:64:a0:38:7a:60:b4:7d:ed:47:88:43:41:
11:75:1c:b6:e1:ef:84:44:25:24:5b:7e:d7:b8:e8:26:a0:e2:
8d:a1:9f:f5:0b:0b:68:ae:a2:4a:73:cd:fd:c1:a9:4b:2b:e2:
6d:da:80:d6:b3:ae:8f:3c:c8:62:9d:c5:34:e7:d5:84:4c:52:
dd:c9:73:05:a6:67:0e:bc:3d:4f:28:c5:e8:ca:d3:d4:bd:dd:
be:d3:04:64:82:73:54:72:e5:a7:01:3b:1a:a0:c4:18:e0:b0:
78:ce:49:65:50:a4:e9:6f:f4:d0:62:a1:f4:ed:05:69:d2:d0:
0c:22:c4:0e:00:36:bb:04:34:59:1b:81:24:18:b1:4f:61:d2:
7b:c3:f2:f9:d6:a6:43:37:6f:b3:25:66:b2:bd:11:2d:dd:58:
47:25:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net