Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b57afa63-b881-49ad-8983-98e62727f1cb.roa
File: b57afa63-b881-49ad-8983-98e62727f1cb.roa (raw, json)
Hash identifier: WkOv1ImEsHqUFgTl2YzSahuEdyVRvsWvOI/93hAiYxk=
Subject key identifier: CF:A2:73:A9:46:05:77:36:5A:A1:E2:DD:81:93:21:1D:BE:61:28:EC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2AA03D1CA7ADD2B7215C8E35BA02FE826C1A4FDA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b57afa63-b881-49ad-8983-98e62727f1cb.roa
Signing time: Thu 28 Sep 2023 00:00:00 +0000
ROA not before: Thu 28 Sep 2023 00:00:00 +0000
ROA not after: Thu 02 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a0:3d:1c:a7:ad:d2:b7:21:5c:8e:35:ba:02:fe:82:6c:1a:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 28 00:00:00 2023 GMT
Not After : Nov 2 23:59:59 2023 GMT
Subject: serialNumber=59fe980bc6afe22b585be8a33457b53935630b774b50824cc23dc2bf3e52a8c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:ec:5f:f8:5c:eb:eb:75:62:eb:e2:f0:97:
f1:b3:ff:3a:c8:9a:5e:48:76:b3:a2:1b:6b:4a:18:
e4:09:1a:3d:d6:83:00:6c:fc:13:cd:e7:e4:e1:bc:
45:b9:eb:10:62:8a:6e:8d:69:fa:d0:7c:53:39:7a:
48:4a:1d:51:4e:6d:35:1d:b4:e4:eb:9d:f1:9c:72:
b1:64:1b:84:d9:7a:b8:b4:90:ac:6c:7f:4c:f6:df:
4d:4a:88:39:2c:eb:5f:83:e4:a0:29:06:99:05:ee:
ae:9c:54:9c:fe:79:13:5c:97:33:b6:66:d7:16:12:
d6:77:5b:2d:88:fd:ac:c3:ee:35:43:0d:0a:1d:32:
a0:10:ae:27:b8:ab:04:56:54:8b:1b:30:eb:ee:9f:
5e:ff:6e:43:2c:07:f2:a4:da:42:68:80:fc:f9:0d:
b8:f6:26:ee:12:ff:31:63:6f:d8:ca:fb:67:6e:9c:
d0:64:7f:f8:38:f6:df:23:43:5b:73:5a:b3:a6:3a:
20:02:f7:7d:ca:33:5a:dc:9f:7a:e6:82:da:4a:90:
af:9c:d4:66:30:6e:a7:1f:e8:e6:19:6c:db:59:b1:
a5:ff:cb:ba:9c:bd:3a:3c:a7:39:34:97:f3:51:94:
f6:bf:1d:b8:da:b9:23:de:c4:fc:d3:60:3f:0d:b3:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:73:A9:46:05:77:36:5A:A1:E2:DD:81:93:21:1D:BE:61:28:EC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b57afa63-b881-49ad-8983-98e62727f1cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a7:ec:f0:c2:13:8d:b7:d7:b4:fd:80:e2:51:fe:fb:1c:6d:
bd:ed:cd:89:5e:44:ce:a5:61:5c:c5:95:53:d4:a5:d0:04:96:
de:de:a2:56:4f:ce:2d:94:87:1c:cc:b5:dc:4f:39:f5:84:90:
13:49:fc:f7:b1:fd:e2:22:20:c6:e6:1f:ed:e2:b4:d2:6e:14:
ae:6f:bc:ae:b4:3f:e9:9f:b0:46:30:9c:e6:dc:bd:b0:22:41:
e4:ae:a3:12:9b:b7:87:cf:02:54:83:54:ec:22:43:cf:23:6a:
d7:e8:42:e7:90:3d:97:50:f2:43:ad:c7:4b:ac:b9:ea:86:c2:
60:64:f7:0a:61:2f:22:d3:af:2b:12:da:cb:c7:a6:f6:15:c4:
30:33:a1:ac:a6:a6:4b:41:e0:d8:51:bc:41:1c:b6:5b:e9:b3:
fd:bc:45:c1:05:f5:a8:16:57:05:a7:a4:29:91:ee:9d:d0:78:
a1:77:a9:b0:78:0c:69:f1:f6:72:9d:a9:97:58:f9:3e:df:48:
8d:d9:2e:dc:f1:6e:6a:ef:85:0b:96:a8:69:be:e9:b6:37:94:
81:96:a8:1f:a1:8e:66:b7:73:50:61:f3:d4:28:49:24:99:87:
e9:4b:10:f3:76:6a:b8:c8:c2:6b:e5:58:b8:38:f7:9c:2d:ce:
1b:3d:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net