Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6ea3593-90d4-4d3f-8420-511ef9847f7a.roa
File: b6ea3593-90d4-4d3f-8420-511ef9847f7a.roa (raw, json)
Hash identifier: yoX0gP39hRl9vTOYSceYxhNVyNY+8uzHTCyWYhfxEVg=
Subject key identifier: A1:D6:6C:BD:45:A6:08:46:83:D2:E8:2B:EB:25:6F:91:1D:58:1A:3D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21F36F61A7C2D36C18125C91BC876B91FE77D58B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6ea3593-90d4-4d3f-8420-511ef9847f7a.roa
Signing time: Sun 06 Aug 2023 00:00:00 +0000
ROA not before: Sun 06 Aug 2023 00:00:00 +0000
ROA not after: Sun 10 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f3:6f:61:a7:c2:d3:6c:18:12:5c:91:bc:87:6b:91:fe:77:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 6 00:00:00 2023 GMT
Not After : Sep 10 23:59:59 2023 GMT
Subject: serialNumber=4bd6362953f78cf27139bcd736a7255f2d294d4b00e4d383eaa540e31bd537c3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:bb:89:95:90:94:1a:b2:6f:16:b8:04:11:
ba:19:9d:2e:58:44:0e:af:3b:52:9a:a6:96:03:c4:
d6:b2:f1:86:e4:cb:45:ae:ea:f7:36:53:b1:92:ef:
8d:6e:45:9e:53:6c:fb:b1:47:e3:20:0c:37:7a:ab:
0f:bf:be:ee:31:0a:f7:4d:08:dc:e6:a0:25:38:8d:
b4:d0:dd:8a:df:42:cd:2b:b2:b6:06:e9:58:69:b1:
23:e5:dd:5a:e7:f6:d6:73:22:30:f8:85:73:87:e4:
13:65:b2:e2:ca:9c:28:11:ca:c3:39:be:1e:98:26:
47:05:2f:be:a7:2c:c5:fb:21:dc:09:05:07:87:93:
68:d9:5e:30:b7:f0:bd:07:d3:82:ff:81:b3:5a:bf:
7c:91:e4:98:93:08:90:c9:f8:d8:d1:c9:16:f7:a9:
e2:9d:a3:86:68:b2:77:46:f1:35:80:29:85:39:ec:
be:a4:e3:76:38:56:c4:94:ba:67:a7:60:4b:58:00:
74:e1:4b:fd:10:ea:35:f0:ea:de:76:5e:61:ab:18:
db:13:66:fa:ab:36:28:92:ba:7b:8c:af:de:ec:a3:
aa:b0:3e:5f:7a:10:c2:b7:d2:14:98:4a:48:ae:3a:
fd:b9:19:bb:dc:d4:7c:9b:ef:d6:47:f0:24:6b:d5:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:6C:BD:45:A6:08:46:83:D2:E8:2B:EB:25:6F:91:1D:58:1A:3D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b6ea3593-90d4-4d3f-8420-511ef9847f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2b:8c:31:fe:e7:02:1c:78:ce:64:2d:35:df:24:a5:8a:a7:
a0:39:a1:f3:af:ce:ec:cc:f3:2d:dc:a9:90:a8:2f:13:63:f7:
1b:88:54:24:41:79:89:81:3f:cf:88:d5:1f:96:9b:82:ea:6a:
59:2c:70:56:3f:72:fe:67:dc:6a:c5:7c:b4:b1:e4:69:f8:a7:
71:c3:4e:59:81:76:5f:a6:af:a6:f9:7d:54:da:ae:3b:3c:dc:
da:db:35:95:47:5d:63:5f:56:a6:a1:99:70:76:3f:81:07:63:
87:af:e2:2b:1c:9b:82:77:1e:60:bb:f2:a0:01:1f:f1:4d:d0:
dc:02:a6:bb:1d:26:02:d1:72:31:7e:cc:18:ce:16:58:e8:02:
af:b1:5a:82:b1:30:4e:f2:16:79:e1:57:4e:04:00:8f:7c:6e:
ea:8f:18:f1:8f:27:63:ae:7f:95:f7:f1:ca:39:0d:09:84:0c:
22:8d:9e:d0:70:09:56:01:e1:ee:ee:94:d8:a6:75:f2:15:d1:
7c:1f:f6:06:95:45:f2:2d:c7:c5:8e:52:77:92:9a:b9:74:12:
d5:75:aa:55:91:bb:77:d8:bb:96:64:c6:a2:74:57:37:6b:43:
84:aa:92:41:55:09:b2:df:1b:36:44:72:d2:c9:6d:76:15:f8:
20:de:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net