Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b91dcefe-4874-46e5-a293-bc54745f7796.roa
File: b91dcefe-4874-46e5-a293-bc54745f7796.roa (raw, json)
Hash identifier: +INEpNqtADwz5bcV+MiJZBXuJL88YZicZI3/AXHOhGY=
Subject key identifier: 74:4E:1C:7E:EE:96:28:6F:EA:D4:39:15:FF:18:A4:08:59:A3:C4:44
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5EE87FA94B15C3FDB72040D73543BF3DE0014B8D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b91dcefe-4874-46e5-a293-bc54745f7796.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e8:7f:a9:4b:15:c3:fd:b7:20:40:d7:35:43:bf:3d:e0:01:4b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=8b41021f880ad3f2da0dd2f3d7c4b8c796caa6d4b8f3e529aded1c46911a87bd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:0c:a0:f3:b7:2f:06:52:2a:d9:44:8e:3f:
84:2c:23:4c:55:5f:0c:f7:04:ae:4d:2a:aa:d0:5e:
a7:03:d9:ca:c5:83:1f:61:92:bc:b0:43:53:90:7a:
0a:61:ca:5c:3c:62:7c:de:09:17:e2:ae:d5:13:5c:
6f:5e:6d:ef:09:a5:6c:6b:7f:de:1e:e2:24:e1:f2:
8a:14:f0:94:b7:fb:f5:24:c4:11:42:9a:42:f3:e2:
f7:83:f8:9b:84:8c:39:16:8a:49:d7:89:3c:be:5c:
d7:15:80:1e:95:40:18:7c:1f:89:19:7d:39:ea:44:
b2:09:b6:71:10:d5:6b:58:a2:7a:88:00:fd:b8:b1:
b0:46:74:7a:0b:ae:47:89:fe:ae:b1:23:58:59:d2:
97:35:5b:8f:fd:5f:5c:84:35:e6:37:c3:f5:43:99:
ba:db:96:17:92:7c:8b:8b:03:49:b4:af:ff:46:fa:
9d:6a:17:1b:ee:0e:d3:81:b7:7b:6d:67:a5:08:f2:
19:1e:f5:b8:48:21:5b:d2:5e:9f:c9:1a:d9:7a:7e:
50:93:9c:25:2e:34:2a:dc:2c:b8:7d:53:70:84:f3:
6a:86:7f:76:64:dd:ee:46:45:97:21:d3:06:24:f1:
54:48:b7:20:90:96:62:8c:3f:46:e4:6e:1e:88:2d:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:1C:7E:EE:96:28:6F:EA:D4:39:15:FF:18:A4:08:59:A3:C4:44
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b91dcefe-4874-46e5-a293-bc54745f7796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4c:c7:fb:c2:b8:6a:7e:69:d5:fc:7e:16:f3:d3:be:e3:6c:
6c:d9:ac:3a:82:26:60:f6:7f:6b:11:2b:2c:f8:63:e8:c4:d3:
8d:ad:16:18:bf:1f:69:12:e5:6d:d6:cd:3d:9e:a9:15:30:a6:
a2:c4:75:46:77:6a:43:98:2e:40:7b:3e:e8:e6:16:21:a2:47:
ce:e2:68:d0:7a:7e:81:b9:ac:30:ce:f5:5d:96:3d:dd:32:b2:
54:b0:38:6f:6e:64:45:7f:81:53:dd:d7:ef:d8:4e:a6:5d:5f:
40:0b:43:55:39:7a:b3:36:a3:09:13:dd:ee:e4:95:f5:7f:5f:
f4:2c:35:74:bb:32:30:72:26:50:07:5a:b6:80:20:4c:60:19:
c6:f2:09:19:1d:9a:8d:b8:17:5f:42:af:84:d8:51:ee:1e:6b:
e7:7e:12:2c:43:77:e3:9f:fb:52:31:2f:e2:99:82:65:6c:ff:
26:2f:08:fc:d2:a5:58:d8:e9:40:0e:a2:66:b6:89:be:ec:7f:
c3:43:2e:24:e2:53:92:1a:ac:81:a7:89:cc:33:94:63:5d:e0:
2d:f5:53:86:52:96:07:a3:64:b4:8f:99:c1:d9:2f:95:ca:8a:
73:b0:9b:57:ea:e3:58:86:8d:fd:90:63:cb:ff:c4:43:d3:92:
d8:20:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net