Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9ec7f2b-75de-419a-b9d2-32a7a9ddc9e0.roa
File: b9ec7f2b-75de-419a-b9d2-32a7a9ddc9e0.roa (raw, json)
Hash identifier: ZeRjH+Uw8WkRXw+YrmxJOzx4A6rwqAsEaNqN49OamZw=
Subject key identifier: 0D:1E:3F:F1:C3:92:C0:5C:53:74:C5:9E:FB:E9:35:39:BF:30:A8:03
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C03FF10079DDC5E85253E1D56F903955BB308E4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9ec7f2b-75de-419a-b9d2-32a7a9ddc9e0.roa
Signing time: Mon 04 Sep 2023 00:00:00 +0000
ROA not before: Mon 04 Sep 2023 00:00:00 +0000
ROA not after: Mon 09 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:03:ff:10:07:9d:dc:5e:85:25:3e:1d:56:f9:03:95:5b:b3:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 4 00:00:00 2023 GMT
Not After : Oct 9 23:59:59 2023 GMT
Subject: serialNumber=abcb98f60365b18b13f185433a40fca3ef3f1f09695d399a263ae56ad65a415a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:be:3a:c0:e1:19:6d:2e:6c:37:b8:63:13:
31:98:ed:69:67:99:01:3e:77:d7:06:55:ba:9c:62:
c7:61:90:65:fd:98:cc:d6:87:4e:1d:83:c1:6d:35:
e2:97:1a:21:6c:7e:c8:25:2e:a6:70:b3:12:7c:42:
30:23:43:fa:a4:c4:35:a3:e2:6c:40:89:ce:ba:49:
b1:0f:3d:aa:23:1f:ca:cf:9a:00:f2:dc:c2:cf:2e:
ae:3f:c0:3d:e0:9c:d1:fd:5f:d1:d4:50:7c:b5:3b:
0e:7d:f9:b0:48:fb:a0:10:37:34:4a:7d:fe:aa:10:
9c:18:a3:7c:e9:f7:ea:84:3c:52:87:f0:d8:c3:78:
66:2b:50:72:eb:b4:76:8d:73:dd:18:08:2b:b7:26:
7b:7a:88:5d:a7:9e:a9:da:30:7c:47:3e:3d:25:dc:
eb:39:7e:f9:e4:cd:a8:65:be:32:4c:b5:a9:28:df:
9d:68:ec:ee:6e:34:20:b5:3d:69:bd:e5:4a:22:d9:
b5:3d:75:1b:0d:86:df:01:58:27:d9:08:a7:7f:a3:
61:53:f3:f1:49:d6:f7:84:35:fd:33:0c:69:a2:69:
9c:24:e7:ea:6c:d1:7a:b4:b1:09:07:9d:70:46:02:
fb:22:99:a0:78:c3:0d:6d:f8:b1:98:c0:f1:9b:1f:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:3F:F1:C3:92:C0:5C:53:74:C5:9E:FB:E9:35:39:BF:30:A8:03
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b9ec7f2b-75de-419a-b9d2-32a7a9ddc9e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:72:df:e1:fb:63:5f:7d:4e:3d:29:6c:31:e8:55:0c:37:1d:
80:2d:98:f2:83:da:e4:8b:46:5c:9e:5c:9e:db:0f:b9:75:8c:
04:19:d4:a4:69:7c:d8:f3:5c:90:14:0a:70:e5:b7:9a:40:80:
a0:bd:94:c9:ee:2b:a3:24:03:15:8f:51:27:b0:a9:99:16:2c:
d1:1f:a2:bb:a6:30:6d:18:b8:5b:c9:0d:4e:a8:58:48:b5:81:
f0:22:3c:8f:b2:11:96:80:46:ef:49:8e:44:c9:a8:73:f1:da:
03:a1:74:70:67:af:6d:72:25:ba:c6:92:96:1e:f8:f1:0e:49:
01:7f:05:48:39:0b:bd:4a:2e:1a:f9:f1:c1:90:52:4e:90:7a:
59:5b:d1:1a:b7:2a:f2:25:37:e8:75:af:43:30:01:7e:47:3c:
4e:f4:b8:af:41:9f:5b:60:5b:f4:cd:56:6d:e4:7e:ba:0c:e5:
2a:c1:d4:00:3a:6f:c0:37:6c:cc:28:f5:77:ca:27:9b:85:86:
84:f0:64:c9:3d:b3:76:c6:57:19:97:f0:b8:75:4b:fd:65:10:
74:65:62:88:a4:6a:8a:2d:1a:84:37:ef:eb:43:8b:0c:82:b1:
f7:68:55:38:7d:aa:69:53:be:6f:c1:06:f3:3a:9e:a0:20:49:
d8:65:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net