Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba4dc5f3-3c87-4c55-9e97-1b8f4e1088eb.roa
File: ba4dc5f3-3c87-4c55-9e97-1b8f4e1088eb.roa (raw, json)
Hash identifier: 9KoHQ9R/FhSHcw8szJO1sFjxNotHPN2m5+HtIJcgUZ0=
Subject key identifier: 17:92:84:8C:3A:F8:EE:88:9F:81:09:BF:C0:27:B5:B8:91:00:7D:50
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3CFD9705A4D9BDDE9D4A67FD6D48B9D8D3EFBE99
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba4dc5f3-3c87-4c55-9e97-1b8f4e1088eb.roa
Signing time: Tue 11 Jul 2023 00:00:00 +0000
ROA not before: Tue 11 Jul 2023 00:00:00 +0000
ROA not after: Tue 15 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fd:97:05:a4:d9:bd:de:9d:4a:67:fd:6d:48:b9:d8:d3:ef:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 11 00:00:00 2023 GMT
Not After : Aug 15 23:59:59 2023 GMT
Subject: serialNumber=33db8988fdba85937bbf85f456dfe9f15b65da9a4ef7e5f2522a1aaf24116f01, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:a3:43:af:f6:c0:33:ce:ee:b0:3b:b3:67:
6f:fd:ee:49:93:4f:63:b4:fa:ed:ed:98:49:04:d9:
88:7b:03:b3:73:2d:12:6d:b0:54:09:54:da:cc:d8:
eb:bc:ee:55:52:48:8a:ac:3e:90:a9:3e:1d:61:3b:
19:a0:2e:10:13:95:38:ea:86:eb:e3:e0:09:2f:19:
2c:ff:a0:50:78:51:70:e7:c8:00:15:94:9f:81:6a:
82:9a:88:21:24:95:1c:f6:3a:da:7a:35:f8:a6:c4:
c1:ab:32:67:62:67:3c:3b:04:94:44:d2:52:b6:e6:
78:6c:4c:af:c6:64:4b:fc:c6:04:b3:10:49:33:34:
91:43:d2:b8:75:5b:e9:ef:f4:a5:ae:4e:e5:90:43:
3a:bd:df:29:bd:b3:37:91:ff:f9:6c:5b:28:93:ac:
30:22:8b:fa:ba:d1:08:a5:bd:ab:18:2d:6a:bf:39:
fe:14:8e:44:10:0d:91:6d:d4:61:20:e3:cb:6a:f9:
5a:62:51:50:50:b5:c0:11:9c:1e:23:c0:70:02:d2:
60:2c:af:a7:7f:cf:2f:25:9e:25:d2:43:79:0c:56:
8b:11:b1:bf:00:1a:98:c3:23:5e:c8:12:a6:5a:33:
2f:0c:ec:30:b2:c3:b0:1e:2f:7d:af:13:ec:ad:95:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:84:8C:3A:F8:EE:88:9F:81:09:BF:C0:27:B5:B8:91:00:7D:50
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba4dc5f3-3c87-4c55-9e97-1b8f4e1088eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:26:61:b1:ef:67:f0:7f:2e:77:8a:3c:0d:1f:d3:e9:11:8b:
60:1b:4f:58:a7:76:91:27:5e:1d:22:9b:12:30:f7:75:9c:5b:
37:1c:31:83:5e:68:99:04:40:b5:dd:d3:0e:58:e1:b8:8f:20:
14:e0:82:ca:c6:42:a4:8f:69:2d:48:db:44:c5:97:3c:25:30:
c4:d4:a4:aa:1f:16:e6:77:dc:9d:d4:14:7c:23:1d:29:5d:1a:
32:b4:2a:f2:13:36:75:d5:e5:a6:87:90:76:d8:14:41:66:a8:
58:fb:aa:91:0a:00:8d:6b:08:a0:89:84:db:79:fc:2f:92:9a:
d0:3f:b9:76:62:f4:37:73:d6:e3:bb:08:79:df:f7:9e:fb:17:
e4:d7:44:52:f1:6a:2b:60:16:24:dd:69:8c:ed:05:b2:99:07:
ed:a7:f4:0d:fc:b1:6e:94:62:8f:c2:f5:1d:89:ad:f3:6c:ae:
25:8a:0e:eb:a4:bb:92:73:5b:29:b4:e8:be:02:5d:c1:f6:5f:
fd:17:85:56:8d:c7:a5:88:7c:7f:79:6a:98:37:3a:c2:ab:de:
f2:3d:ff:68:68:3a:2f:89:99:61:c3:16:cf:47:ff:56:1f:e6:
78:0a:ee:6b:15:6d:f1:e4:b6:2d:07:65:d9:88:df:a8:ba:0f:
b8:e3:5f:2b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPP2XBaTZvd6dSmf9bUi52NPvvpkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwNzExMDAwMDAwWhcNMjMwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzM2RiODk4OGZkYmE4NTkzN2JiZjg1ZjQ1NmRmZTlmMTVi
NjVkYTlhNGVmN2U1ZjI1MjJhMWFhZjI0MTE2ZjAxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPs6NDr/bAM87usDuzZ2/97kmTT2O0+u3tmEkE2Yh7A7Nz
LRJtsFQJVNrM2Ou87lVSSIqsPpCpPh1hOxmgLhATlTjqhuvj4AkvGSz/oFB4UXDn
yAAVlJ+BaoKaiCEklRz2Otp6NfimxMGrMmdiZzw7BJRE0lK25nhsTK/GZEv8xgSz
EEkzNJFD0rh1W+nv9KWuTuWQQzq93ym9szeR//lsWyiTrDAii/q60QilvasYLWq/
Of4UjkQQDZFt1GEg48tq+VpiUVBQtcARnB4jwHAC0mAsr6d/zy8lniXSQ3kMVosR
sb8AGpjDI17IEqZaMy8M7DCyw7AeL32vE+ytlYfxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUF5KEjDr47oifgQm/wCe1uJEAfVAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JhNGRjNWYzLTNjODctNGM1NS05ZTk3LTFiOGY0ZTEwODhlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAMmYbHvZ/B/LneKPA0f0+kRi2Ab
T1indpEnXh0imxIw93WcWzccMYNeaJkEQLXd0w5Y4biPIBTggsrGQqSPaS1I20TF
lzwlMMTUpKofFuZ33J3UFHwjHSldGjK0KvITNnXV5aaHkHbYFEFmqFj7qpEKAI1r
CKCJhNt5/C+SmtA/uXZi9Ddz1uO7CHnf9577F+TXRFLxaitgFiTdaYztBbKZB+2n
9A38sW6UYo/C9R2JrfNsriWKDuuku5JzWym06L4CXcH2X/0XhVaNx6WIfH95apg3
OsKr3vI9/2hoOi+JmWHDFs9H/1Yf5ngK7msVbfHkti0HZdmI36i6D7jjXys=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net