Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba8309c8-6428-4c08-93cf-f40cb6fa1803.roa
File: ba8309c8-6428-4c08-93cf-f40cb6fa1803.roa (raw, json)
Hash identifier: 4+2RFDwIzzY249lDw0fA79ET01mkgNg8yocOK1+Ph48=
Subject key identifier: 07:1E:01:50:5D:42:5B:84:78:FF:67:D8:65:CB:94:15:EB:D2:EB:C3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1596FE5E1ADEB962B30DD548C4D7BA6F7C8DEE76
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba8309c8-6428-4c08-93cf-f40cb6fa1803.roa
Signing time: Wed 11 Oct 2023 00:00:00 +0000
ROA not before: Wed 11 Oct 2023 00:00:00 +0000
ROA not after: Wed 15 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:96:fe:5e:1a:de:b9:62:b3:0d:d5:48:c4:d7:ba:6f:7c:8d:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 11 00:00:00 2023 GMT
Not After : Nov 15 23:59:59 2023 GMT
Subject: serialNumber=013c454d9b70bee03ad5427a9705bec00a4522f8072f66c2f6eb75650987daa2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:35:e4:ba:e1:1e:20:b6:14:85:06:26:eb:
fa:cb:4a:36:5c:fc:a2:da:3a:6e:73:c4:03:b8:f9:
d8:f8:92:08:58:c6:e5:83:1b:a6:e5:68:66:87:61:
52:00:2b:bc:13:f8:5d:86:1b:64:7e:43:cf:c6:f5:
5f:b0:04:28:29:06:bd:0a:75:da:ef:c9:3c:58:46:
d5:ed:25:71:ad:bd:ac:1c:ab:e2:e6:01:eb:b7:a3:
b9:16:7a:01:1b:3e:5d:36:10:dd:6a:1e:ef:f7:17:
a7:5f:c2:ee:fd:24:e4:8f:8e:b7:01:95:94:86:61:
66:ad:26:8d:1e:1a:e7:55:16:eb:ad:14:06:7e:ba:
22:e6:9b:f7:9c:b1:06:4a:94:b0:4e:e9:cc:08:32:
03:79:e3:53:a0:bf:1e:72:93:ec:2e:f9:bb:a2:fd:
a6:5e:b4:ff:c8:ed:31:e5:86:e5:c0:e1:f0:b2:89:
e5:a3:c7:9f:62:62:b9:9c:46:de:a6:89:05:28:5c:
9a:3b:62:ff:1d:5e:1b:93:86:32:b6:6d:ba:98:53:
2c:b2:76:eb:8b:ac:aa:e2:52:79:a4:25:5a:34:55:
36:0b:10:78:a4:38:61:68:b5:83:1e:ed:9f:6c:ac:
28:65:3c:0e:f1:3e:33:c4:2f:ec:d9:a9:6a:28:4d:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:01:50:5D:42:5B:84:78:FF:67:D8:65:CB:94:15:EB:D2:EB:C3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba8309c8-6428-4c08-93cf-f40cb6fa1803.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f6:2f:d9:6e:84:cd:90:6a:87:81:63:04:27:20:34:c0:6e:
59:57:4f:a3:b0:03:3a:1e:ec:60:2e:4f:22:98:72:46:be:27:
97:f8:b5:8b:5d:c6:74:a7:44:c1:61:d6:3a:6d:3c:ff:36:47:
bd:2b:6c:9b:23:d2:6c:51:66:18:c5:bc:6d:a6:c5:20:7d:48:
88:f8:36:87:54:91:77:fe:56:f8:03:41:70:60:02:a2:c6:9f:
60:5a:a2:3d:83:64:43:c9:46:85:03:6f:f5:eb:38:f7:a1:51:
55:5d:33:63:30:fa:50:ea:75:37:64:48:18:80:ca:13:5b:31:
c6:58:6e:e2:08:c9:c2:54:2c:c9:38:e3:5c:50:c3:91:8a:dd:
3a:4f:c9:84:e2:99:eb:7f:ad:10:f8:44:0e:a8:54:12:5d:aa:
50:b5:3b:5c:8d:6a:d9:90:83:3f:f6:28:86:c5:59:82:99:ec:
24:17:a8:7d:28:e6:ed:4b:24:ae:4a:f9:b5:6c:25:52:e2:91:
74:28:a6:c2:db:ff:c9:e7:ac:3b:42:0b:07:90:8e:bd:80:66:
93:e9:e7:e1:b9:48:35:55:53:1c:dd:c5:4a:af:1c:7a:dd:1b:
06:f5:80:29:54:6b:17:f1:a1:c5:c6:f7:dc:5d:62:4c:98:a2:
0d:e1:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net