Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1a85a27-081e-4638-8d6a-b428191f6e77.roa
File: c1a85a27-081e-4638-8d6a-b428191f6e77.roa (raw, json)
Hash identifier: E/CQR025wul04R4PcPCKHbk9IFNhRlGCxj6ujX7tAmQ=
Subject key identifier: 55:63:2A:A8:53:56:BC:9B:BE:49:3D:22:23:99:36:8C:9B:1E:CA:EA
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4CD12EA518E2A96E0C8BF7B0359656B2FB7B61DA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1a85a27-081e-4638-8d6a-b428191f6e77.roa
Signing time: Sat 11 Nov 2023 00:00:00 +0000
ROA not before: Sat 11 Nov 2023 00:00:00 +0000
ROA not after: Sat 16 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d1:2e:a5:18:e2:a9:6e:0c:8b:f7:b0:35:96:56:b2:fb:7b:61:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 11 00:00:00 2023 GMT
Not After : Dec 16 23:59:59 2023 GMT
Subject: serialNumber=039aa34b69fd22a24ac9400a03c3020636c1392a0eb1c22bb1a0ba69713b036e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:c1:91:25:b4:67:ce:a8:0c:a7:9f:da:71:
b4:76:e1:cd:6a:27:e2:b4:ab:87:59:ba:c2:47:b5:
06:64:3d:5d:ae:97:8c:23:71:6c:4a:8a:56:e0:ca:
18:cc:31:fd:38:36:56:47:f9:74:31:8f:14:ba:d6:
f3:96:04:31:df:70:a0:96:54:7b:93:9c:5e:91:3e:
62:e5:bc:4f:3a:ab:c3:e0:f6:bf:c0:32:87:6b:b6:
f7:be:eb:e0:2c:61:9e:83:07:52:85:a1:0a:62:ab:
62:14:73:a2:dc:46:a3:a7:5f:22:1f:5c:6d:0a:29:
f3:de:8d:39:1c:59:63:21:95:68:24:7e:47:de:d1:
32:91:aa:c4:ef:43:57:70:13:49:5c:f2:2b:15:80:
19:5c:c6:b2:9a:cf:14:42:45:af:c7:2e:0b:91:d0:
ab:4f:b1:70:ac:7f:51:e4:9f:45:2d:c4:1f:ed:82:
6b:7b:bc:5b:ac:03:0a:5f:ec:4f:f8:a0:85:a2:4e:
83:1c:80:2c:7e:9f:0f:67:77:69:d4:bf:17:b5:cc:
a4:89:ac:c7:eb:75:94:0d:0c:d9:a4:ef:5b:92:08:
3d:4b:69:fe:c1:f4:d8:41:df:07:61:df:33:41:f0:
bb:1b:c3:7c:d9:2d:c3:84:f9:5b:21:21:f8:a1:0c:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:2A:A8:53:56:BC:9B:BE:49:3D:22:23:99:36:8C:9B:1E:CA:EA
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c1a85a27-081e-4638-8d6a-b428191f6e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c2:80:21:24:ea:d3:5d:a4:ad:90:99:33:88:8c:e4:1a:bf:
12:65:09:6b:d0:93:db:2f:69:c4:50:17:aa:5c:f1:77:8e:2b:
33:b5:67:86:97:f3:33:a3:ff:cb:64:30:2e:8d:51:5e:6f:ae:
d5:ab:31:52:73:d9:1a:fc:f9:3e:41:99:59:9f:56:bc:21:59:
c1:bb:ab:29:a1:0d:2c:a8:4e:79:8e:85:2c:7c:71:60:17:bb:
67:b6:18:b6:34:1c:15:d7:85:46:56:20:2b:e7:2f:72:b7:74:
fb:ef:c6:39:16:22:d8:8e:ed:7c:6a:9d:26:28:a8:f2:e7:71:
d0:4d:7a:de:d5:dc:cb:dd:da:b5:0d:de:2a:5c:09:4a:b5:df:
07:ac:ff:99:70:78:d0:c3:21:b6:61:7c:92:57:ea:38:ce:64:
e7:97:98:a3:82:3c:39:42:ca:89:fc:8d:67:a9:8b:2d:57:67:
f9:93:5f:12:b1:f2:7c:e4:f8:f6:a2:22:75:f1:b0:34:f2:05:
0f:75:9d:66:af:82:7b:20:ed:7d:ab:8c:5a:45:18:33:1f:de:
79:1f:cf:79:e6:43:cd:dc:be:53:c0:41:bd:f4:88:a9:f3:31:
da:bb:ee:e8:4d:bc:50:7b:49:08:03:5b:52:ce:96:d4:41:2a:
e0:0d:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net