Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2ca04d7-1a99-4ff8-b912-e36c95db3799.roa
File: c2ca04d7-1a99-4ff8-b912-e36c95db3799.roa (raw, json)
Hash identifier: rEPK8MuLVw8lAkCjf5ZpzZf7fGJSz8oEy+q4gGS9gyc=
Subject key identifier: 7E:FB:FE:9A:D5:A7:07:F6:9F:30:66:3F:67:F9:5A:DD:47:37:D1:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 16564590585F12F188655897419C9AC6C89102B6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2ca04d7-1a99-4ff8-b912-e36c95db3799.roa
Signing time: Mon 31 Jul 2023 00:00:00 +0000
ROA not before: Mon 31 Jul 2023 00:00:00 +0000
ROA not after: Mon 04 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:56:45:90:58:5f:12:f1:88:65:58:97:41:9c:9a:c6:c8:91:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Sep 4 23:59:59 2023 GMT
Subject: serialNumber=e4bea119615ef970605d9dbb8ee9e6e9582ec37fed8ca1d9f03188d64634313d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:52:87:5d:46:86:d1:06:5e:c0:4a:81:9f:
7a:9d:8b:14:1d:b8:aa:e0:a3:91:27:3c:f6:01:e2:
64:8e:59:67:75:32:e1:7e:54:47:8f:bb:4c:28:22:
0c:ae:2c:2a:ab:a4:bb:2b:53:17:00:2b:20:f2:2c:
4b:5b:f2:57:ad:db:f8:79:3b:4f:39:9e:d9:7d:ac:
7d:59:3d:c0:a5:a3:72:aa:06:c7:13:fc:22:7e:6c:
0b:f1:d9:14:df:d6:86:30:5b:6a:51:6e:38:9c:2d:
82:f0:32:a5:a9:0f:96:4c:92:85:66:b4:6d:de:49:
93:68:1d:b5:4c:de:f6:af:ef:e5:42:e3:08:11:37:
bf:a0:70:7f:07:a4:5f:26:4d:72:90:ae:03:fa:4d:
7d:70:76:f4:b7:2c:32:13:f5:81:52:22:77:2a:7f:
b1:0c:e1:6a:ad:02:25:b0:01:b3:ff:d3:e4:88:17:
2f:f7:a0:c7:51:2f:41:97:90:3a:5c:58:d9:e4:40:
49:94:1f:e1:ef:8f:54:8b:98:93:d7:43:8b:52:c8:
e5:64:dc:db:84:3d:11:fa:fd:36:11:d8:f6:62:e2:
b1:a0:3d:86:da:06:d4:ae:a6:b4:cc:54:3d:70:09:
52:f6:19:c5:dd:f2:89:5d:3a:ca:b8:ca:92:cc:70:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FB:FE:9A:D5:A7:07:F6:9F:30:66:3F:67:F9:5A:DD:47:37:D1:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2ca04d7-1a99-4ff8-b912-e36c95db3799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e3:50:5b:93:58:82:f3:23:ff:69:88:43:18:e0:51:72:79:
e5:b9:7c:75:fc:58:e2:e6:a5:6c:52:57:c9:68:7a:c3:7c:9c:
49:21:1c:b7:76:24:a7:93:7c:5e:68:a3:40:a2:60:3f:e1:81:
72:5c:7f:39:7c:ee:29:f7:eb:95:c8:70:7a:e9:34:66:7b:c4:
8b:f5:ae:d2:a3:58:0b:8e:c0:13:b6:a5:94:9f:4f:cd:6d:e3:
d4:48:b0:62:c7:7b:cd:04:87:69:5f:02:ee:dc:82:ba:97:1e:
73:2b:be:fe:63:67:67:d5:9f:de:30:00:4b:44:66:a8:c2:37:
af:ee:b0:00:31:d6:31:a5:47:9b:b1:92:fc:0d:9c:e7:18:19:
f5:97:bf:63:24:da:70:5f:d0:82:0d:9c:53:b2:07:fe:7a:b1:
f2:0b:99:71:44:dc:51:fc:4c:cd:85:5c:c2:8a:9a:aa:ee:b7:
2d:e3:75:a3:28:cd:9b:38:61:23:0e:9c:1f:37:c6:ef:40:7d:
1d:f4:31:51:ce:73:ea:91:01:c8:b2:65:e2:80:66:ac:ac:17:
26:cf:a9:87:57:e4:f1:18:53:7c:44:b2:94:ee:fb:59:95:50:
5f:cf:b6:78:40:91:c3:26:9d:63:ae:62:9b:02:2d:ca:0e:1b:
03:e0:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net