Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2de6b1b-b09d-4b93-9668-55f8bf19d853.roa
File: c2de6b1b-b09d-4b93-9668-55f8bf19d853.roa (raw, json)
Hash identifier: UxlZOowInceUa0uKQRaeG0/WvIEEIxfYX+Fnt7g+5RQ=
Subject key identifier: 21:96:A2:44:95:E3:12:8D:5A:C0:59:00:DA:E8:03:5F:1E:DC:0C:24
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4649EB90687BBA44A6F1969003FB950C7FB1F4C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2de6b1b-b09d-4b93-9668-55f8bf19d853.roa
Signing time: Mon 09 Oct 2023 00:00:00 +0000
ROA not before: Mon 09 Oct 2023 00:00:00 +0000
ROA not after: Mon 13 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:49:eb:90:68:7b:ba:44:a6:f1:96:90:03:fb:95:0c:7f:b1:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 9 00:00:00 2023 GMT
Not After : Nov 13 23:59:59 2023 GMT
Subject: serialNumber=33ca55c2871ef9a3a13919dd288a7d1ea5add23d478c646f2c62a564de469696, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:d1:cf:8c:12:a7:6d:7f:9c:1e:08:69:5e:
75:30:95:8d:ab:38:43:f8:4f:ec:33:f2:57:27:e8:
2e:c3:11:18:3a:9d:23:11:61:ab:97:de:26:1d:78:
cb:3d:50:ae:f7:21:c3:86:01:d6:48:71:ab:b0:d8:
8d:31:4f:20:69:d3:ab:60:25:60:07:3d:d0:54:c8:
72:28:62:5a:01:7b:9a:2e:1e:eb:13:c8:98:ea:a7:
63:4b:d0:24:b7:5d:b4:53:91:16:57:55:09:52:9e:
b1:54:f1:84:27:e9:8a:56:fe:69:4f:de:e5:ad:86:
f3:73:09:11:b4:65:f6:f3:1d:c9:3c:61:76:04:27:
65:62:a5:02:99:29:d3:40:89:89:5d:e0:64:ae:93:
d9:55:bf:be:e2:04:fa:5d:15:a7:3a:1e:9f:34:72:
64:8c:1b:2e:64:55:2b:25:f5:a6:a2:11:49:9c:09:
6f:03:fa:10:70:f6:96:3a:6d:09:0f:62:aa:dc:a6:
33:63:37:42:31:db:0b:37:01:c4:aa:ee:47:68:e2:
a0:10:15:45:ca:5c:e3:2c:6b:3b:f6:50:1f:c0:cd:
78:e5:20:81:75:7c:89:27:1a:79:13:41:e7:bc:10:
61:bd:32:8a:9a:88:39:e2:a7:81:15:7a:53:92:1b:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:A2:44:95:E3:12:8D:5A:C0:59:00:DA:E8:03:5F:1E:DC:0C:24
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2de6b1b-b09d-4b93-9668-55f8bf19d853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:39:10:a1:08:6b:c9:31:e8:26:7e:e1:32:c2:35:78:4c:5b:
88:1d:81:d1:1f:bb:c0:10:75:0a:46:b3:88:19:1f:56:f0:dc:
e7:70:0b:ec:b4:8b:f5:0c:09:4e:d8:38:59:90:ed:ef:11:83:
b2:3e:bb:a3:bf:d4:bf:63:0b:a4:27:68:25:ea:90:ce:03:b0:
e6:d8:14:7d:39:c8:cb:33:b0:84:17:65:80:5d:64:db:5d:a3:
59:82:f1:f6:c1:96:fb:38:f4:fa:4f:8a:d1:65:49:2d:be:e2:
5c:97:a9:de:1e:44:26:e7:33:1b:9a:fa:0b:49:3f:af:4e:ba:
d1:e9:98:71:c5:21:f6:7e:61:87:e1:87:65:ac:6d:c5:bd:5f:
cc:c8:a8:bb:80:a8:f0:0a:92:ef:1b:77:d2:5b:f8:0e:3b:c3:
0d:bb:4b:5d:62:81:37:b4:27:7c:9c:08:9e:a9:84:c6:cd:0d:
74:20:55:a2:37:c1:a5:4e:49:e7:2f:30:ac:5f:c3:d1:20:ce:
6a:79:9a:d6:d2:a1:bf:11:9e:1d:aa:b1:65:c9:1b:5f:24:98:
77:92:b0:35:db:82:e9:dd:a8:e4:f4:09:cb:2d:48:fb:04:a4:
c1:62:51:99:a4:3d:fd:36:fb:24:5b:1a:f8:04:b2:e1:0b:ca:
cd:a9:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net