Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c624fe9d-c628-4ac3-a7b4-45526f1833ea.roa
File: c624fe9d-c628-4ac3-a7b4-45526f1833ea.roa (raw, json)
Hash identifier: yn/3S0Fl0kDhw29e5MrHLoaTufdOe/lnVlEqtrfRbG8=
Subject key identifier: 97:A6:9E:35:19:ED:B2:AA:3B:67:70:EC:F0:1B:9D:80:73:9E:1F:55
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CC78E8C66F8551088095E034D79CFDEB426C8ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c624fe9d-c628-4ac3-a7b4-45526f1833ea.roa
Signing time: Tue 04 Jul 2023 00:00:00 +0000
ROA not before: Tue 04 Jul 2023 00:00:00 +0000
ROA not after: Tue 08 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c7:8e:8c:66:f8:55:10:88:09:5e:03:4d:79:cf:de:b4:26:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 4 00:00:00 2023 GMT
Not After : Aug 8 23:59:59 2023 GMT
Subject: serialNumber=3bdf8d8cf0b1a5d2796ef57bb8a15b8978d2f3f00a35c949dc3f2ba9e683cc88, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:71:a0:c8:96:c6:20:f4:d7:a9:c9:30:6d:
2b:cd:70:fe:07:6e:b0:81:af:88:1b:f0:43:3a:74:
ef:99:c5:70:76:14:78:7e:d2:68:f3:56:b5:2c:2a:
6c:99:68:2c:c8:cd:aa:91:bf:00:a3:b6:1a:96:03:
10:2a:5f:eb:d1:40:2f:74:b1:23:0d:fa:d1:0f:84:
db:ad:ad:73:bd:ff:71:88:b4:9a:e1:c2:fb:b9:0a:
35:f8:d6:82:15:c3:ff:f6:96:0c:e0:89:0b:4e:38:
d6:31:fe:08:21:80:a1:68:d9:b5:e8:36:91:98:5a:
b4:3e:69:5c:91:8a:ce:ba:d4:f0:72:52:7e:3e:e4:
cf:04:94:41:cc:87:67:53:8d:17:86:54:12:2d:56:
bc:12:5e:e4:a1:0d:2f:b5:3e:4a:3b:b7:74:b2:d1:
79:df:18:57:30:4c:a3:37:d0:b5:74:d8:2e:32:5c:
19:72:dd:27:69:7a:43:0f:58:8a:6a:ad:17:32:f2:
8d:22:26:4f:3f:4c:ec:45:f0:57:58:6b:4d:54:ae:
aa:7a:60:43:ed:76:c9:66:e8:f6:0e:9e:4e:f8:60:
e0:8e:e2:0d:59:18:10:bf:38:47:47:9c:d2:a9:1b:
7b:11:31:30:0f:6c:42:af:d5:05:6e:da:5e:9a:d2:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:9E:35:19:ED:B2:AA:3B:67:70:EC:F0:1B:9D:80:73:9E:1F:55
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c624fe9d-c628-4ac3-a7b4-45526f1833ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:27:7d:bd:9a:23:6c:21:c3:cd:72:ee:c6:33:fc:81:66:c2:
d8:18:a5:0e:cc:20:bc:44:82:1f:98:6e:56:8b:12:8a:a9:2a:
c3:10:3f:37:0e:9c:67:7d:2e:35:4b:2a:65:36:81:fa:bb:ca:
74:d4:79:66:0d:5d:fb:62:7e:9d:36:07:84:7c:f7:7f:16:08:
1d:ab:22:ee:77:98:0a:b0:3d:10:5f:f7:98:29:e5:06:db:8b:
0c:c9:a1:c7:38:2c:46:2c:3c:de:54:09:96:0c:03:61:89:c4:
ac:a9:70:2a:95:fe:c1:b0:28:7e:df:6e:34:07:28:35:0e:34:
54:20:0b:89:35:24:5f:91:c6:c9:d9:d9:2f:b0:76:e8:8b:6c:
78:43:98:51:41:66:06:80:7c:75:5d:37:e5:92:24:12:44:40:
fb:52:ed:c8:45:5c:ea:f1:02:8c:9b:cb:47:94:a8:d4:78:14:
df:68:b5:51:ea:70:da:4c:20:f4:e6:32:01:df:61:2d:4b:41:
99:b7:4f:cf:cd:53:0d:73:67:80:7a:8a:19:23:65:27:20:ef:
12:69:77:e8:44:6a:e0:00:a5:d0:a6:c0:51:7f:d6:6d:01:2f:
8e:1a:fb:8d:fe:d9:e2:dc:85:8e:83:8f:8f:f2:e2:4f:dc:86:
bf:b4:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net