Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c66d555a-c195-4713-bfe8-953ddbe57177.roa
File: c66d555a-c195-4713-bfe8-953ddbe57177.roa (raw, json)
Hash identifier: g/Hkz7SAHiSj8SU2w19mdMGAAJpMk988LHbJeBRQo74=
Subject key identifier: 33:EB:6F:F5:82:99:90:83:9A:A9:F7:8E:CF:57:3E:30:BA:DC:BA:B6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 54ACDCE0F885FCADA59F6D7F472F67B89FC5CF66
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c66d555a-c195-4713-bfe8-953ddbe57177.roa
Signing time: Thu 21 Sep 2023 00:00:00 +0000
ROA not before: Thu 21 Sep 2023 00:00:00 +0000
ROA not after: Thu 26 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ac:dc:e0:f8:85:fc:ad:a5:9f:6d:7f:47:2f:67:b8:9f:c5:cf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 21 00:00:00 2023 GMT
Not After : Oct 26 23:59:59 2023 GMT
Subject: serialNumber=f22c83d5b06038a1bbf2022af8b24366a57c0c1673117005928efec7c17f15f0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:a2:04:d3:41:c1:52:be:ad:36:cc:9d:04:
90:6e:a4:7b:84:8d:7c:ea:a2:5a:a4:e0:5d:e6:ff:
d8:33:dd:64:93:cc:f6:40:53:e1:95:48:7f:a3:02:
c7:a2:4d:83:97:19:e6:ad:b7:9a:8c:55:6c:7d:55:
bc:b8:2c:e3:a5:05:85:65:f4:c8:fa:3b:cd:4e:0a:
37:8f:be:d0:d4:3f:a6:de:99:d8:3f:c2:fc:9c:19:
40:ba:14:43:b3:f9:40:89:79:ef:a5:91:9f:61:78:
15:20:4e:cd:1b:17:5f:68:e2:44:8e:09:ca:b7:ad:
3b:69:ac:94:a4:dc:2b:ac:96:62:3f:96:4d:07:3e:
ad:13:bd:0f:89:94:30:dd:84:2d:3e:7b:49:c3:c0:
7d:47:f3:99:ec:a6:f3:75:53:88:5b:f9:5b:30:b5:
7b:23:8a:99:3e:f2:0e:dd:0f:61:04:64:4f:7c:c8:
52:47:b3:5a:cf:7f:fb:e5:73:e2:41:be:f3:5d:e0:
48:ce:9e:99:39:d8:15:c8:93:b7:da:10:42:b8:86:
6c:3d:2d:26:b8:0b:c2:d4:84:b4:47:90:72:c8:cb:
eb:a6:4a:17:ce:e2:45:42:e6:b3:d8:71:f6:3b:1b:
8c:7f:9f:53:8d:fc:de:0b:ac:46:b6:d2:85:3d:e9:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:6F:F5:82:99:90:83:9A:A9:F7:8E:CF:57:3E:30:BA:DC:BA:B6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c66d555a-c195-4713-bfe8-953ddbe57177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a0:de:c9:08:26:49:44:45:81:76:2f:69:16:1a:eb:1e:7d:
be:53:8b:e9:08:9c:90:da:48:be:98:e2:4b:13:22:29:d6:fc:
08:16:c0:0a:9e:8a:cb:7c:e9:9e:13:8a:7c:c3:39:41:ea:80:
47:a7:47:20:95:7d:e2:9b:d1:81:5b:15:77:03:74:27:90:ae:
15:38:99:fa:8b:fa:b9:af:03:b0:59:e7:18:06:10:c9:36:22:
6c:22:f2:57:34:ee:52:f7:47:67:a0:a9:1c:05:5f:b0:7b:3f:
50:d8:e8:90:73:e8:77:11:ed:0b:97:ce:50:f1:85:ce:bb:8d:
b6:1d:0a:87:76:db:c3:a6:f0:1a:be:d7:d6:30:95:8f:19:2e:
da:39:04:ed:08:25:fb:0a:7d:95:f4:13:74:63:3d:31:96:62:
6c:c5:5a:6e:c0:0e:df:db:c7:b8:e6:c3:51:98:33:f2:e6:d3:
58:60:f0:2c:86:40:88:db:31:65:33:99:ec:95:a4:9b:57:ca:
44:41:6a:77:79:01:be:9d:6b:9f:25:42:f3:f1:79:38:21:4b:
00:bc:69:71:b4:06:62:be:d4:24:ff:40:26:98:d6:9e:ae:f0:
64:51:c3:01:f9:21:89:49:44:e0:49:62:c3:64:15:60:05:7f:
8f:54:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net