Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6ec975a-29e7-425a-88be-4568425d0a95.roa
File: c6ec975a-29e7-425a-88be-4568425d0a95.roa (raw, json)
Hash identifier: snoh4W9Q/5oacI+8Om4fF0vXcVpQNpdJZW85FSM08oU=
Subject key identifier: EF:65:A0:97:13:D3:46:C9:62:9E:72:9E:7C:71:DB:7A:20:91:64:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1D7EF1D020155A8B679EEC2C5612B66AC599C5A4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6ec975a-29e7-425a-88be-4568425d0a95.roa
Signing time: Thu 13 Jul 2023 00:00:00 +0000
ROA not before: Thu 13 Jul 2023 00:00:00 +0000
ROA not after: Thu 17 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7e:f1:d0:20:15:5a:8b:67:9e:ec:2c:56:12:b6:6a:c5:99:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 13 00:00:00 2023 GMT
Not After : Aug 17 23:59:59 2023 GMT
Subject: serialNumber=66a2a3b233546bcf377d8fcfbaeec74564b46a6e4418411ab407cebd7fdbbeab, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:46:10:00:34:11:ef:ac:96:04:fc:d0:b9:
5d:77:e6:e0:9a:83:b2:69:d4:e4:d6:01:2e:e0:2e:
1a:16:d5:f2:da:22:f6:fc:55:9f:25:df:da:2e:1b:
9d:d8:15:e7:92:af:39:90:03:fd:46:5e:b5:4a:e1:
27:96:1b:73:f7:2e:85:d6:af:68:d5:9d:44:75:1d:
5a:3e:64:1b:d0:c7:18:34:76:fb:15:0e:f1:d3:24:
19:01:f7:eb:2d:a0:51:77:d0:95:c9:1e:56:4f:4e:
b1:3c:86:59:0c:f8:78:7b:7d:73:d3:d1:90:c5:8f:
0d:1b:89:b3:cd:d9:90:f2:24:e4:a2:2c:bb:94:03:
9a:40:25:72:ec:45:72:90:87:d1:ad:b5:30:9d:09:
ee:51:63:8c:ac:32:cc:2e:41:d8:55:4a:d6:55:cc:
35:1b:76:7b:2c:c6:3e:3c:35:48:11:8d:ca:0f:09:
77:37:00:6e:f5:35:79:26:c3:c4:05:41:ae:98:7a:
14:cc:ab:d9:ed:3e:94:a6:34:eb:e4:2f:7d:56:69:
0c:65:b1:2a:eb:a2:1c:2c:eb:c8:52:ff:91:b0:66:
df:17:72:e5:f2:e8:4f:e7:6b:66:d6:ba:41:07:69:
fb:70:59:f5:f3:99:30:24:ed:82:ba:5f:e4:05:8a:
91:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:A0:97:13:D3:46:C9:62:9E:72:9E:7C:71:DB:7A:20:91:64:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c6ec975a-29e7-425a-88be-4568425d0a95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c8:88:b6:5d:a5:40:84:22:28:19:22:c5:21:41:60:1c:bb:
b3:5d:68:21:6a:0e:09:08:3a:41:63:e9:2f:26:16:3e:97:fa:
3f:de:f7:3b:f0:0d:66:5e:35:47:e0:b5:6c:74:06:d2:ff:5d:
23:f1:85:ce:2e:0d:9b:8e:65:4f:ec:e0:ff:f8:57:90:c2:6a:
94:29:8b:ef:a5:dc:d1:4f:29:ab:0a:92:a8:62:a9:f8:38:44:
45:2f:45:a4:50:f9:1f:8a:e5:3e:ce:c9:34:93:c9:41:af:f0:
ae:4e:80:d3:ee:e6:11:61:e9:0b:18:52:85:23:0e:72:eb:78:
2f:27:38:d3:2a:3b:34:ea:4b:37:bd:68:40:79:64:d7:60:3c:
23:a7:84:59:1a:af:2e:d4:0f:53:1c:53:b9:74:ca:ab:8a:2f:
ed:90:5d:b7:04:9f:80:10:d5:75:d8:bb:54:37:13:93:bc:ec:
e5:ad:d8:59:a8:33:47:1e:d0:dc:97:f2:f4:af:d3:b3:50:75:
d5:b9:14:11:e3:a6:45:16:b6:7e:e5:3a:7f:81:c8:28:fa:78:
5c:49:d8:79:93:4a:21:26:be:69:88:c5:2b:23:a8:37:66:17:
5e:d5:4f:af:cc:98:f4:bb:0d:92:de:39:9f:c9:fa:ab:98:45:
11:42:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net