Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cdedb4d8-2bbc-4ca8-a0c4-f3892a3a521f.roa
File: cdedb4d8-2bbc-4ca8-a0c4-f3892a3a521f.roa (raw, json)
Hash identifier: DQEycLm51lmE/rq8EZbbp7IQciMHhWI2dzmawVLEMnc=
Subject key identifier: 60:97:FB:7B:7F:05:2A:8E:40:8F:80:12:76:3D:A5:9A:B6:8C:28:B0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2C5C9DECEB820A0FC03E985ABD200078099CE5A3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cdedb4d8-2bbc-4ca8-a0c4-f3892a3a521f.roa
Signing time: Sat 26 Aug 2023 00:00:00 +0000
ROA not before: Sat 26 Aug 2023 00:00:00 +0000
ROA not after: Sat 30 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5c:9d:ec:eb:82:0a:0f:c0:3e:98:5a:bd:20:00:78:09:9c:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 26 00:00:00 2023 GMT
Not After : Sep 30 23:59:59 2023 GMT
Subject: serialNumber=13859bbc9ddcb26fa756a5d4cf8aeb3f973c354215db1290ed22e48de9c4fd5c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:57:3a:fe:39:f1:80:9a:fc:d0:b2:28:19:
21:5e:ec:f6:a8:c7:c7:ff:61:80:b0:96:81:21:e6:
e7:a0:49:c7:e9:e2:7e:58:04:a6:9f:88:c0:56:62:
92:68:69:73:06:ab:7b:fe:1a:81:72:3c:14:54:3f:
2b:80:70:b9:07:98:58:61:f2:ab:00:d2:b2:e8:c1:
bc:3d:c2:53:fe:b9:cb:3c:a8:27:75:9a:13:dc:e2:
ad:56:76:b1:29:2b:00:f4:6f:da:5e:89:e6:87:9d:
f0:31:5f:9b:45:e3:b7:4e:fe:da:6f:48:4b:42:3c:
f9:fa:f1:01:c4:b1:c0:db:4c:0f:b5:ce:32:75:35:
26:72:73:30:a2:21:0f:8a:9c:e0:4c:fc:aa:08:e6:
86:b8:d2:81:fc:3f:65:ac:04:6c:50:31:31:b8:8b:
a1:9d:6c:62:26:4d:78:de:40:95:64:c6:e2:fd:2c:
ce:51:60:14:d1:20:34:f3:c7:4a:52:ad:c2:84:68:
a6:58:2d:19:d2:fc:e1:4c:86:c0:a8:ff:18:85:6b:
5a:8a:65:65:0e:92:5d:f6:a8:59:f0:14:d1:0d:ab:
d7:4a:8d:ab:55:16:05:3b:bd:60:59:a0:47:c8:3c:
b3:ff:9e:81:f2:dd:b9:b2:1c:eb:83:a6:60:9e:53:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:FB:7B:7F:05:2A:8E:40:8F:80:12:76:3D:A5:9A:B6:8C:28:B0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cdedb4d8-2bbc-4ca8-a0c4-f3892a3a521f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ad:63:ca:06:04:31:2f:e2:35:03:4e:df:3e:73:10:98:ce:
d3:4a:ee:52:78:47:91:35:7d:07:80:d0:42:80:d0:f4:01:8b:
1a:57:d2:c3:6c:2a:0a:ed:0e:11:ff:d9:e0:97:06:14:cf:11:
6b:0d:bb:47:3f:ed:92:30:c3:bd:b5:e7:c7:75:e7:3c:4c:36:
55:96:df:5f:8c:bd:7f:e5:3f:70:53:31:76:73:91:de:22:13:
5f:c1:6a:49:6f:d9:34:5a:c4:db:04:81:67:48:bc:49:b3:eb:
95:be:39:69:fc:38:cf:4d:d1:7c:cc:53:70:9b:76:f0:79:af:
1c:ef:aa:31:fa:b2:79:0c:e7:57:d5:b9:91:26:c0:74:93:30:
50:52:b0:f5:fb:47:6d:35:e7:4c:e5:8c:2a:79:b7:4b:af:ca:
39:f3:20:f7:4e:64:bc:1d:6d:9f:1e:9e:b1:b7:06:b9:e1:20:
42:cc:6e:0f:5f:db:51:66:13:d9:e2:12:95:e8:a1:b4:b4:bb:
fb:bf:f0:24:af:ab:04:6e:2d:63:c4:d0:1e:5b:0b:72:9d:cb:
f5:5c:81:0b:5e:6a:b8:60:6a:fd:1a:d9:41:af:e3:d9:c0:2d:
b3:a4:e6:ab:26:83:c5:43:63:4a:d8:f3:16:13:4e:55:39:a4:
9c:f7:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net