Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfe7e26b-7e55-4ecf-885d-a474aecf83e6.roa
File: cfe7e26b-7e55-4ecf-885d-a474aecf83e6.roa (raw, json)
Hash identifier: 32c7m8Fnn6Fh5FbG7zpUlcH4BUJeXnLFiG9gRtxQL2A=
Subject key identifier: AE:7C:46:B7:40:78:44:7B:92:73:50:AC:23:3E:6B:40:FF:5A:7A:0B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3E7EECC261119BD9723EBFE2EE70264F92D88E7B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfe7e26b-7e55-4ecf-885d-a474aecf83e6.roa
Signing time: Tue 03 Oct 2023 00:00:00 +0000
ROA not before: Tue 03 Oct 2023 00:00:00 +0000
ROA not after: Tue 07 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7e:ec:c2:61:11:9b:d9:72:3e:bf:e2:ee:70:26:4f:92:d8:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2023 GMT
Not After : Nov 7 23:59:59 2023 GMT
Subject: serialNumber=8dd1db68ac1ecb17790f61fa0a6143789a66ae8207439685211a3cad9022c45e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:73:78:27:74:57:ba:b3:2f:2b:15:66:8a:
48:17:ce:3b:a5:43:13:65:2d:21:dd:96:f4:aa:5d:
d8:77:a2:e7:eb:b6:ed:f7:e6:fa:0e:6f:c1:25:17:
81:fe:fa:15:46:4e:f1:83:26:40:f1:e2:5d:2f:83:
a7:c5:96:fb:d6:4d:9a:ac:72:9a:ea:da:9c:1d:ce:
3a:b6:35:84:b2:3c:85:8b:aa:18:9e:c6:42:cd:18:
2b:54:72:e9:cc:a8:70:26:bb:0d:bc:59:27:14:90:
9b:6c:75:5d:16:5e:f1:f8:f4:56:f4:e1:15:85:c4:
b9:3a:74:6e:f4:de:63:ea:a4:8f:22:4e:35:8e:d6:
88:be:7d:0a:d6:5e:a5:b9:b1:38:0e:19:7a:c4:26:
4a:50:3f:4e:c6:31:db:e5:68:d5:00:27:b7:aa:cb:
ef:7b:38:8b:5a:73:40:56:32:bc:9b:d9:17:49:7e:
82:3d:35:29:fd:d6:09:7b:94:39:5a:16:0b:6b:d7:
4c:5c:ad:4c:e6:18:78:c8:55:0e:da:5a:f5:f0:72:
a6:b2:f7:9e:35:65:ed:ed:48:88:4c:af:e1:14:de:
87:fe:ae:46:19:da:71:84:e1:9c:1e:a6:5b:6d:b2:
8e:6a:96:69:8a:6f:ba:88:2d:57:9f:0b:af:25:6d:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:46:B7:40:78:44:7B:92:73:50:AC:23:3E:6B:40:FF:5A:7A:0B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cfe7e26b-7e55-4ecf-885d-a474aecf83e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:59:0f:0d:21:ed:09:ed:57:05:1a:ed:16:e5:22:39:17:c6:
e1:a1:96:9c:29:6a:e6:e7:c6:bf:44:c6:b8:88:cc:63:37:28:
54:fb:7f:f8:00:ae:54:5b:19:7a:ee:1c:55:a4:ad:42:2d:13:
45:f1:e1:b0:70:9d:92:7a:48:5f:7a:3d:25:11:7c:4d:99:9f:
7f:57:e2:29:21:af:b7:df:ac:09:d2:ec:00:72:31:29:30:f1:
40:82:62:da:c0:7a:f9:af:c2:85:b4:f0:c4:a2:71:58:16:1a:
6b:18:88:a2:09:b9:ae:15:74:70:bf:18:55:45:e0:bd:b4:de:
45:76:a4:ce:ef:85:37:50:7c:09:6d:47:cb:0f:68:a8:54:12:
b9:e2:ee:1b:be:08:25:c2:53:2b:43:0e:67:02:0b:c4:e9:ac:
55:52:4c:32:1d:38:f9:51:92:83:70:f7:2f:54:da:c9:37:3b:
ac:c5:ae:55:31:96:40:83:d3:8c:bb:f0:27:a4:db:d5:f4:5e:
21:b9:0c:d5:6a:80:37:de:4b:34:a6:73:83:30:26:fd:80:19:
45:4e:d3:cd:ae:92:f1:d0:98:7b:05:24:75:0e:4a:55:a3:31:
15:ac:5c:ca:41:0a:37:7b:88:e4:8c:51:1a:df:78:94:79:bb:
fd:4a:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net