Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4d0426b-2b06-4b34-8d6c-fd9f77bed86f.roa
File: d4d0426b-2b06-4b34-8d6c-fd9f77bed86f.roa (raw, json)
Hash identifier: pS5oeliH0AjKuWsRzpcWb3CIa10yov02/n2rvYhqsc4=
Subject key identifier: 80:4E:C1:8B:D5:9C:62:07:7C:76:C7:C0:9B:3C:73:1F:96:33:E7:62
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2AE303736A57103A6BADF78EE5B9E85F88D8AD50
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4d0426b-2b06-4b34-8d6c-fd9f77bed86f.roa
Signing time: Mon 13 Nov 2023 00:00:00 +0000
ROA not before: Mon 13 Nov 2023 00:00:00 +0000
ROA not after: Mon 18 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e3:03:73:6a:57:10:3a:6b:ad:f7:8e:e5:b9:e8:5f:88:d8:ad:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 13 00:00:00 2023 GMT
Not After : Dec 18 23:59:59 2023 GMT
Subject: serialNumber=7679c05736c8231ee928d8f3bace174976f58783b80adae4cc98c93b1cdd4746, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:fb:a1:4e:24:a5:54:35:91:96:ba:a2:75:
3a:66:18:1a:ca:b2:43:41:a2:cc:99:1f:d9:88:e6:
28:7c:c6:61:59:84:78:74:31:e0:4e:79:be:c3:65:
1e:96:6a:b0:81:21:a7:c3:5c:27:21:54:f3:95:2a:
de:70:90:a9:de:92:88:b2:e5:d2:ff:f8:2f:0c:f3:
d2:0f:db:2e:6d:2a:13:a0:97:ae:e1:d6:24:4f:95:
4b:ee:55:0c:7b:e6:de:b0:b8:d7:07:a2:93:0c:3a:
30:e5:1f:72:a9:0d:cb:2b:b7:eb:44:5f:43:c8:6c:
ef:49:60:3a:39:93:03:1b:70:23:b1:88:b0:33:42:
f4:9c:31:da:37:c2:ad:14:20:75:31:69:46:a3:fa:
c0:33:dd:38:85:22:d5:20:7e:29:e1:4f:4d:37:7b:
98:df:54:41:f8:a4:0c:58:05:31:83:ff:26:10:ae:
4b:73:16:4b:6a:3f:e7:24:f0:99:7f:31:7b:4a:b1:
7c:8b:de:d4:0b:db:74:b5:28:72:7a:64:50:eb:24:
3f:b3:ea:87:80:ee:a5:ba:4a:20:64:45:e8:38:d7:
64:67:cf:b1:97:7d:2c:5d:dd:92:11:2d:15:00:23:
6b:69:57:19:c7:0c:21:78:b5:9b:77:76:b8:6e:a6:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:C1:8B:D5:9C:62:07:7C:76:C7:C0:9B:3C:73:1F:96:33:E7:62
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d4d0426b-2b06-4b34-8d6c-fd9f77bed86f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:97:43:a6:cc:02:69:64:0c:57:d1:10:b4:92:41:aa:12:3a:
1e:8d:23:4f:d7:a5:df:fe:ed:d0:ec:0b:8a:98:16:66:ce:fa:
a7:da:92:2f:7a:aa:37:80:6f:0c:44:ec:10:c4:f7:7f:14:b8:
55:42:f4:9f:42:42:14:c6:65:88:4e:f3:0b:63:9a:52:94:06:
0f:de:42:17:eb:d1:53:02:e5:b4:88:2e:53:9b:cc:98:86:c6:
d4:b6:75:ff:70:77:f6:0e:e7:35:6e:64:ac:a2:9d:32:42:d6:
e1:7c:7f:3a:b2:e2:bb:9e:78:82:71:d8:38:68:2b:68:3d:4c:
bd:b5:5e:3e:b8:ad:fe:e6:e7:44:b0:20:d9:69:02:98:8e:d0:
cf:da:67:9d:0e:27:6f:0a:f2:52:ae:fd:2f:4e:ae:4e:eb:c2:
00:bf:ba:01:97:bc:ff:7b:f4:be:9c:39:e7:7a:3f:0e:a5:f5:
96:c8:4c:d3:e6:4f:66:3e:80:e2:8b:7d:87:f0:aa:34:04:72:
ee:66:3f:9d:85:96:6f:c5:5f:9b:40:28:4f:b2:f3:b1:d6:7d:
d0:51:e4:3f:b1:6b:80:2e:09:b2:6c:2c:1e:9f:65:20:c5:e1:
c8:3f:c0:c2:b6:53:db:a6:f4:a1:9e:c5:ae:27:43:49:f0:4c:
59:ad:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net