Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d80ca7ed-a946-461b-a221-9c1874e69fde.roa
File: d80ca7ed-a946-461b-a221-9c1874e69fde.roa (raw, json)
Hash identifier: Wz9xU/Gz0BHfw9QRDiHCzNJJ8r/K1UTlVHpO7vvDVIE=
Subject key identifier: 0C:AB:88:35:88:1B:BC:33:63:54:DE:26:1E:3A:F9:D3:1F:90:02:0A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0432C95DC964427F6A82F547136FCE297ADD0AE2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d80ca7ed-a946-461b-a221-9c1874e69fde.roa
Signing time: Sat 12 Aug 2023 00:00:00 +0000
ROA not before: Sat 12 Aug 2023 00:00:00 +0000
ROA not after: Sat 16 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:32:c9:5d:c9:64:42:7f:6a:82:f5:47:13:6f:ce:29:7a:dd:0a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 12 00:00:00 2023 GMT
Not After : Sep 16 23:59:59 2023 GMT
Subject: serialNumber=9c9895994fc5a8184c4581cfd9b6fea67e8089178652bb5a0a2ac2a082ee95e0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:db:91:26:85:9b:24:1d:07:4d:1e:09:09:
ff:ae:93:48:92:0d:67:a1:3b:d8:bb:b8:c3:ef:ba:
7e:0e:95:9e:36:58:84:d8:eb:95:cd:d8:ec:1e:0d:
5c:a4:85:fa:1f:24:9a:fe:f1:9c:bd:f9:e0:06:d9:
79:65:c2:aa:06:75:39:f1:a1:11:46:d5:65:90:ad:
77:15:92:91:f6:49:5b:e4:f4:97:84:c1:7e:38:01:
7a:c3:a4:8e:e4:fb:52:83:fd:38:49:bf:cf:25:30:
70:9c:1c:e0:87:f4:ee:27:fe:4f:d1:18:e4:0d:b7:
a2:21:82:22:23:be:0c:43:c0:d1:80:77:cc:86:b9:
a0:6a:2d:f2:bf:4d:aa:02:4a:0e:9f:2c:b7:98:5b:
ca:24:8f:f6:6d:27:01:2f:79:1c:41:98:a5:fc:3f:
be:a6:66:fb:ad:65:94:37:9e:ed:1a:ba:b1:14:46:
c5:7d:27:a0:a6:85:7a:b7:52:1a:d9:3c:b9:03:e8:
4b:65:28:e6:d4:c4:cc:14:01:60:67:69:38:6e:b6:
85:95:8f:a0:a1:66:67:2a:76:bc:d1:fe:47:3f:51:
80:da:87:ab:19:36:4a:15:76:4e:28:70:12:84:da:
22:63:a8:a9:f9:a1:fc:d7:03:f6:da:0b:54:d4:11:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:88:35:88:1B:BC:33:63:54:DE:26:1E:3A:F9:D3:1F:90:02:0A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d80ca7ed-a946-461b-a221-9c1874e69fde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:61:6c:cb:00:52:ad:28:66:14:61:3b:ba:53:e3:48:a3:55:
20:81:7a:7a:a8:21:cf:60:82:4c:e3:53:4e:81:e4:5e:9b:4a:
8c:88:08:0a:85:2c:b7:05:a9:4e:d5:da:88:75:5a:71:c8:da:
9e:2f:58:bf:2e:fc:f3:7d:16:99:3b:a9:8f:b2:14:c5:8f:ad:
00:56:0d:1e:ef:e3:c6:89:c5:a4:1f:b7:19:89:a0:23:de:88:
e2:2b:86:48:92:cd:69:8f:29:03:e9:e6:7a:25:76:c4:5a:51:
e8:34:7c:8b:6d:2a:65:41:a3:85:2e:90:0e:b7:1e:95:04:a5:
c0:9e:a8:46:35:d8:5d:82:a4:54:88:67:61:66:c5:05:6f:9a:
35:80:66:77:ac:f4:f5:d2:30:b6:45:2e:af:eb:ff:25:f3:49:
2c:37:9e:6e:01:8c:20:75:08:d4:be:9d:cc:b2:a3:51:27:58:
52:d2:83:75:66:db:6d:d0:01:90:c1:ec:40:3f:bc:43:36:5b:
f1:96:ed:f1:d7:ef:ca:06:59:89:dd:1e:6b:c4:f8:e4:dd:80:
62:ec:f7:18:2d:db:72:16:9c:84:90:2b:90:42:25:ca:b3:d8:
e5:8d:cb:12:45:dd:36:c2:d6:ee:47:80:10:5d:da:29:45:ec:
62:d1:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net