Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e04a0e1a-33dd-4b0d-91d2-3c70b3fb8637.roa
File: e04a0e1a-33dd-4b0d-91d2-3c70b3fb8637.roa (raw, json)
Hash identifier: wJVxkUWlIjbxNXlZ8nzG0D/gCswkjIwCWjCE5bzqwBo=
Subject key identifier: 37:83:91:1E:33:A0:78:EE:FF:20:04:3B:59:14:43:ED:4D:0C:FF:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 280E33207CCBF2191363B377ECB3BEC69EF2B050
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e04a0e1a-33dd-4b0d-91d2-3c70b3fb8637.roa
Signing time: Sat 30 Sep 2023 00:00:00 +0000
ROA not before: Sat 30 Sep 2023 00:00:00 +0000
ROA not after: Sat 04 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:0e:33:20:7c:cb:f2:19:13:63:b3:77:ec:b3:be:c6:9e:f2:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 30 00:00:00 2023 GMT
Not After : Nov 4 23:59:59 2023 GMT
Subject: serialNumber=fe78a96771eb6ea052226e518efdbf02e63134bd9abad9cca646742084b6d992, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:75:ff:cd:d8:fb:c7:7e:e0:e4:60:34:2b:
5f:49:53:2e:6b:61:af:32:07:fb:62:aa:02:24:f8:
99:35:d2:df:3d:85:5c:d4:ab:8f:df:56:73:ca:d8:
ce:a6:9c:50:c6:35:88:eb:ca:93:76:53:44:83:5e:
45:ab:ba:e3:a8:0b:15:dc:35:ee:a7:ca:16:31:d0:
e1:6d:df:d5:47:b4:0f:09:69:1b:5a:2e:6d:16:26:
59:2c:8b:a3:16:f1:06:3d:f8:c3:52:9b:d3:22:6a:
f4:c2:9e:b9:5f:3d:c0:d3:d3:d2:fb:3e:e5:e0:39:
03:8d:f9:93:b7:67:53:e0:a3:98:66:e6:61:42:6a:
b7:5b:e2:05:e6:2c:9c:ba:99:41:f2:28:9b:4c:32:
5b:26:6f:55:37:69:d1:02:5a:2c:33:41:a9:db:f6:
73:e5:3f:c1:7e:09:c1:7a:14:9c:d2:cf:92:b4:f1:
5e:a0:86:00:12:38:f7:34:69:fc:98:9c:87:b5:fb:
14:45:e6:b3:ce:52:86:df:99:8a:b5:60:41:43:c5:
c0:ae:f5:27:32:24:07:bf:ae:c4:b0:22:ce:bf:89:
c5:10:41:31:70:01:f0:5f:6a:29:d1:fc:41:32:00:
a5:55:8c:e8:d7:c0:93:44:9b:d3:1b:8e:c4:30:b1:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:91:1E:33:A0:78:EE:FF:20:04:3B:59:14:43:ED:4D:0C:FF:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e04a0e1a-33dd-4b0d-91d2-3c70b3fb8637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b9:54:ef:6a:53:82:72:af:08:6d:93:bb:13:1a:7d:c7:5a:
bf:dd:21:07:81:f2:27:f3:5e:4a:4b:cf:66:d4:49:c5:79:f4:
a0:14:20:e4:28:34:67:b4:4d:2b:cc:ab:83:be:3d:a7:4c:f3:
94:50:af:e5:db:81:8c:a4:19:ae:b5:d8:c0:72:6f:9d:c8:4d:
52:32:45:af:72:53:63:0a:2d:9b:aa:5e:a4:4d:fe:90:a2:5e:
93:47:82:cc:1d:a9:7f:6e:75:e5:6b:dd:1b:2b:53:be:9a:35:
8e:b5:c5:66:24:50:61:63:20:78:b4:92:9c:9d:09:9b:35:ad:
65:65:73:84:d9:83:f4:ee:f8:a9:bb:c2:ec:58:19:61:c0:76:
26:80:04:95:93:50:fe:f0:c3:6b:d8:87:ee:52:25:87:33:b0:
db:0a:c4:9f:de:ba:56:da:2a:17:c2:60:8d:02:f8:e3:29:be:
52:5f:be:68:fd:1b:7f:1c:9a:cb:68:2d:0b:23:39:b1:69:32:
8e:d9:7f:ae:e2:0b:4d:09:b1:78:19:59:d1:30:04:db:16:78:
a5:fe:b3:cf:33:65:d3:d2:d6:9a:32:63:06:68:20:fb:93:dd:
cc:a5:dc:10:14:b9:25:01:cb:65:89:d7:71:bf:7f:79:74:a3:
bf:c5:f7:da
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKA4zIHzL8hkTY7N37LO+xp7ysFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMwOTMwMDAwMDAwWhcNMjMxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZTc4YTk2NzcxZWI2ZWEwNTIyMjZlNTE4ZWZkYmYwMmU2
MzEzNGJkOWFiYWQ5Y2NhNjQ2NzQyMDg0YjZkOTkyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYPnX/zdj7x37g5GA0K19JUy5rYa8yB/tiqgIk+Jk10t89
hVzUq4/fVnPK2M6mnFDGNYjrypN2U0SDXkWruuOoCxXcNe6nyhYx0OFt39VHtA8J
aRtaLm0WJlksi6MW8QY9+MNSm9MiavTCnrlfPcDT09L7PuXgOQON+ZO3Z1Pgo5hm
5mFCardb4gXmLJy6mUHyKJtMMlsmb1U3adECWiwzQanb9nPlP8F+CcF6FJzSz5K0
8V6ghgASOPc0afyYnIe1+xRF5rPOUobfmYq1YEFDxcCu9ScyJAe/rsSwIs6/icUQ
QTFwAfBfainR/EEyAKVVjOjXwJNEm9MbjsQwsdILAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUN4ORHjOgeO7/IAQ7WRRD7U0M/+EwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2UwNGEwZTFhLTMzZGQtNGIwZC05MWQyLTNjNzBiM2ZiODYzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGG5VO9qU4Jyrwhtk7sTGn3HWr/d
IQeB8ifzXkpLz2bUScV59KAUIOQoNGe0TSvMq4O+PadM85RQr+XbgYykGa612MBy
b53ITVIyRa9yU2MKLZuqXqRN/pCiXpNHgswdqX9udeVr3RsrU76aNY61xWYkUGFj
IHi0kpydCZs1rWVlc4TZg/Tu+Km7wuxYGWHAdiaABJWTUP7ww2vYh+5SJYczsNsK
xJ/eulbaKhfCYI0C+OMpvlJfvmj9G38cmstoLQsjObFpMo7Zf67iC00JsXgZWdEw
BNsWeKX+s88zZdPS1poyYwZoIPuT3cyl3BAUuSUBy2WJ13G/f3l0o7/F99o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net