Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e070aadd-522b-4bc4-b17e-c44324d8ffc8.roa
File: e070aadd-522b-4bc4-b17e-c44324d8ffc8.roa (raw, json)
Hash identifier: ubQ0I4neWLpebv8xq9Auea/0B+QsKk2RiGcQRNcTdp0=
Subject key identifier: 31:41:31:F6:7F:00:AA:EB:89:E9:13:13:B0:21:54:1F:D8:9E:D6:87
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4626D9142AA6574D973184C565BBD757A02484C9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e070aadd-522b-4bc4-b17e-c44324d8ffc8.roa
Signing time: Sat 11 Nov 2023 00:00:00 +0000
ROA not before: Sat 11 Nov 2023 00:00:00 +0000
ROA not after: Sat 16 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:26:d9:14:2a:a6:57:4d:97:31:84:c5:65:bb:d7:57:a0:24:84:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 11 00:00:00 2023 GMT
Not After : Dec 16 23:59:59 2023 GMT
Subject: serialNumber=4efd165e3eaf99e80d21916a302c6e00f926ff5823b7e6184cea532fabf962a2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:28:63:32:e3:b1:3f:41:8a:9b:bc:ab:29:
2b:e1:91:9e:ce:ba:5c:82:52:d6:07:a8:e3:1c:e8:
b6:03:fc:69:72:54:ad:a1:eb:12:ea:61:5f:20:c1:
75:25:33:3f:c5:6e:04:9f:7d:4d:f5:dc:b8:b3:71:
c5:c6:b7:5c:67:5f:10:47:7d:af:a7:2d:a4:12:99:
38:5a:e7:18:99:ca:2a:59:d8:52:b8:66:13:76:bd:
97:ce:9b:49:b2:47:3f:5e:0a:99:21:d4:2f:7c:3b:
2e:67:22:01:5f:32:5e:7d:01:6a:02:b0:4f:f9:7b:
51:d7:54:2f:fc:a9:58:e3:96:76:1c:b9:b3:de:06:
86:a6:0a:d5:2e:37:0b:84:f3:70:e8:55:7b:cf:df:
0c:86:87:14:36:32:0f:84:79:8a:45:43:da:21:eb:
1a:95:49:88:a4:9e:29:a9:45:f0:b2:76:5e:40:24:
7b:bd:96:ca:b4:51:75:86:bf:fe:e0:f5:52:d1:88:
c1:73:4f:89:08:03:4b:26:1a:80:a3:3a:2a:e2:99:
e3:24:7f:57:b2:12:bf:70:13:09:ce:aa:bd:30:20:
75:3d:f3:73:42:17:a2:19:ec:b4:b7:24:b8:3f:3b:
28:5e:ec:f2:5d:63:73:95:c8:79:92:f2:39:98:50:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:31:F6:7F:00:AA:EB:89:E9:13:13:B0:21:54:1F:D8:9E:D6:87
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e070aadd-522b-4bc4-b17e-c44324d8ffc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c4:5d:ab:d5:25:49:74:c1:eb:31:39:64:91:e3:f6:da:9c:
14:2f:c8:0a:a2:5a:ac:c7:bc:06:ba:0d:7f:88:90:cf:57:ee:
9c:c2:56:06:35:57:cb:0a:c3:16:ee:87:f9:21:33:79:e3:54:
19:cd:ee:30:c0:d8:28:eb:f0:59:28:7f:db:53:24:cd:06:c8:
7c:9f:22:dc:aa:77:99:cf:2a:4c:9b:7c:f2:ec:11:a3:f4:e5:
3a:d2:3e:ec:ef:34:cd:78:dd:ef:12:bf:32:8d:43:8c:09:41:
2e:b0:15:e1:64:ff:3a:27:43:5e:aa:82:cf:6b:ec:f7:05:3f:
0e:a5:c8:fc:6b:89:bd:15:a0:7d:6b:59:da:93:3b:78:49:e2:
7f:39:72:8b:65:3f:96:8f:8e:39:a6:33:a6:0c:e8:85:4a:2f:
1e:af:64:1b:52:9f:1d:06:10:1a:60:56:78:d9:e7:69:41:dd:
5d:d6:7f:c3:87:0e:33:2b:ac:1b:89:af:3e:d8:64:05:df:28:
57:ba:f9:e7:b7:f8:cf:4b:e3:34:90:d5:16:5f:52:48:9b:ae:
cb:92:23:bf:d1:68:89:41:02:3b:75:cb:96:63:03:c1:fb:31:
12:6b:08:10:1d:26:8d:a5:0c:e6:96:56:ed:d1:26:a6:8a:ca:
a2:c5:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net