Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e11b7604-9168-440d-9983-4c3604542d57.roa
File: e11b7604-9168-440d-9983-4c3604542d57.roa (raw, json)
Hash identifier: 2xYM7LqgIcZ3/I5oMXI55Q7829lMN4ZcPXEicj2Ij+s=
Subject key identifier: D7:8E:50:CC:23:A6:D5:F1:BD:4C:E5:EE:A1:C9:1C:DA:AD:BC:EB:5F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 57CA52A40647BEC75FA0FF874DDA680D25BF5817
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e11b7604-9168-440d-9983-4c3604542d57.roa
Signing time: Sun 22 Oct 2023 00:00:00 +0000
ROA not before: Sun 22 Oct 2023 00:00:00 +0000
ROA not after: Sun 26 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ca:52:a4:06:47:be:c7:5f:a0:ff:87:4d:da:68:0d:25:bf:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 22 00:00:00 2023 GMT
Not After : Nov 26 23:59:59 2023 GMT
Subject: serialNumber=d3634666a2f04621411d954d26a84eb478cd4d44ed18fd21d1af29579f37ec44, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:9a:f2:f8:05:48:32:54:93:b3:30:76:60:
34:f3:65:e8:c7:74:6d:b2:ad:a7:17:0d:22:6d:21:
0d:fe:1f:0c:06:7c:a2:ea:ed:42:75:d5:13:cf:8c:
07:7e:0a:40:23:4e:c3:a6:bc:64:5b:bc:51:34:36:
46:cd:4a:17:7d:77:f4:c1:41:99:d3:0b:75:fa:6b:
9c:bc:85:cc:33:75:05:41:bc:ea:6b:d4:bb:bf:0e:
1e:ee:3a:86:d9:26:fc:4c:63:49:52:8a:13:b1:f0:
c6:ab:7d:e1:31:fa:81:43:3d:f8:2a:a7:36:af:23:
a2:af:de:d0:79:79:03:e2:bd:ab:c4:8b:0c:18:69:
fc:b1:f6:f1:26:f2:71:a4:4c:52:fd:28:41:c7:92:
ab:0e:58:74:f6:cf:89:a8:76:1b:72:51:43:52:35:
69:56:7b:52:61:e0:fb:6c:a5:c0:7e:8b:75:b2:e9:
bb:e7:8c:80:d7:63:11:aa:61:5b:4e:b3:d1:f6:5e:
22:ea:b5:5d:05:1c:00:93:85:86:49:18:37:b4:3c:
aa:b7:1f:f1:d2:ef:11:b6:53:8c:e7:2d:0e:3e:f3:
5b:57:6a:61:1d:8a:7d:e9:b2:8a:28:0e:c1:36:37:
8c:ef:57:73:24:d6:c6:92:f5:b3:72:7d:36:2e:45:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:50:CC:23:A6:D5:F1:BD:4C:E5:EE:A1:C9:1C:DA:AD:BC:EB:5F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e11b7604-9168-440d-9983-4c3604542d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
75:69:0a:ad:ab:fa:cd:d7:e7:48:ca:85:b1:6b:82:09:86:87:
83:0f:d1:af:eb:9c:00:41:81:e8:37:af:12:b2:d5:a1:65:ab:
77:7e:90:c6:27:8c:00:1d:41:20:3d:2e:5b:4a:58:11:d1:92:
23:f0:a8:ca:4f:38:7c:6d:0d:1a:02:3c:65:33:ca:3a:47:1a:
06:1e:17:04:43:94:74:44:78:81:15:93:4f:1b:ee:e7:b8:5d:
ef:ea:5d:f7:fc:b1:c0:d0:af:71:c7:fc:f4:c7:2c:25:2f:0d:
e0:dc:10:d3:1f:ba:72:ee:42:27:be:cc:db:a1:91:0e:56:76:
b8:39:f6:c5:03:c4:87:7d:de:b9:74:72:a0:1c:cc:33:54:ec:
19:85:2d:67:dd:40:28:3c:f4:f6:3e:81:2d:74:bc:fd:f6:48:
88:0d:3a:5b:4c:e9:d9:68:71:2d:1b:2e:2f:84:61:6f:1c:40:
27:53:98:8f:ae:e7:30:5b:a6:f6:f3:c2:14:d1:88:9e:38:a2:
db:5f:68:24:4b:b1:76:7b:fb:8c:81:9d:bf:7c:2e:f3:d8:62:
7d:ee:7f:0a:e6:a5:e0:a9:d3:bd:30:89:55:2b:31:ac:59:ac:
25:7e:24:e1:b7:b5:c7:8a:0e:f9:10:35:0d:fb:48:0a:d2:c3:
56:7c:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net