Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e172b5b9-1fc9-482d-9a4a-db3ac82282ea.roa
File: e172b5b9-1fc9-482d-9a4a-db3ac82282ea.roa (raw, json)
Hash identifier: zQrTOpz87ST23xW69Jt5NcoBWU/sgZyKCOt1NksvQ1g=
Subject key identifier: C0:A1:41:F9:BE:96:AC:57:EF:EE:D1:8E:3C:86:B3:4F:D1:7B:F6:89
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 462A4AD04CE11F9A125E2D3B5C03EDCFAAF9BFB0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e172b5b9-1fc9-482d-9a4a-db3ac82282ea.roa
Signing time: Fri 10 Nov 2023 00:00:00 +0000
ROA not before: Fri 10 Nov 2023 00:00:00 +0000
ROA not after: Fri 15 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2a:4a:d0:4c:e1:1f:9a:12:5e:2d:3b:5c:03:ed:cf:aa:f9:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 10 00:00:00 2023 GMT
Not After : Dec 15 23:59:59 2023 GMT
Subject: serialNumber=654be2639b1f01d4636268c1ecfa8d048fcc1fa33f2df1f630dd12e3c64376fa, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:7b:d6:ef:13:b3:db:2b:12:f2:44:d7:84:
ce:93:4c:5c:8b:06:41:aa:79:f9:16:c1:85:aa:02:
c0:36:8a:1d:fb:60:9d:49:a1:88:1b:93:3c:2e:99:
12:39:fb:88:4c:6e:cd:df:30:73:42:fa:f3:47:f9:
26:2d:c3:5f:e0:54:57:00:6f:96:35:53:3b:6b:fc:
d3:60:2d:b9:df:4d:25:b5:27:ab:96:75:3d:41:f1:
00:cb:f7:ed:85:e1:43:b9:59:20:9f:3f:ec:d5:77:
40:f0:3e:3c:ed:e5:47:30:0c:18:8d:21:02:26:0b:
0b:1f:c8:0f:f1:69:fd:fd:34:ef:eb:79:c1:26:6a:
75:12:b2:41:2c:1a:eb:bc:f7:a8:fb:ac:c5:02:b7:
1a:61:61:09:77:68:67:85:88:33:7d:0d:ce:e5:09:
93:8d:3f:60:32:9f:92:48:13:a0:29:5d:62:43:f2:
f7:5b:3b:61:47:65:40:d9:fd:b9:0c:86:b4:c8:d5:
2f:2b:03:3b:44:bf:f2:ca:2d:a2:3d:39:0d:b6:4d:
f2:e3:4e:f3:ec:83:bd:6d:c4:ba:5e:9e:62:a3:ea:
59:14:39:38:2f:c6:fc:cd:8a:c6:11:47:48:58:71:
80:86:a1:83:f1:0a:2b:31:69:49:bb:ee:df:d5:aa:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:41:F9:BE:96:AC:57:EF:EE:D1:8E:3C:86:B3:4F:D1:7B:F6:89
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e172b5b9-1fc9-482d-9a4a-db3ac82282ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f5:19:c6:6b:56:3a:c3:70:d9:a0:02:71:db:72:99:d8:c1:
83:cc:e5:9e:02:30:8e:63:31:d5:51:ed:f9:a5:03:d4:e0:28:
b9:22:b1:c5:fe:84:08:53:1c:d1:7f:c2:f8:58:cf:99:c9:5c:
12:7f:bc:34:58:bf:ec:2d:be:e8:7c:5f:d3:b3:fb:01:cf:e5:
39:11:81:73:3e:75:a0:f5:0b:65:34:99:28:4c:72:6e:02:a9:
13:26:73:fa:79:4a:6d:17:50:40:d8:07:2a:e4:1f:e0:36:22:
86:4c:8b:f0:e3:b0:ac:9a:52:5d:fb:dd:85:b7:fb:a4:c8:de:
53:9d:e8:63:e3:89:88:bd:e5:84:df:5c:dc:b2:9a:01:16:1d:
62:c6:a4:cf:e6:8c:27:59:6a:b0:e6:f4:66:6b:58:07:64:92:
1b:b9:6a:2e:df:2f:6c:e7:2e:7a:b8:52:d6:29:f5:25:b2:f9:
27:7a:93:d4:5f:a1:4f:b0:ed:65:08:9e:e7:39:73:53:29:ff:
e2:b6:1b:e4:23:85:31:d7:62:92:5e:7a:9b:fc:0e:57:e6:f2:
f3:78:81:aa:72:b8:96:ae:0b:36:b2:81:7d:30:12:a7:92:b0:
72:b9:b7:b5:7e:c0:31:ef:4d:48:b6:cd:72:98:39:d6:14:1f:
81:41:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net