Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e261b4d9-a2b0-4c7a-afc3-0e71427edeb9.roa
File: e261b4d9-a2b0-4c7a-afc3-0e71427edeb9.roa (raw, json)
Hash identifier: gWITzJCLqSRBq/9U1g2MjborVJ+Rt/aqD35ew4qXFoA=
Subject key identifier: 65:3B:31:13:2E:20:41:E6:FF:5F:06:07:8F:DC:4B:A1:2C:E5:C1:76
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4A66E62491A792D46E8CB015AE1336A1C2899259
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e261b4d9-a2b0-4c7a-afc3-0e71427edeb9.roa
Signing time: Mon 30 Oct 2023 00:00:00 +0000
ROA not before: Mon 30 Oct 2023 00:00:00 +0000
ROA not after: Mon 04 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:66:e6:24:91:a7:92:d4:6e:8c:b0:15:ae:13:36:a1:c2:89:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2023 GMT
Not After : Dec 4 23:59:59 2023 GMT
Subject: serialNumber=e38178e4fa30bd9390856a19c8177374c6db7d4f2b7f02094955e215715028a9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:e9:d4:e8:a0:39:7d:89:7a:53:16:63:97:
aa:f4:ea:f5:9b:25:c8:f1:c6:dc:e2:b2:39:3a:6b:
91:8e:04:67:69:4a:f3:ea:b1:1b:bf:3e:10:7d:f8:
b8:b9:3c:dc:95:50:16:bb:b7:19:90:87:47:e8:7b:
a6:0e:fd:20:57:14:52:56:75:bd:05:fd:ea:67:43:
03:d3:51:69:c2:ad:fc:ff:99:15:45:a3:74:4d:01:
fd:21:7c:31:1f:fb:aa:5c:07:00:6e:74:a9:f3:15:
9b:c8:25:34:7e:92:f6:c1:2d:a4:ee:c2:8d:71:4e:
62:98:0c:8c:9f:96:27:0d:a4:0c:b6:62:11:87:15:
b5:97:01:83:6b:44:ba:c7:08:48:a9:12:b2:8f:28:
9f:a1:02:21:97:69:da:f7:ed:b3:d4:96:b1:3e:f1:
d5:10:9d:17:85:81:e7:dc:17:3e:50:d5:1f:19:05:
1f:6c:47:db:99:46:35:e3:12:f2:5e:ec:83:c4:87:
31:bf:8b:ff:ce:aa:08:9d:38:3f:14:39:c3:f5:2a:
f3:3b:61:22:f1:f3:06:84:be:e8:bd:61:f0:38:a9:
92:34:d4:27:e7:af:59:05:c4:c1:c1:e9:bf:3d:5e:
8e:cd:fd:4c:4f:4e:f0:0a:de:73:9d:97:5d:c2:22:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:31:13:2E:20:41:E6:FF:5F:06:07:8F:DC:4B:A1:2C:E5:C1:76
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e261b4d9-a2b0-4c7a-afc3-0e71427edeb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9e:7d:1c:49:26:78:9a:b8:71:0a:4e:21:3a:d6:b0:2d:c7:
3b:52:67:67:38:ee:c0:e0:db:af:2a:66:f7:c5:c8:5a:ec:20:
44:e4:dd:3c:00:54:68:ef:b2:95:97:64:6d:d6:2a:6d:46:12:
60:10:44:1b:ce:42:6b:e6:cb:c4:f9:ef:70:54:62:81:64:75:
9a:2b:9b:49:53:a5:b9:09:eb:f0:83:0c:30:24:f5:e6:39:4a:
6d:a0:bf:71:1e:9a:62:75:d0:46:4b:58:8d:52:cd:45:dd:81:
d2:cf:b7:02:d4:1d:17:7c:65:9a:8c:77:f0:b3:1c:86:da:25:
39:dc:9a:fa:bf:17:cc:25:d1:a3:c8:eb:7f:88:f2:8b:a2:12:
94:7d:24:78:d9:ee:15:45:d3:f9:97:bd:08:41:15:09:ac:7f:
d0:10:b5:09:0f:fb:a9:34:45:58:99:ae:da:ba:dc:df:3c:23:
82:bf:fc:a3:a6:69:6d:17:1d:f5:e4:56:f8:f7:f3:c5:38:12:
b9:5f:96:9d:be:49:ed:32:a0:68:7b:56:35:19:9e:c6:ce:39:
1c:2c:59:6a:de:6d:d8:2a:a8:47:6d:32:88:d8:1f:8e:a1:7e:
aa:12:21:36:78:bb:77:7c:3e:f7:75:7d:2b:53:e6:ff:37:27:
6f:2a:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net