Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e26df7c2-c6a7-4196-bcda-22bdf06223cd.roa
File: e26df7c2-c6a7-4196-bcda-22bdf06223cd.roa (raw, json)
Hash identifier: ta7yLF3rWLbWdiPtddRSMSPVtAbiXu/gMq2ZCzm0/js=
Subject key identifier: 0A:E2:06:FB:C9:3D:8F:26:62:A0:9F:E8:5A:DF:09:7C:2F:E5:4F:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 586397940A62C3F97DAB0481873A2E8F1ED1A662
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e26df7c2-c6a7-4196-bcda-22bdf06223cd.roa
Signing time: Mon 02 Oct 2023 00:00:00 +0000
ROA not before: Mon 02 Oct 2023 00:00:00 +0000
ROA not after: Mon 06 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:63:97:94:0a:62:c3:f9:7d:ab:04:81:87:3a:2e:8f:1e:d1:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 2 00:00:00 2023 GMT
Not After : Nov 6 23:59:59 2023 GMT
Subject: serialNumber=11e335a3a915e0c329d855c27ce027538d13e06741592edaa9f87c60a9bfbffd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:22:96:f9:84:bd:e1:da:86:63:a4:5e:51:
a4:71:c9:35:dd:23:e3:38:c4:ba:f4:03:1c:73:fd:
9f:ea:74:ae:fe:44:6a:4e:b5:f4:0e:51:14:8b:92:
ce:ab:f0:ee:8a:39:ef:b7:57:f2:df:82:b1:78:72:
14:e2:5d:2d:59:04:0a:cc:f5:01:f3:4b:a0:8f:a6:
54:31:17:97:3b:59:a0:ea:38:a2:9d:2b:d2:61:1b:
83:af:32:ea:01:63:cc:4c:f8:1d:33:21:fd:f0:ca:
a3:fb:88:89:68:4e:71:6e:82:3a:2d:18:50:fd:23:
6d:de:25:e5:b7:82:37:05:06:cc:fa:1f:9f:08:4f:
b5:3f:32:38:60:37:80:4d:40:8b:2a:60:65:f6:0c:
8e:f2:5a:b0:3a:14:c5:f6:1f:1d:07:cb:43:cb:95:
4f:64:ec:d5:80:9b:0c:2e:27:65:89:83:f5:79:fa:
4f:8f:96:84:4d:de:06:14:17:39:26:ee:13:2c:71:
01:8f:4d:81:fc:fc:39:83:ac:0f:06:06:cf:7b:ac:
31:f4:7a:08:9b:fb:f2:62:35:32:78:11:42:e0:b2:
2c:7f:c2:95:8c:40:98:bd:0d:42:94:83:0f:00:54:
3a:9e:a4:08:40:e4:67:b1:c5:35:20:c9:6e:4a:8a:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:06:FB:C9:3D:8F:26:62:A0:9F:E8:5A:DF:09:7C:2F:E5:4F:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e26df7c2-c6a7-4196-bcda-22bdf06223cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:38:4c:58:d2:fe:59:aa:f8:fa:7c:b6:5e:0e:26:d3:67:9a:
b4:6d:18:d2:18:0b:c4:e8:cb:ba:9f:70:15:8c:29:ba:1d:9d:
66:68:df:90:d4:10:b1:e5:f6:84:7f:99:78:07:90:09:ea:dc:
b5:36:7a:85:bd:8d:60:25:f1:55:b0:04:ca:5d:bd:b9:21:a4:
c6:e6:57:83:6d:62:75:46:19:0c:17:a2:9d:cd:78:14:d5:a1:
b1:c2:77:23:a5:a4:d4:42:c6:8f:3b:dc:12:d5:9c:70:50:d6:
d8:2b:1b:b4:6a:d5:64:dc:c1:29:93:ee:c5:61:d2:00:ba:88:
c5:f8:52:19:c4:7d:59:4a:ff:ed:16:d0:b7:98:85:29:93:db:
58:18:32:c9:27:76:76:c0:95:a3:93:7b:63:09:49:aa:9f:e5:
9a:6a:2a:ed:bd:1b:e1:23:9e:97:ed:79:36:9e:72:8e:8c:ff:
42:1e:70:5e:fb:63:77:79:4b:42:12:c7:2e:3a:fb:fa:bb:47:
10:d2:8b:b0:21:8f:dc:d8:7e:90:f2:76:7b:d1:a1:3a:43:60:
9d:83:1a:06:cf:8c:96:25:d1:ae:a8:06:bc:14:e3:00:53:47:
0d:97:3d:c2:f0:1e:b8:62:73:51:f4:dd:4c:3e:38:50:64:63:
0d:21:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net