Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8ad9a08-c260-4360-a114-0e8fe392b0e5.roa
File: e8ad9a08-c260-4360-a114-0e8fe392b0e5.roa (raw, json)
Hash identifier: iTXyOxmBXL2jEHNRvUqu1Ot6fa66sSU/rN9jfYVJqAI=
Subject key identifier: E0:72:21:79:16:E7:6E:01:76:3F:E5:6A:0A:D1:C8:FB:A5:45:92:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 588A61019FDE53CFD54A1E95CFAF7251B5820018
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8ad9a08-c260-4360-a114-0e8fe392b0e5.roa
Signing time: Sat 30 Sep 2023 00:00:00 +0000
ROA not before: Sat 30 Sep 2023 00:00:00 +0000
ROA not after: Sat 04 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8a:61:01:9f:de:53:cf:d5:4a:1e:95:cf:af:72:51:b5:82:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 30 00:00:00 2023 GMT
Not After : Nov 4 23:59:59 2023 GMT
Subject: serialNumber=4592a097485d001be58d0449edab67f26a52ba9b3ce13c334cc830f1785e1583, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:64:e3:4d:75:f7:e1:eb:78:80:58:6a:36:
90:1e:ef:e8:29:d5:34:fb:4b:7d:e6:c8:38:2e:86:
f2:6c:4b:b0:78:be:e1:c2:da:a1:91:aa:9b:66:0b:
3c:76:cc:62:05:6b:5a:f7:fa:d2:09:5b:a8:f0:71:
03:79:2c:ec:d5:15:01:6b:56:4a:f9:84:ae:ed:2e:
50:5b:67:ac:0a:11:a6:a5:c2:ab:3d:a7:5d:8f:f9:
c3:41:37:7d:2f:dd:ae:c1:a6:8f:99:58:30:72:55:
90:64:f8:f1:bf:40:08:7b:20:6d:e8:e8:d2:e2:99:
a9:a4:7e:27:20:70:6b:bd:33:e9:bb:1c:31:64:36:
7d:18:00:d2:50:36:21:c6:d8:3a:1a:46:b1:c6:31:
1e:8f:87:22:74:f8:91:b9:ae:b9:9d:45:50:ab:ac:
6e:24:55:97:fa:d1:d6:47:9d:32:18:a6:c3:4e:0a:
6e:02:b0:de:04:73:bd:e2:08:c4:2f:1c:af:89:87:
91:a6:e4:87:4f:45:48:14:fe:d8:82:aa:f9:ab:92:
71:66:34:c3:12:50:4a:b0:45:a0:8e:be:ba:62:b0:
39:40:64:75:48:bd:2b:9c:01:c7:bd:3f:af:41:90:
0b:5b:cf:e8:01:56:dc:6a:d9:2d:e9:ce:4c:59:b5:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:21:79:16:E7:6E:01:76:3F:E5:6A:0A:D1:C8:FB:A5:45:92:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8ad9a08-c260-4360-a114-0e8fe392b0e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
25:82:22:85:22:31:31:47:ae:bc:ce:d2:da:00:0c:39:4c:22:
80:72:49:e5:00:d5:e9:c1:23:20:c2:10:0f:43:5b:eb:00:3c:
6d:55:4d:ac:04:37:71:55:ef:c4:c0:18:c6:9c:38:c9:7f:ae:
5c:f8:49:5c:6f:38:88:20:e5:b3:57:35:a7:ff:6f:1a:cc:b8:
6b:33:79:ce:e5:2a:a8:24:c0:47:e9:6b:43:b2:56:ce:c9:10:
ad:b0:65:ac:cc:5f:1c:7c:48:0a:68:0d:8e:8d:41:97:80:63:
71:17:16:ee:1c:2c:0e:a2:59:91:2b:a9:85:8b:7c:05:53:d4:
c7:c6:ca:f7:2b:84:4c:3a:a3:fa:48:d2:1b:e8:09:3e:fa:03:
5f:bb:c1:32:27:c4:1b:df:a0:5d:f1:3a:f3:11:ca:32:03:e3:
3b:32:fe:f6:41:dd:90:a2:19:1c:97:1a:24:29:8e:f6:e1:10:
b9:28:a1:36:62:ed:3a:77:6e:01:03:b7:e3:3b:9e:45:a9:9c:
a5:87:0f:75:9c:6d:6a:f3:11:fa:73:1d:e5:15:53:de:29:77:
93:9a:8b:4c:98:c6:64:9a:73:e7:d7:7a:90:e3:3d:70:3a:26:
1e:73:c4:70:67:3c:14:9d:48:29:2f:47:db:bf:44:8b:95:5b:
60:d0:c8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net