Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9ff5209-c09c-4ac0-83b6-c82b42cae792.roa
File: e9ff5209-c09c-4ac0-83b6-c82b42cae792.roa (raw, json)
Hash identifier: YrPo4vcn1MaLzx3MT4H6s9mYXGG4g9+TqjA305viQDQ=
Subject key identifier: 68:59:98:CE:4F:B3:7F:93:7A:7D:D1:98:11:86:AE:6F:62:1D:A3:D4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C9E6FF2FA990CA07A0B03F71F6EC0BF76FE03DD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9ff5209-c09c-4ac0-83b6-c82b42cae792.roa
Signing time: Mon 17 Jul 2023 00:00:00 +0000
ROA not before: Mon 17 Jul 2023 00:00:00 +0000
ROA not after: Mon 21 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9e:6f:f2:fa:99:0c:a0:7a:0b:03:f7:1f:6e:c0:bf:76:fe:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 17 00:00:00 2023 GMT
Not After : Aug 21 23:59:59 2023 GMT
Subject: serialNumber=1e4077a0aa664ab2625d0bea9090e92c98d25dfcb2797bc41a541033b662b08d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:02:10:69:24:f1:48:e0:17:5c:88:1b:ed:
df:50:5d:d2:c6:21:50:c1:3b:9f:35:36:63:98:3b:
bc:ce:04:3a:3d:27:4c:c0:fc:f8:d8:da:9b:58:6c:
60:3e:32:eb:9f:0c:1d:dd:4e:08:b1:3e:59:4f:54:
8c:6d:da:b9:2d:7f:97:7d:30:da:9b:9d:3e:98:5d:
86:07:72:8d:26:86:57:e1:ff:ff:bf:c4:05:c0:eb:
ea:7f:1f:cc:bf:81:ad:95:90:cd:64:d5:42:2c:c7:
93:61:fe:c1:17:c6:db:32:61:97:67:db:ce:e0:49:
76:14:9d:b2:31:9e:3c:42:cd:3a:61:30:76:80:2f:
ad:18:61:41:d3:2d:e4:80:b7:40:68:84:2a:7a:06:
34:be:d3:76:29:ed:9f:cd:ce:4f:74:6f:b3:17:da:
b5:aa:fd:a8:7f:79:f5:f6:a7:2a:a6:40:7c:e6:51:
1a:47:74:f1:dd:e2:70:8a:e5:d4:70:e4:11:12:8a:
b5:19:c5:2e:ff:cb:38:33:87:28:e2:83:ff:f6:ae:
96:9c:df:06:01:15:29:93:b2:52:e4:8a:dd:dd:29:
52:cc:0a:c2:08:92:2c:a4:28:c1:45:84:d1:25:96:
b8:12:f6:43:a3:0e:8d:4a:48:31:f2:bc:9e:aa:b9:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:59:98:CE:4F:B3:7F:93:7A:7D:D1:98:11:86:AE:6F:62:1D:A3:D4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e9ff5209-c09c-4ac0-83b6-c82b42cae792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2d:ca:29:c2:d4:5f:e3:2c:05:6e:44:a1:f3:41:c5:4a:c5:
85:b2:7f:ee:5d:2e:78:0b:e6:9a:84:9f:dd:4b:ce:bc:a8:aa:
cb:cf:bb:01:03:95:12:94:38:72:89:8b:c8:1d:bf:d2:66:9c:
2f:68:a3:79:ca:38:38:7c:cd:46:dc:fe:61:e6:8d:fc:1e:50:
88:bf:6f:11:15:48:f6:90:01:0a:27:c3:db:dc:da:23:56:db:
b5:7b:34:53:9c:ae:9b:fc:d0:78:ed:f4:65:5d:47:8e:66:40:
49:37:fb:c4:af:fb:e2:23:b0:05:b6:a5:06:76:f1:cb:ae:03:
57:24:ed:ad:91:3f:18:ec:5f:d4:4a:63:8a:9a:9e:09:df:3a:
a7:b4:54:43:33:87:c6:bd:33:03:99:33:74:46:65:b4:cb:1a:
15:f4:b1:2f:b9:ea:8c:6f:d3:18:24:97:f0:88:c7:29:da:c3:
ab:43:09:f6:c5:7d:34:87:5d:1b:e6:dd:c4:92:0d:5d:2d:c8:
5e:c7:48:6f:02:37:60:d9:3e:47:a6:fc:83:f7:02:07:7b:1e:
4d:26:c2:c6:38:d4:aa:df:6c:ee:94:03:cc:03:2e:7a:a4:4e:
50:10:d3:bd:c6:e2:47:2f:ea:44:3f:28:33:a8:92:ce:1c:dc:
65:92:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net