Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb582519-acef-46a1-a43a-c8ba7c10d3a3.roa
File: eb582519-acef-46a1-a43a-c8ba7c10d3a3.roa (raw, json)
Hash identifier: rn3itobJopyMvF0CCzN4tb9OcVFtGmKwe3npAin71MM=
Subject key identifier: 22:AE:15:58:B2:A0:76:87:F1:25:A2:3B:D1:5A:C1:13:3D:A3:F8:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 190ECC6814657228915CF973D9CADB1EB53CDF5C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb582519-acef-46a1-a43a-c8ba7c10d3a3.roa
Signing time: Fri 06 Oct 2023 00:00:00 +0000
ROA not before: Fri 06 Oct 2023 00:00:00 +0000
ROA not after: Fri 10 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:0e:cc:68:14:65:72:28:91:5c:f9:73:d9:ca:db:1e:b5:3c:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 6 00:00:00 2023 GMT
Not After : Nov 10 23:59:59 2023 GMT
Subject: serialNumber=e4b5739e7870d35933f0a8c4ca0dffd4e0b913b525b7a3125b4e8e9b5bebbd3f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:e7:cf:c7:9d:3a:02:fd:25:2f:f2:5c:a1:
9c:79:dd:24:6f:31:43:45:82:32:38:b5:5b:f3:77:
21:62:07:8e:6c:98:55:1f:51:17:45:6a:f4:27:ed:
ee:b1:d8:86:86:9c:fa:3c:80:f0:d0:43:2a:ff:91:
07:66:52:ee:cf:f3:2b:77:ae:59:47:00:2e:e3:90:
1e:ec:d5:7c:0a:1c:85:75:23:05:a4:69:4e:b1:80:
0b:3a:70:ee:05:32:60:02:36:f6:47:0e:6c:ea:9c:
5f:07:da:66:92:01:56:54:f4:e8:87:b7:0a:6e:83:
01:c5:49:17:c6:ab:c7:63:ec:a2:6b:4d:0a:07:65:
06:70:56:5a:be:a2:3f:21:cd:48:7d:ab:d3:ce:6a:
57:91:e0:41:de:4d:34:9e:3f:c3:87:ea:aa:18:1f:
8e:8b:9b:a7:e8:a6:2d:b9:c4:51:ae:58:26:a5:e6:
3c:09:86:3a:a6:91:4e:23:14:2d:44:70:72:6f:a0:
6d:2d:d7:2a:4c:c4:df:bc:2a:e2:ac:4a:9a:bd:58:
96:e7:4d:bd:de:3e:94:4e:42:cb:bd:8e:b3:23:20:
7b:fc:f9:bb:24:c5:42:2d:e7:0a:b7:40:eb:b5:44:
4e:06:bb:c4:6e:6a:58:4c:aa:10:b0:0a:ab:5f:fd:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:15:58:B2:A0:76:87:F1:25:A2:3B:D1:5A:C1:13:3D:A3:F8:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb582519-acef-46a1-a43a-c8ba7c10d3a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:82:07:cd:1b:54:ce:f9:98:1c:20:a9:43:0c:ff:11:b0:63:
f6:3f:53:6d:9a:d6:86:61:11:36:04:f9:76:6c:7f:00:f4:e5:
95:fc:89:fe:ec:d9:62:49:97:c4:c3:cd:e3:b5:fd:2b:ec:a2:
cd:ed:e7:c1:46:38:05:24:62:ce:22:43:80:38:79:b1:6b:86:
87:58:46:78:cf:a2:97:e0:57:70:6d:ee:d6:de:08:dc:74:8c:
fa:f7:78:72:a0:e4:a1:60:63:ac:5c:a2:a3:b6:62:17:74:87:
be:59:1b:2d:bc:40:90:d6:18:1c:e8:26:ee:69:c9:43:e6:c8:
06:2a:72:6a:18:28:ae:e6:08:a8:c7:dc:a9:13:93:4f:35:9b:
d3:51:04:56:c7:4d:fd:d4:dc:e6:03:d6:0f:af:45:9d:f8:62:
04:e5:e7:a1:31:d8:1f:51:99:68:b3:17:a2:8c:e8:66:aa:63:
f5:ac:4f:aa:df:37:c3:6d:10:bd:14:99:f5:28:7c:7b:4a:78:
62:d6:39:57:e1:4e:7d:13:c8:57:5d:e0:b4:a8:5b:b0:39:f5:
60:c9:ba:db:60:ec:c2:00:50:a2:e0:68:ff:a7:44:e6:56:f5:
13:be:94:66:39:d0:f1:19:05:6d:79:14:ad:80:5b:95:2f:3a:
91:42:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net