Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee57ef96-d5c2-42fd-81c7-d69e7fe07817.roa
File: ee57ef96-d5c2-42fd-81c7-d69e7fe07817.roa (raw, json)
Hash identifier: kmfskD22IKEV/aa4E5ittgWx3YYPX+LSDo3adiMcNaY=
Subject key identifier: F5:DB:8F:53:90:C3:F5:43:7F:EC:C6:FC:C7:CD:AD:90:F9:0B:3E:86
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0D89302810F52248E4BFC050D49FA46A71BAEA1B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee57ef96-d5c2-42fd-81c7-d69e7fe07817.roa
Signing time: Sun 17 Sep 2023 00:00:00 +0000
ROA not before: Sun 17 Sep 2023 00:00:00 +0000
ROA not after: Sun 22 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:89:30:28:10:f5:22:48:e4:bf:c0:50:d4:9f:a4:6a:71:ba:ea:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 17 00:00:00 2023 GMT
Not After : Oct 22 23:59:59 2023 GMT
Subject: serialNumber=6fca44764bb2f7ea07f60ef12d35b620f31ac9e8d42c2a96caf6021e2a5a005f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:f6:9d:28:bd:79:3e:82:cf:8e:c3:87:39:
e5:04:ed:19:fb:7e:6a:d4:2b:3c:d5:82:6e:5d:83:
be:61:49:e2:81:ac:da:70:d8:62:69:ea:a9:75:80:
7d:34:1b:6c:2e:5d:46:a6:13:c5:d4:8c:b9:ca:5e:
ab:f6:40:bc:ad:18:cd:81:ff:e9:34:b6:87:0c:05:
b9:7e:c7:07:be:be:43:16:bd:5d:28:fc:37:5a:97:
6e:e8:72:9c:2f:a9:f8:ac:fa:e5:56:ee:09:e2:00:
fa:5c:11:e9:a4:24:14:fb:d6:7d:64:20:cd:e4:79:
c8:2b:68:5b:44:6b:f7:04:38:6b:cc:ca:4d:b6:7c:
97:95:9e:e8:ef:e5:9f:6a:5a:ec:25:0f:9f:af:cd:
bd:cd:42:60:6d:42:55:9b:78:ff:4b:e8:fd:84:15:
4d:f2:18:05:2b:3b:0f:17:95:03:88:68:ea:ac:77:
5e:01:76:3d:2b:85:a7:e8:07:4c:ae:53:c3:c9:2c:
dc:60:7a:78:ff:b9:e7:77:34:c5:76:6a:d6:97:57:
f1:57:8d:d4:1c:b5:8a:40:25:58:92:68:9f:cb:48:
ec:5f:08:44:e6:52:3c:db:52:f3:db:30:ec:35:7f:
f5:83:53:27:21:c6:7b:d6:de:28:83:f3:a0:45:86:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:8F:53:90:C3:F5:43:7F:EC:C6:FC:C7:CD:AD:90:F9:0B:3E:86
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ee57ef96-d5c2-42fd-81c7-d69e7fe07817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:07:3e:9c:d3:b1:57:1b:86:ee:49:de:04:61:32:0e:a3:87:
1f:b1:18:0b:e4:2e:8c:8f:48:ba:84:02:23:89:b9:ec:b3:95:
2a:73:b2:b1:f2:ae:05:0f:7c:76:e6:e2:34:d3:44:23:09:69:
bd:2a:ed:77:8d:03:2c:16:83:11:91:29:fd:ae:e2:42:45:03:
d4:de:d8:2f:6a:84:47:11:67:b5:c5:c0:3a:c8:c8:06:c3:de:
34:01:f6:66:b6:cf:40:35:73:34:79:5f:c9:55:ee:bc:8f:d7:
18:8f:43:ce:6b:e4:aa:72:04:46:db:09:25:4d:a7:b5:33:60:
4a:53:d6:8c:36:4f:62:b2:be:72:c3:5d:69:e5:44:c1:7b:35:
ee:15:8c:2b:db:23:07:c0:a7:2f:53:be:3d:0e:5c:7f:c6:49:
da:97:c3:5d:72:76:e0:6e:32:97:d9:a0:58:88:15:16:04:05:
0d:49:47:00:f8:00:63:07:5b:a1:dd:c0:df:d6:68:f3:f7:ef:
30:d5:c4:01:cc:84:cd:bb:75:fd:5c:1a:0c:6f:6b:3b:92:9e:
f1:18:eb:90:10:01:68:7e:56:39:3e:fb:a3:c4:54:ff:36:83:
20:8a:d1:e0:54:a4:92:d9:72:6f:a8:e1:e0:af:b6:2d:d2:1a:
db:13:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net