Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef4f7175-da05-458e-ba35-88c79d74aad3.roa
File: ef4f7175-da05-458e-ba35-88c79d74aad3.roa (raw, json)
Hash identifier: ghOqLFfYK1kEWlbtGtsF6fI0CmLArst008VUvfhiHDk=
Subject key identifier: 4B:97:65:2F:AA:9A:33:C9:B0:13:9F:1F:77:BF:B2:26:D6:39:90:EF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 61E7C6576F87D07AFBBEAB69466990FE1B40F89E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef4f7175-da05-458e-ba35-88c79d74aad3.roa
Signing time: Tue 03 Oct 2023 00:00:00 +0000
ROA not before: Tue 03 Oct 2023 00:00:00 +0000
ROA not after: Tue 07 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e7:c6:57:6f:87:d0:7a:fb:be:ab:69:46:69:90:fe:1b:40:f8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 3 00:00:00 2023 GMT
Not After : Nov 7 23:59:59 2023 GMT
Subject: serialNumber=f465dc03568e0f3614e8b539bf56555e750731b9784c5102fe8aba34abf2f5ca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:c2:19:39:d1:94:af:06:36:45:ef:e9:ea:
a5:5c:57:f9:d2:a6:91:53:b9:db:5b:6a:1d:b5:56:
72:1a:86:c3:c9:3a:e4:0a:00:d1:a2:57:b0:fc:8b:
a4:6c:4a:f4:39:bd:f4:22:6a:90:7d:1d:b5:14:c4:
03:87:86:08:f2:ff:f7:a5:7a:ed:f6:7e:9f:ad:78:
cb:14:c5:a5:11:63:fa:5c:9a:ee:3a:f9:56:0d:ea:
bf:eb:4c:a9:cd:fa:57:2f:e7:61:37:53:9f:2d:c0:
f2:40:60:bd:70:83:0c:48:dc:c3:59:27:a8:5e:c8:
f2:de:4a:9b:e2:08:07:fa:f0:97:a7:f8:e9:50:3a:
f4:81:61:8b:a9:af:30:f1:15:b8:31:12:a4:a8:3e:
79:ae:61:98:3b:eb:a9:06:08:71:2e:18:31:04:11:
cf:08:0b:a9:1a:52:06:31:a6:11:de:40:5e:ad:6a:
90:46:5c:2f:02:70:ee:5d:84:b7:ca:86:b9:3a:33:
71:fc:cc:cc:19:9e:6b:5f:56:85:f4:ee:25:34:42:
c2:17:8f:e1:a6:7d:bb:a0:3a:50:ff:81:30:79:22:
55:db:67:b5:2f:7a:ff:fc:83:e0:cb:6f:48:43:7d:
8b:0f:06:e2:08:a6:11:ee:ba:25:e8:8e:cb:40:b2:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:65:2F:AA:9A:33:C9:B0:13:9F:1F:77:BF:B2:26:D6:39:90:EF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ef4f7175-da05-458e-ba35-88c79d74aad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:40:f9:82:4e:20:30:b4:df:11:a5:94:ab:eb:57:b1:3a:47:
fa:b9:df:14:9a:5e:ff:c1:70:e2:5e:9d:e6:65:97:d2:08:d7:
eb:a0:89:d6:27:d8:21:99:1e:6b:19:b5:19:c0:fc:6d:db:0e:
6a:0e:4b:82:a2:98:c7:26:b5:39:7c:da:54:37:ce:22:aa:d8:
fa:76:c9:98:98:20:ce:9b:44:6a:a4:dd:41:e6:a9:8f:dd:73:
7e:06:3b:94:6e:3d:c2:ac:34:85:04:16:bb:73:b5:06:9f:ab:
94:d3:25:e2:63:61:aa:b5:fb:f7:85:88:d9:f3:53:50:84:63:
da:ef:b1:97:31:eb:57:d3:97:a9:ff:5c:fa:29:28:03:0d:a8:
4a:32:40:9d:d5:2d:c0:a2:a8:d2:75:90:b8:82:e0:4b:2c:78:
d7:9b:36:4e:17:a8:93:7a:b3:75:53:17:93:bf:b1:0c:31:1b:
bc:c7:fd:5a:9a:1b:17:1d:38:ff:e4:ae:3c:ee:bd:dd:e3:5a:
9f:9a:eb:8e:58:7d:67:a7:b6:c1:e1:6c:01:34:63:ba:bd:3e:
ac:bb:bd:74:47:49:ae:3a:29:8d:5d:cb:37:4e:52:e9:8f:ec:
b5:cc:63:b0:ae:2e:11:a3:61:be:8e:df:39:e6:f4:78:a9:a6:
c8:5f:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net