Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f0883258-79b1-405b-9acd-b431958536d3.roa
File: f0883258-79b1-405b-9acd-b431958536d3.roa (raw, json)
Hash identifier: 4jQd7y9YzbKbX6nn+VLIFtQz2CrC5IMg+GOrfILHZDA=
Subject key identifier: 73:72:9F:C3:D2:36:BF:96:2E:6A:D8:FC:B3:B5:E4:21:80:EB:81:46
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 21428132F2DC02AC060AC98C805493A04EF84936
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f0883258-79b1-405b-9acd-b431958536d3.roa
Signing time: Mon 18 Sep 2023 00:00:00 +0000
ROA not before: Mon 18 Sep 2023 00:00:00 +0000
ROA not after: Mon 23 Oct 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:42:81:32:f2:dc:02:ac:06:0a:c9:8c:80:54:93:a0:4e:f8:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 18 00:00:00 2023 GMT
Not After : Oct 23 23:59:59 2023 GMT
Subject: serialNumber=a0cf5942b24bcd27b83bf26a279cd6c0ca62dd99b7ec0810ae6933127fed5588, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:1b:28:23:93:3b:98:98:b4:48:2b:b0:31:
a9:0e:f2:03:7c:c1:e8:4e:0e:52:3d:cd:8e:fa:6f:
9b:0a:d3:c0:69:6f:7b:f5:ed:74:24:1e:1d:55:4c:
35:09:fb:a7:10:4b:90:be:54:c9:87:42:c0:63:88:
c5:24:46:a2:f9:fd:29:f0:23:24:60:d2:b0:c0:a0:
42:55:a0:1a:36:61:1b:9c:2b:74:0a:2e:21:8d:e5:
41:b3:78:b9:24:94:64:e2:9f:3b:3d:53:a4:f0:f9:
aa:8f:2c:6a:52:22:cb:01:2a:54:8c:b5:e1:2a:68:
3f:e1:fb:c3:9e:10:36:28:58:ae:e9:94:50:f6:b5:
40:06:fa:23:12:db:71:d6:09:f5:ed:b2:b1:7e:07:
67:17:f6:01:09:8f:75:3e:38:96:b3:4d:17:8f:5f:
5f:2f:af:e5:9c:6b:02:1a:48:06:20:51:e0:a1:ac:
c9:b8:f1:7a:7a:f9:0e:81:f3:41:69:16:2b:2e:c2:
bf:e4:24:29:f0:4a:08:f9:b5:c9:38:0e:b2:c4:89:
8e:6c:14:62:03:a7:2f:26:32:3a:69:b6:59:94:b0:
a5:df:45:51:17:b9:0e:d8:dc:04:f9:2b:49:44:a7:
30:44:6b:b4:6a:8a:fc:22:a9:e3:a8:b4:17:61:b7:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:9F:C3:D2:36:BF:96:2E:6A:D8:FC:B3:B5:E4:21:80:EB:81:46
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f0883258-79b1-405b-9acd-b431958536d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cd:40:ca:a8:46:67:5f:90:1a:84:bd:91:78:38:b1:78:45:
c6:7f:dc:2d:3c:90:73:8c:3f:19:56:d4:e5:0f:a8:87:2d:28:
77:07:01:3f:c1:e3:f9:ff:59:e4:dd:bc:62:30:56:45:f1:a0:
60:01:26:6a:98:19:62:86:7b:f6:14:c3:9a:88:0b:b5:44:f1:
a8:24:16:c3:a3:44:cf:42:1e:3d:f2:ac:67:d3:b2:dd:6a:9c:
6b:df:35:be:c8:8a:2c:cb:bb:81:c9:a2:4a:46:9c:49:2a:75:
7d:7f:62:ee:80:f2:63:b7:ca:d0:3d:3d:bc:76:c1:1f:e6:2a:
ac:76:fb:c1:16:5d:68:c5:87:52:9e:f3:6c:2d:ba:6a:f0:c9:
6f:79:56:1d:e0:b5:28:61:d5:2e:f2:7b:16:6c:97:a1:15:f4:
47:bf:57:57:d6:e6:ad:4d:4a:90:29:59:a4:38:af:49:bd:74:
c5:38:85:51:34:a4:8d:62:1b:89:d4:2b:b7:08:8a:0a:c5:97:
90:49:b5:15:53:1c:11:e9:34:78:3f:d4:2b:1f:9b:c6:87:3f:
13:6f:a7:82:73:ac:9f:76:46:50:cf:60:11:4b:73:49:ba:70:
5c:49:a7:05:0a:eb:34:fc:87:ff:6b:2d:2a:c3:3c:f0:13:c8:
9f:6d:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net