Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2873974-2cde-4553-b48b-6b3a891b5b85.roa
File: f2873974-2cde-4553-b48b-6b3a891b5b85.roa (raw, json)
Hash identifier: rjazcKWlKkRaBZpdvMZqQ3FSECXycDd2kMgBr9jmNlM=
Subject key identifier: D6:D5:97:EC:83:DE:F1:2D:F4:E0:CA:E5:74:F2:66:FD:A9:D5:5B:6B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3E219175EBD620BDD7F22A6A762600AD40922AC4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2873974-2cde-4553-b48b-6b3a891b5b85.roa
Signing time: Wed 11 Oct 2023 00:00:00 +0000
ROA not before: Wed 11 Oct 2023 00:00:00 +0000
ROA not after: Wed 15 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:21:91:75:eb:d6:20:bd:d7:f2:2a:6a:76:26:00:ad:40:92:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 11 00:00:00 2023 GMT
Not After : Nov 15 23:59:59 2023 GMT
Subject: serialNumber=8cce61da31114bb163b8966b56b2241fcaa5e8d414913ce0353a4a5090d04536, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:95:61:37:61:8f:e7:8c:75:6d:02:5b:ff:
85:43:e6:6a:ab:04:e7:35:28:8e:8b:44:3e:36:7a:
79:d1:ab:74:ce:dc:ff:88:e9:cd:ad:a7:cf:3f:55:
cc:36:0b:39:fe:8a:2d:eb:e5:e7:2d:71:76:a9:d1:
45:d4:1f:38:b8:09:00:5d:b5:64:b8:f6:48:47:cf:
b0:1c:ae:08:cd:1a:a4:c1:78:18:e3:fd:ba:c5:10:
3f:da:9c:d9:56:7f:cc:64:bb:15:3a:0e:6b:bc:f8:
f2:74:5b:52:de:85:8a:db:a5:f5:62:b6:f7:77:09:
68:21:76:60:5e:f3:3b:4a:d8:c4:93:c2:ed:93:7c:
11:e7:88:3a:aa:0e:a2:23:a4:58:af:1b:42:50:47:
69:90:1b:3b:6f:92:d1:92:8d:e0:ad:8b:fd:71:21:
79:35:cc:04:0a:cf:3b:ed:f0:02:13:37:6d:ae:98:
ec:62:a6:1b:ea:34:e5:af:8a:4e:79:be:a1:d5:2f:
14:35:ab:0c:9c:76:60:d2:c4:06:e3:d2:5d:78:5b:
c6:e8:13:4c:9d:fc:99:40:43:09:af:f7:c7:d2:f7:
13:f1:1b:0c:b0:fd:63:8e:92:44:7d:30:10:31:cb:
b1:1c:f3:6e:0a:83:91:17:35:70:49:f5:b7:58:23:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:97:EC:83:DE:F1:2D:F4:E0:CA:E5:74:F2:66:FD:A9:D5:5B:6B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2873974-2cde-4553-b48b-6b3a891b5b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
16:35:e5:97:49:f7:56:13:eb:aa:fe:86:8a:c6:59:4a:81:44:
b0:e3:b9:79:7d:62:82:0d:db:1f:23:aa:33:d1:ee:57:c0:81:
e0:89:fa:ca:10:0d:80:33:84:d7:5a:9a:f4:47:9a:0f:e6:ed:
1e:1f:b9:ad:49:f6:54:d6:79:0a:56:4f:81:7f:59:fa:32:17:
2e:ac:75:35:26:7f:96:12:ee:4c:b1:0f:a7:92:a9:b5:5c:f0:
3a:d6:ec:35:9c:6f:40:8e:71:6b:ac:44:92:aa:55:d5:3d:dd:
f6:54:b9:ca:a1:4e:10:0d:c4:8f:a3:31:b7:21:84:18:f9:85:
43:ac:bd:5f:0e:e6:7e:87:96:0d:f5:43:0f:e4:5b:52:3a:1b:
84:b9:23:13:ef:7c:62:b9:78:51:08:71:fd:e2:9c:d1:21:d1:
9b:3c:c9:3d:0f:e9:b3:23:57:d3:4b:a6:6b:87:74:40:ab:b6:
ab:fa:b9:d6:49:26:66:7d:60:6e:00:78:c6:2d:52:18:a3:33:
26:d0:bb:bf:40:f4:4d:79:18:8c:98:7a:0f:26:1d:3e:ab:0c:
d7:d9:d9:91:29:9d:9e:27:38:f0:15:50:38:bc:98:66:05:83:
5b:4e:4b:28:c3:ea:06:92:f2:71:5f:72:1a:4f:63:e3:bc:ed:
b2:b9:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net