Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2966f42-ae93-413f-a8d6-3c132c41a5b6.roa
File: f2966f42-ae93-413f-a8d6-3c132c41a5b6.roa (raw, json)
Hash identifier: n7kAi7WCieBP8sdwQOjhn6lJbnuHw8zRtbK8RoEED3w=
Subject key identifier: 2F:E6:CE:C9:A0:35:D0:9E:4C:D6:C3:B6:86:CC:96:C6:35:B0:27:D0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5E13F50641637CAE0C764DE7834E7D03E5753BFB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2966f42-ae93-413f-a8d6-3c132c41a5b6.roa
Signing time: Sat 30 Sep 2023 00:00:00 +0000
ROA not before: Sat 30 Sep 2023 00:00:00 +0000
ROA not after: Sat 04 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:13:f5:06:41:63:7c:ae:0c:76:4d:e7:83:4e:7d:03:e5:75:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Sep 30 00:00:00 2023 GMT
Not After : Nov 4 23:59:59 2023 GMT
Subject: serialNumber=58a012acac9bd653adff1476787db713f4dc397841754f4f3f19725393fe5acd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:06:f2:c0:89:28:6d:32:0d:ca:d0:8f:f0:
09:af:6d:99:69:a8:35:89:08:3d:8e:81:04:94:dc:
5a:39:63:bb:66:90:34:52:b6:45:48:f9:3e:44:b3:
e6:b9:45:df:a1:7b:dc:fb:55:3c:c6:23:61:45:ad:
e7:28:36:fb:7c:99:30:d7:0a:fa:a4:d4:cd:39:dd:
bf:14:5f:3a:40:57:f1:76:e5:e6:fe:32:d4:8a:ed:
48:68:c4:5e:eb:fd:f1:6f:0d:0e:ee:3c:33:96:67:
5f:87:ec:f4:3e:98:4f:ae:d5:98:55:f1:f3:18:6f:
f9:40:1d:8f:ef:8d:92:51:d2:a4:44:52:17:17:a2:
f9:86:b8:34:a4:f8:b0:42:6a:30:84:5a:f9:fd:1a:
6b:e3:ef:e2:27:25:71:6c:a0:8e:e0:14:c1:04:0a:
4d:45:98:09:62:19:34:ff:f5:32:f2:ea:e4:56:94:
6a:06:1a:2f:41:90:0e:73:ca:56:08:20:69:37:86:
be:75:ca:bd:da:a3:6f:07:bd:ac:4d:fa:ab:f9:68:
33:67:94:05:23:34:87:f5:a6:91:58:14:20:02:f1:
12:55:b8:78:80:86:91:28:cc:49:27:cf:bc:9f:e4:
7f:55:40:06:88:a8:53:c0:99:dc:02:10:0c:6b:11:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:CE:C9:A0:35:D0:9E:4C:D6:C3:B6:86:CC:96:C6:35:B0:27:D0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f2966f42-ae93-413f-a8d6-3c132c41a5b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5e:65:c9:e9:2c:b2:32:cc:da:b5:da:f1:12:44:27:9c:67:
2f:22:da:2f:55:68:53:89:fb:97:b5:47:a4:31:d3:aa:ff:98:
81:6b:bc:c8:71:12:e1:a5:da:ae:58:05:60:53:71:6b:2f:4f:
55:65:ca:81:cc:5c:93:d6:eb:65:e0:ab:09:d9:98:ba:ed:2c:
0c:38:9c:b5:bd:c3:aa:99:bc:38:19:04:18:ed:0c:75:4c:b4:
9a:b7:d6:46:42:26:8d:b1:3c:8b:1d:18:83:04:c0:05:e7:48:
39:a1:89:0f:6c:cd:59:af:59:75:62:49:73:be:58:19:b5:70:
b6:01:7a:db:7f:30:95:87:0d:94:f3:44:db:20:cd:b2:e6:dc:
a9:7d:56:d0:8c:4e:94:45:70:8f:76:10:cd:f3:d1:ef:1a:5a:
b4:ca:10:50:e5:90:4a:f6:2c:81:4a:f8:d1:39:17:16:49:d7:
2d:c2:63:64:17:76:c4:ba:de:8b:44:45:de:82:2a:74:d6:38:
17:3f:79:28:29:f9:e4:0a:1a:3d:f5:6d:d9:f9:27:d4:ef:82:
fd:b9:fc:fb:dd:eb:ef:29:f8:60:64:8d:3e:d7:e3:a5:c5:f1:
44:02:b0:2f:43:0d:60:ca:d0:5b:2b:cb:2b:fc:d7:25:40:ba:
ce:2a:62:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net