Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3346027-9560-4d2c-b515-011ac1eb4a50.roa
File: f3346027-9560-4d2c-b515-011ac1eb4a50.roa (raw, json)
Hash identifier: W8j0j8wSnsRwFM0ZBazMBcCslT7VFr/4tkKfLNWv17M=
Subject key identifier: 72:D6:7E:8A:E5:38:B3:89:67:64:F2:0C:F0:89:18:67:E5:3A:C4:C4
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1823AA24CC67F418447DBEE9696A935160B317A0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3346027-9560-4d2c-b515-011ac1eb4a50.roa
Signing time: Wed 16 Aug 2023 00:00:00 +0000
ROA not before: Wed 16 Aug 2023 00:00:00 +0000
ROA not after: Wed 20 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:23:aa:24:cc:67:f4:18:44:7d:be:e9:69:6a:93:51:60:b3:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Aug 16 00:00:00 2023 GMT
Not After : Sep 20 23:59:59 2023 GMT
Subject: serialNumber=9efc7fe3cc1faeebe6bdf9419c846a5bed73c936adade3544244bff2e8995604, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:b4:95:0a:53:91:c0:1f:08:ee:5a:e8:13:
c1:a9:ab:c6:c4:67:bc:d2:e5:7f:22:cb:2c:61:e6:
6c:ef:ab:51:6b:ac:cf:a2:64:fb:61:a1:89:7a:4e:
7d:0b:ca:df:3b:1d:35:7c:b3:d1:16:eb:09:a7:1a:
fa:4d:51:9b:80:d6:f9:d4:ed:f0:62:ee:33:0a:1b:
fb:c8:90:86:0a:87:25:d7:83:e8:d4:fe:b8:51:47:
81:7c:fa:02:3e:42:37:f0:6d:3d:7c:bd:7b:ba:0b:
8b:ba:9e:3f:57:f8:7e:5b:c2:a7:11:76:80:bb:9e:
f6:31:b0:ba:82:96:ea:58:f0:39:d2:b4:3e:c8:64:
69:64:34:62:3e:96:5b:7e:a1:26:8d:fe:07:94:e3:
a6:1d:90:17:cc:16:61:09:96:c2:06:7e:e0:34:c3:
42:a6:6e:22:a8:2e:ba:17:ab:f3:cb:89:95:c2:0a:
ed:7d:bc:f9:ea:11:93:52:17:4a:1b:37:11:3d:2c:
90:54:0d:8b:dc:13:33:78:d0:c7:b2:50:a7:56:b4:
ba:b7:c2:09:31:d0:1e:7a:09:b4:8f:2a:29:cb:7a:
84:f3:4f:dc:69:94:ca:84:3d:eb:3f:1d:d3:01:07:
0a:43:95:00:27:49:95:b5:79:c3:e7:7e:86:7a:86:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:7E:8A:E5:38:B3:89:67:64:F2:0C:F0:89:18:67:E5:3A:C4:C4
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f3346027-9560-4d2c-b515-011ac1eb4a50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8e:87:46:17:1b:89:46:65:36:a0:7c:16:58:c6:0a:0f:2c:
5b:6b:05:28:4e:db:af:ee:2a:61:4b:b9:28:60:08:ef:d0:33:
7d:12:1b:ca:54:97:2e:05:e3:96:3d:45:84:42:af:82:e0:0b:
09:39:f3:af:42:e2:bd:5a:13:e6:b7:ea:2c:11:32:bc:53:b2:
20:8b:28:8a:93:f1:d9:06:3a:17:5a:93:94:6c:ce:17:fb:2c:
40:c8:07:78:b3:35:cf:d8:35:24:f1:0c:02:28:dd:0a:e8:ae:
99:82:bf:60:ff:ce:1b:ca:f5:c6:0f:b3:6e:80:60:22:9d:b0:
40:29:14:f4:99:d7:00:4d:f3:bf:1d:b4:c8:ad:f9:49:e5:df:
0c:c6:0d:34:85:93:54:65:59:34:8e:d8:77:de:68:99:ab:3c:
c7:aa:c4:1e:ab:41:45:bb:a7:58:b5:5e:d8:14:23:d8:0b:c7:
07:3f:09:f1:a8:87:d2:92:50:72:34:c3:ac:dc:bc:39:38:1d:
6b:75:d5:b1:a3:ec:cd:1e:0c:7d:b0:c8:2d:e6:1d:0c:88:cd:
79:92:33:b5:bc:5d:1e:ff:21:7d:13:e7:f6:49:7a:20:58:1b:
63:69:42:46:c4:e7:30:83:4c:c4:3e:84:06:1b:d3:03:bb:34:
cf:ee:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net