Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f60f94da-f4b4-454d-b3dc-eb991acab9f7.roa
File: f60f94da-f4b4-454d-b3dc-eb991acab9f7.roa (raw, json)
Hash identifier: cGGsaF0WSNaM61ytwHvlWE1cvjys4hK8zupR74AnyXY=
Subject key identifier: 36:0E:E9:A6:7F:AB:EE:89:DD:AA:86:3E:D4:30:2F:B7:03:8A:F7:56
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 31C787EB0DFBFE7449C619A6E0F16985F5474037
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f60f94da-f4b4-454d-b3dc-eb991acab9f7.roa
Signing time: Fri 14 Jul 2023 00:00:00 +0000
ROA not before: Fri 14 Jul 2023 00:00:00 +0000
ROA not after: Fri 18 Aug 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c7:87:eb:0d:fb:fe:74:49:c6:19:a6:e0:f1:69:85:f5:47:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 14 00:00:00 2023 GMT
Not After : Aug 18 23:59:59 2023 GMT
Subject: serialNumber=d4cab96c87d6e9cb1e36f6431a46a9fc30d305a1b7e0cd74d5729991c63ae142, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:b4:15:c0:02:74:0e:f1:e2:a4:a6:67:15:
fd:41:d5:1c:41:d4:c6:dc:16:51:ec:cb:34:85:87:
2e:20:69:5e:22:e0:63:52:d3:25:c0:19:4d:20:f0:
ec:a1:bc:9c:98:2a:28:57:81:e7:c6:8e:4b:be:51:
ba:dd:47:2d:b9:29:60:1b:67:6f:2f:39:02:c3:81:
75:09:18:74:11:74:f8:10:e5:b7:2f:ab:c4:57:ca:
7d:34:1a:5b:c4:2c:14:75:cc:0d:eb:86:70:87:1f:
15:67:6b:f6:97:de:3c:f4:9c:2e:aa:d3:9a:90:46:
92:af:59:29:82:ef:e2:1c:b8:4a:a3:cd:41:05:64:
2b:fc:55:01:4b:58:ad:61:e0:87:1f:87:b4:93:f7:
c7:07:07:c6:9d:a8:b5:02:7b:14:00:c9:ee:b6:c0:
6f:ac:0e:db:e3:0d:01:ca:44:d3:b2:b4:77:00:61:
e0:c7:60:06:02:6a:14:b9:64:6c:92:b9:a0:6e:62:
14:c4:e7:ea:1e:9a:38:48:7f:f6:aa:a0:d0:2f:f0:
4d:d3:48:e4:10:8b:78:38:58:18:57:51:d3:98:30:
0e:99:39:9a:03:ce:56:00:4f:5b:d2:a3:fd:be:8e:
84:ac:51:f9:86:ac:b4:0b:71:b3:01:c7:7f:ef:72:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:E9:A6:7F:AB:EE:89:DD:AA:86:3E:D4:30:2F:B7:03:8A:F7:56
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f60f94da-f4b4-454d-b3dc-eb991acab9f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e0:45:65:95:a1:12:8c:85:ff:b3:0e:d3:81:51:d0:9f:d9:
92:00:e9:be:a7:70:be:18:90:0c:6d:b9:51:f0:9c:d9:d3:94:
47:0b:09:03:2a:5e:09:a5:26:b6:ca:73:46:16:06:42:8c:9c:
be:62:57:93:42:df:87:f0:18:08:33:03:5d:1a:b7:ec:a5:17:
25:2e:43:d7:b3:83:3f:81:7d:71:87:19:10:f1:3d:43:8f:c7:
84:f7:89:46:7a:e7:ec:ef:f7:9b:76:c0:e1:d7:5b:8d:f1:9f:
a3:0d:86:a9:43:50:05:4c:0c:1e:86:ac:9c:07:c8:01:43:88:
57:6e:83:9e:ab:0d:c2:28:d6:7f:f3:30:f0:3e:8d:82:32:be:
e5:0c:38:5c:bd:b9:a2:d6:9e:bf:0d:fc:f9:3d:b7:d1:50:ad:
43:f1:5c:04:dc:c8:82:41:f3:67:83:d2:6b:1b:05:51:46:d8:
42:41:45:0f:f5:3a:41:87:d4:1e:35:12:be:18:80:4b:dc:1a:
c5:f4:31:c6:b3:08:ec:4f:aa:1e:14:31:e6:c4:a8:04:55:7e:
10:50:8f:2e:2d:4d:7a:89:33:ef:2d:e2:e0:55:c5:8d:71:9d:
9a:14:92:f9:bc:0e:ef:c7:98:aa:4a:9c:b7:4f:4a:90:74:e1:
d7:f8:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:18 2023 by rpki-client on console.sobornost.net