Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d419389-047f-4c9a-9f5c-4a4cc74da204.roa
File: 0d419389-047f-4c9a-9f5c-4a4cc74da204.roa (raw, json)
Hash identifier: tFkVBehfIL32CR/e2+nuzxDNgS36ZDPmeY1k8TA+1po=
Subject key identifier: 7E:86:02:FD:E0:54:5A:FA:60:EC:7E:99:73:61:08:8D:A9:61:A4:76
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5D5E60D6C3152DC13882BDFF0C9265FA47520B6B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d419389-047f-4c9a-9f5c-4a4cc74da204.roa
Signing time: Wed 30 Oct 2024 00:00:00 +0000
ROA not before: Wed 30 Oct 2024 00:00:00 +0000
ROA not after: Wed 04 Dec 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 06:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5e:60:d6:c3:15:2d:c1:38:82:bd:ff:0c:92:65:fa:47:52:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 30 00:00:00 2024 GMT
Not After : Dec 4 23:59:59 2024 GMT
Subject: serialNumber=7adab1c0cbc5772e0d22d07ab073f1e896fa56965b880432ded475b45f951a4c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:aa:c1:47:25:c6:91:c7:9b:50:f5:08:1d:
d0:c3:ce:48:36:32:bd:41:a6:8f:84:b8:ea:dd:5e:
e0:d8:ad:09:31:5c:b2:66:d2:21:fe:d2:cd:c0:34:
29:c1:4d:5f:b5:55:bf:eb:81:bc:26:93:3d:67:00:
81:75:c8:bc:62:91:b1:44:0e:60:04:81:66:18:c8:
e5:28:98:7c:44:87:84:aa:9a:cb:d2:e6:bd:cf:50:
81:6c:e3:49:17:81:94:22:80:36:86:3f:d5:29:50:
e8:31:9d:6c:2f:9a:3e:51:4b:ff:4b:a8:21:76:43:
98:27:85:b9:59:74:37:c3:2e:35:1d:de:3f:68:19:
98:f9:7b:ff:ed:27:2b:13:89:6f:9d:f0:c3:15:81:
fe:e1:d9:f6:e4:85:ba:9f:f6:97:e1:43:b7:c5:3c:
30:b0:69:f8:af:67:9b:5a:8a:36:c4:b0:ca:ce:bc:
9b:a1:c9:df:aa:28:3f:2a:0a:c7:a8:37:23:2f:4d:
17:e9:51:f7:89:72:32:8b:89:8c:d9:21:ee:41:0b:
3f:79:71:c7:6c:c4:02:2d:13:62:f4:d0:03:10:c3:
0b:0d:91:17:08:27:66:b9:47:00:8b:ca:e4:d5:b7:
5d:1c:cc:04:5f:26:0a:4f:59:20:d2:6a:8e:86:2c:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:02:FD:E0:54:5A:FA:60:EC:7E:99:73:61:08:8D:A9:61:A4:76
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d419389-047f-4c9a-9f5c-4a4cc74da204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2f:b3:62:ca:32:0e:40:7d:c7:02:5f:0e:5b:7f:df:bb:35:
ea:87:77:97:32:ca:56:ca:39:5d:38:c7:dc:35:6b:53:1a:26:
1d:9e:e2:2e:07:13:c0:0c:17:fc:ed:43:f3:da:76:06:23:ca:
e7:eb:47:c3:3d:4e:d4:ac:0e:04:e7:28:e8:79:96:15:8d:e9:
d1:6a:96:62:3e:a1:ff:21:f2:14:a9:a0:d4:01:ba:cc:86:ef:
7d:17:d4:29:60:e1:48:31:bf:52:c7:f3:f5:f9:3b:33:84:b7:
ac:9b:cf:2a:17:48:ac:56:4c:02:8f:9a:c9:9e:7c:e8:6d:9e:
0b:c7:3a:41:c7:08:b1:96:5c:72:2b:92:df:14:b7:e0:01:8d:
e9:7c:9c:f2:7c:3b:a6:79:92:c3:a1:6f:32:0e:d7:34:a8:bc:
8a:ec:d4:01:cb:f0:d5:65:15:0d:7a:84:59:8d:61:1a:6a:bd:
41:4e:d2:05:a0:ab:2f:ec:d4:e0:ab:f3:c4:db:9b:c2:71:35:
dc:4e:90:4f:e6:a5:e4:bf:6e:61:9a:eb:fd:ad:c2:06:83:31:
83:11:8d:60:cc:6f:09:4d:cd:0b:fe:80:d1:e4:b9:ef:87:db:
e5:a8:2b:92:b3:2b:b2:ee:30:ec:16:ba:75:5e:ca:05:f2:77:
12:4f:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 09:11:25 2024 by rpki-client on console.sobornost.net