Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d6362d2-781d-4f35-bb89-7aee15d383bd.roa
File: 0d6362d2-781d-4f35-bb89-7aee15d383bd.roa (raw, json)
Hash identifier: hhJvK8nP4jCUQAZOFrbS68lVFjKgGKq7rMjsRDdrdZg=
Subject key identifier: AF:E4:4B:F4:FC:BF:A5:B4:44:81:02:0B:F1:24:29:CD:19:A4:3F:CF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 41C7CF3ED14693D54EEE58981E56877FC975D3EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d6362d2-781d-4f35-bb89-7aee15d383bd.roa
Signing time: Mon 11 Mar 2024 00:00:00 +0000
ROA not before: Mon 11 Mar 2024 00:00:00 +0000
ROA not after: Mon 15 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 01:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c7:cf:3e:d1:46:93:d5:4e:ee:58:98:1e:56:87:7f:c9:75:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 11 00:00:00 2024 GMT
Not After : Apr 15 23:59:59 2024 GMT
Subject: serialNumber=b6a8fd998544d9330e5f79a9b3fa680ca6cc55cf5c906ad38c5b173da416f008, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:33:d9:de:4d:b5:52:af:e5:6e:c8:3f:62:
6e:87:b0:11:2f:06:75:93:ba:ee:4d:84:20:f7:ef:
41:8f:a7:02:c1:bf:3b:2b:83:23:e5:97:6e:b1:ab:
3a:c0:5a:30:6a:1b:24:23:fd:05:36:52:c8:34:ac:
32:bd:3c:2b:83:0d:30:c0:66:65:82:cc:37:7d:7d:
b2:01:29:fe:f1:e0:97:97:88:8f:8f:42:50:01:19:
ce:c0:d5:90:b6:d1:15:b6:1e:25:73:eb:91:b8:f2:
83:fd:99:d1:a1:71:7f:26:25:fb:f4:a3:19:63:28:
8e:8e:d9:da:c7:cc:ca:db:23:af:8c:12:55:ba:7b:
6d:0b:63:4d:aa:17:6b:85:19:cd:94:73:4a:24:07:
b4:bd:ea:42:d4:01:fa:3d:6b:35:f6:5d:f3:b1:bb:
6e:a9:b3:70:dd:b4:56:83:b6:ec:26:4c:39:23:7b:
99:1b:a4:f1:7c:7e:35:e7:e0:8a:d3:5b:f0:80:af:
7e:3d:e1:16:fb:10:a7:be:45:be:8f:b8:12:b5:f6:
59:ac:14:32:46:d2:96:53:aa:07:cf:4b:1c:0d:b2:
47:99:53:e7:cc:1d:b1:27:5b:ce:37:79:8e:c6:90:
65:6e:d9:ec:f7:03:28:2c:7b:60:dd:10:d5:6a:d5:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:4B:F4:FC:BF:A5:B4:44:81:02:0B:F1:24:29:CD:19:A4:3F:CF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0d6362d2-781d-4f35-bb89-7aee15d383bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:1b:c5:a4:7c:da:41:d9:3d:9d:96:24:b1:9f:b5:e9:12:
c9:86:ac:c9:99:f1:ea:cb:42:00:85:d1:45:67:b1:71:b8:75:
bb:ac:2f:1a:1f:c7:a2:f6:54:5f:e8:54:b4:5c:ed:ea:27:d2:
6e:db:2d:04:b1:22:e9:02:bd:7d:dc:d6:ba:49:97:72:7a:4a:
2d:dd:36:7c:0c:c8:29:c1:28:a7:48:b4:a7:6c:4f:56:7f:c6:
c4:56:7f:3a:c3:a0:cd:63:ce:a5:fc:5a:f8:15:d9:c0:ca:95:
0e:8d:72:97:b2:28:46:58:b1:85:d5:d0:8c:ae:dd:b4:64:82:
db:e9:17:da:cc:49:46:5d:0a:c5:06:a6:86:17:cf:6a:54:bb:
50:6e:55:4d:4c:36:35:99:fa:e2:a4:55:0e:e4:9c:03:aa:5d:
fc:1b:3b:56:a1:f7:4c:f0:74:52:7c:dc:1e:b9:62:f8:d6:2e:
46:b6:46:b4:9d:d9:40:77:ee:92:5b:cc:06:9e:8c:5a:55:87:
05:de:6a:43:f3:f5:9e:2b:ed:44:94:e5:b6:f4:43:11:e0:e6:
83:09:c4:ce:5a:48:0b:c7:ca:d8:7e:6d:e5:0b:b2:7f:28:e2:
6b:3a:51:7f:6b:7f:17:3e:de:2d:cf:b8:89:c5:06:22:45:50:
ef:95:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 05:00:39 2024 by rpki-client on console.sobornost.net