Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0dd0f07a-fa08-4166-b433-3243b09f2516.roa
File: 0dd0f07a-fa08-4166-b433-3243b09f2516.roa (raw, json)
Hash identifier: 2hG7I3cg6CE7eFt4lcKAV2tNkmuR7/cjnrB9/vAiqRA=
Subject key identifier: CF:88:82:2C:E9:7C:91:1A:B6:95:94:C3:A9:02:9C:03:B5:40:AD:0C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 22D99B595ABA7947984F1D7EADDFE6B31F427C53
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0dd0f07a-fa08-4166-b433-3243b09f2516.roa
Signing time: Sat 27 Apr 2024 00:00:00 +0000
ROA not before: Sat 27 Apr 2024 00:00:00 +0000
ROA not after: Sat 01 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 13:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d9:9b:59:5a:ba:79:47:98:4f:1d:7e:ad:df:e6:b3:1f:42:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 27 00:00:00 2024 GMT
Not After : Jun 1 23:59:59 2024 GMT
Subject: serialNumber=3eef3febdb803d569bd7290c7846628ae46198f0f0b715412fdb9a6a6fed3d43, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:87:d4:94:e2:c5:85:78:03:2c:6e:c4:8f:
26:1e:5f:ed:75:2e:f7:42:a4:61:04:c1:f1:26:24:
ad:5e:37:28:de:cc:8f:b3:fc:63:d9:e0:93:cb:e4:
67:d1:52:11:c0:b4:eb:0d:df:a3:10:26:68:5e:d3:
42:0b:cd:e9:5c:67:5d:e2:a4:ba:3b:81:20:92:85:
8c:90:f3:4f:1b:69:c1:6c:eb:21:4c:ca:75:ac:9f:
d7:82:56:ee:6d:69:eb:4d:4f:e4:c5:41:9f:e6:3a:
1c:a5:8f:75:bf:ef:6b:6e:68:3e:25:05:30:cd:5e:
44:4b:d7:e3:eb:88:e5:ba:a3:00:19:6f:c6:ec:89:
66:51:61:9b:b3:f6:55:29:1b:a7:93:d0:07:9f:ed:
2b:72:a6:10:77:72:09:a1:9a:a2:f6:eb:8f:ed:f2:
1d:bb:80:09:c0:d8:aa:3f:d5:91:83:c5:37:a5:00:
ad:94:27:0e:1c:e1:82:2f:97:42:65:01:ef:48:4d:
64:92:94:92:7f:07:f0:45:61:fb:50:08:c3:ce:e9:
5e:86:3c:44:56:39:2a:2d:cb:7e:24:a9:63:73:d1:
ab:4d:6b:9a:23:91:e9:ca:ba:9a:8d:0c:d9:06:c9:
26:c0:79:94:0d:ab:3c:34:a9:d5:6b:64:a4:88:4b:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:82:2C:E9:7C:91:1A:B6:95:94:C3:A9:02:9C:03:B5:40:AD:0C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0dd0f07a-fa08-4166-b433-3243b09f2516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:61:74:b2:0f:4b:4a:81:66:32:87:80:69:07:2c:76:71:11:
6d:9e:3b:0b:3a:a2:ff:3b:b7:91:36:62:70:47:90:24:3a:0a:
fd:ad:77:2a:b4:29:8e:83:59:70:a6:bb:c9:20:ba:4d:22:92:
96:a6:d8:55:b7:13:a5:28:80:17:b0:b8:ce:e1:c3:a7:d0:ba:
a7:f2:ed:cb:04:8e:0b:82:13:db:12:90:25:cd:45:7d:72:db:
ff:f4:38:1f:96:f2:e0:2b:4c:29:ec:8d:92:4b:66:b7:39:e7:
88:46:d7:0a:2b:f8:3c:e4:9f:52:75:2a:c7:4a:15:5e:6a:af:
72:c1:c6:65:5b:43:09:1f:ba:ab:bd:1d:3c:27:9a:ed:98:7d:
58:c3:e8:f4:03:62:e3:fa:c9:93:39:db:50:45:b8:be:8d:4f:
75:0a:d5:10:fa:fc:2d:53:04:92:85:0f:3d:9b:eb:76:70:57:
de:5a:8c:c2:cb:07:5a:2d:d0:ef:c4:e1:d6:9e:a8:fc:4d:94:
15:12:d1:e6:6c:e7:8a:fc:85:d6:c2:89:ac:9b:23:43:bf:a9:
b5:28:76:e4:0c:54:06:0e:8c:80:d6:a8:e9:59:12:f4:d8:86:
26:b4:72:57:53:96:e9:d6:b4:6e:1e:81:cd:24:08:13:5b:97:
3c:8b:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:48:25 2024 by rpki-client on console.sobornost.net