Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f3199f4-bc49-44f2-92d3-69465fc8531c.roa
File: 0f3199f4-bc49-44f2-92d3-69465fc8531c.roa (raw, json)
Hash identifier: OTci+VCv3guG82yf5T4zYTFiz7mKwcBuTK320+ARpfo=
Subject key identifier: E1:73:B3:31:D7:59:15:26:A2:D0:41:B3:1F:02:19:46:97:43:85:EE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3DE66785D32A19125D78AB7550B59D8A3F3F75A4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f3199f4-bc49-44f2-92d3-69465fc8531c.roa
Signing time: Sun 17 Dec 2023 00:00:00 +0000
ROA not before: Sun 17 Dec 2023 00:00:00 +0000
ROA not after: Sun 21 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e6:67:85:d3:2a:19:12:5d:78:ab:75:50:b5:9d:8a:3f:3f:75:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 17 00:00:00 2023 GMT
Not After : Jan 21 23:59:59 2024 GMT
Subject: serialNumber=9d3c50710307e37c74d1133f476654e101eabe3c1c19e8778779a5d87048b137, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:f9:df:70:fe:e1:d4:2f:f0:fc:8b:d5:8e:
38:c8:8b:9b:a9:eb:b6:31:6c:bb:83:b8:28:88:42:
35:55:a6:7a:76:a5:49:91:20:6f:1f:87:dd:ac:4b:
9e:7e:5c:15:68:13:42:c1:11:af:57:d2:b7:51:eb:
a6:1c:55:6d:97:47:65:59:0c:de:6d:07:38:eb:f1:
d4:56:2b:d3:e9:7f:e6:a9:e8:fe:ce:73:8b:cc:cc:
d7:be:92:69:5a:0c:31:b4:f6:38:6a:7e:9e:04:26:
48:b2:be:5a:d1:3d:45:b3:3a:af:dd:66:44:18:fc:
fd:23:84:63:38:52:88:ba:ea:a7:6c:53:0c:7d:c4:
a0:06:a6:46:81:17:cd:bb:6e:b4:9c:ab:15:98:87:
b8:eb:37:ab:23:08:79:57:3b:63:8c:6c:05:67:1c:
d6:95:ec:8b:68:d9:b2:2f:15:da:c9:de:37:e8:1a:
64:45:26:d5:6f:c7:e0:9c:50:8a:c9:32:da:8c:5c:
d0:f7:6f:03:71:57:a1:59:df:07:a9:9c:27:b7:39:
18:33:7b:d9:6c:2e:09:6c:cb:7a:91:d1:81:00:6f:
c0:aa:1e:5e:d5:50:8e:a1:08:ff:c2:ce:ec:58:08:
ac:26:06:14:e2:f9:5c:2e:cb:a3:95:50:f8:e8:f0:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:B3:31:D7:59:15:26:A2:D0:41:B3:1F:02:19:46:97:43:85:EE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0f3199f4-bc49-44f2-92d3-69465fc8531c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cc:c8:63:8d:e2:b9:e5:c3:a7:f3:09:c6:2a:0d:08:7e:7b:
83:58:35:06:28:74:7d:1f:aa:3d:ac:4b:47:45:30:40:d9:c3:
51:04:9a:cf:c4:b0:7a:51:26:c6:54:f3:75:b8:12:3c:23:8e:
33:ed:f0:0f:1a:23:fb:ed:0e:7e:07:db:4b:e3:73:10:ba:0e:
ed:b4:2b:44:1e:79:eb:de:69:7e:66:de:53:10:f9:48:8a:74:
d7:a4:a2:95:7b:66:55:79:69:f2:f4:68:e0:97:e3:0c:23:c5:
00:87:94:c0:62:1c:89:a2:d1:1f:bc:be:c0:8e:cb:51:4f:53:
bd:f7:24:42:3c:17:92:d2:0f:55:9e:92:34:19:72:68:67:07:
03:26:24:37:bd:4a:8a:1b:78:3f:a7:1e:62:7a:c8:a0:9a:13:
51:c0:91:34:a4:1b:0e:a4:9d:97:6e:6f:40:2d:4e:42:56:71:
36:52:f1:6c:9a:11:a8:66:3e:b6:bb:b4:67:33:f6:35:a9:44:
5c:9c:48:ac:8a:fc:9f:81:5c:64:c7:a6:65:d6:36:b8:f9:54:
da:56:23:d7:7b:75:79:0a:d5:9b:da:78:ed:c1:d3:db:e9:cd:
00:80:0d:2a:71:f7:4b:61:4e:bf:56:63:24:7a:83:56:f3:92:
c0:21:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net