Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a3e021-b6dd-4d7e-afd5-3f55e877bc9d.roa
File: 17a3e021-b6dd-4d7e-afd5-3f55e877bc9d.roa (raw, json)
Hash identifier: wHC7pbdVdhXbDxJ13PjEBpkFYJpgCD+gjWrw2GJMl+w=
Subject key identifier: B6:60:54:77:0E:06:00:E9:36:F4:4C:41:29:79:E8:76:EB:75:8E:47
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1BEF0E94DD7ECC14B6035B8043795F892EE13B5C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a3e021-b6dd-4d7e-afd5-3f55e877bc9d.roa
Signing time: Mon 22 Apr 2024 00:00:00 +0000
ROA not before: Mon 22 Apr 2024 00:00:00 +0000
ROA not after: Mon 27 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 01:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ef:0e:94:dd:7e:cc:14:b6:03:5b:80:43:79:5f:89:2e:e1:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 22 00:00:00 2024 GMT
Not After : May 27 23:59:59 2024 GMT
Subject: serialNumber=0895a54c41a42279ff590f6860fea9250c54443ed8c43391be168a332795de50, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:d3:11:2d:b9:0a:47:59:70:38:aa:0e:d1:
79:3b:3d:2e:32:c9:0c:01:1b:d2:19:bb:5b:e8:94:
50:c0:9d:a9:a9:10:73:e2:15:ea:6e:24:af:b2:63:
b8:bd:96:93:d7:f0:e2:1a:86:33:9e:39:a8:66:96:
3e:46:79:e8:e5:a6:38:b1:b0:c3:a8:51:1f:d3:1f:
39:fa:2f:fa:bc:51:d5:2b:b9:bd:35:33:f9:05:4c:
d1:19:0a:1f:6a:5d:e5:f3:39:4d:da:d8:19:3f:9a:
0d:a8:3a:76:9b:32:be:cf:f9:37:f0:4e:b6:2e:d4:
69:f8:d9:5d:9f:6c:b4:29:ae:08:42:51:e2:b5:93:
d0:fe:fb:d0:be:ea:55:f3:dc:74:9b:46:c4:81:36:
bb:5a:a0:12:b2:fe:52:df:28:dd:4c:b3:e6:e8:aa:
8d:d6:35:00:2a:28:2d:4b:89:7e:78:1c:6b:71:fc:
50:59:94:fd:a7:aa:83:bc:ce:e8:89:3d:68:a2:8b:
ce:b9:c9:12:16:29:4d:6c:35:da:bf:7c:04:7b:c0:
93:14:c2:89:3f:45:f5:06:b8:26:2c:0f:f1:ac:4b:
51:7f:6e:7e:47:a6:24:ab:07:c4:48:11:85:55:93:
e4:a5:88:7b:7f:00:f0:c8:cc:cd:8c:42:28:4f:3d:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:54:77:0E:06:00:E9:36:F4:4C:41:29:79:E8:76:EB:75:8E:47
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/17a3e021-b6dd-4d7e-afd5-3f55e877bc9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0e:03:62:f4:dc:05:fd:ef:a0:47:e4:a1:76:26:5e:3d:92:
46:31:29:0e:a2:2b:19:c4:94:96:e3:cc:59:70:ff:7b:0b:44:
dd:5f:31:7a:d3:42:f2:d7:1b:91:f4:b4:af:cd:5c:f6:47:f7:
8d:77:db:21:56:92:9c:0d:25:3c:c0:36:65:e6:62:a9:9d:02:
f0:ea:48:b4:67:d1:61:9c:4c:6a:0b:ea:ac:98:9a:1a:8e:c0:
e5:04:1f:35:f1:44:bd:37:f4:7b:fe:a9:c5:40:ce:3f:be:f7:
e3:6d:6c:62:a6:34:10:0c:5d:b6:43:00:0f:83:ef:4c:1e:87:
25:aa:f6:81:a4:87:39:26:c2:be:03:73:03:a8:fd:d1:16:2c:
40:b5:81:22:64:da:c2:cb:bb:52:ea:8f:de:8b:10:16:aa:b5:
9f:cc:82:51:4e:54:a1:e3:61:58:91:9c:14:e2:9a:36:45:df:
7d:cb:c3:49:01:88:21:38:48:91:ad:a2:05:1f:8b:52:a9:80:
6a:0a:31:6f:ed:af:eb:fc:18:46:32:ed:ee:40:94:67:e4:09:
b0:94:b7:eb:4c:aa:f1:a5:8c:b8:f9:7c:c5:37:16:2e:94:ac:
bc:5b:3c:5c:8a:b7:67:d6:00:14:f0:a6:76:4d:37:c4:f7:80:
7e:61:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:15:05 2024 by rpki-client on console.sobornost.net