Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18764e5e-1b70-46e3-bcfa-d66f6a515ae7.roa
File: 18764e5e-1b70-46e3-bcfa-d66f6a515ae7.roa (raw, json)
Hash identifier: UDrAbZ4rozVAKbqpU4l/59+ExTNFvfhZmTodjYMS7EA=
Subject key identifier: 8D:2A:25:01:19:93:C5:77:1D:0F:40:ED:85:32:76:83:4F:35:DB:9D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 436E523FDE8FC3BF8B996CE3410EA8F0A90E9575
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18764e5e-1b70-46e3-bcfa-d66f6a515ae7.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6e:52:3f:de:8f:c3:bf:8b:99:6c:e3:41:0e:a8:f0:a9:0e:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: serialNumber=4a1b488be7b8909a803b1d883e0a10d816dda7efebe5ecc3f25f037df79cbcfe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:61:79:61:79:2b:26:61:dd:95:cb:31:49:
20:fb:ef:d1:2b:2b:b4:b1:cb:f2:9f:3c:87:a0:46:
ad:e0:6a:20:76:bc:a8:e5:0d:5b:b3:bd:b0:60:31:
c5:dd:85:5a:1b:0e:3f:d9:3c:b1:91:2a:88:c6:36:
57:cf:78:94:57:f1:8b:90:13:89:fc:3e:7c:6b:f8:
99:c3:aa:7b:8e:fb:53:8f:9a:9e:17:96:f4:4b:49:
9f:e3:86:fb:a2:e7:bf:7b:02:e9:a7:59:06:7c:1b:
6f:5e:1c:d7:39:4f:25:42:f7:93:55:7c:21:e0:47:
93:1e:a0:d4:d9:c8:5e:0e:78:fe:91:67:35:77:7b:
06:04:a5:6a:0a:34:e9:31:85:f8:02:f3:f3:e2:0c:
48:3e:7f:8d:cc:f7:56:d1:d2:37:7e:c4:3b:ee:ec:
6d:ba:5e:db:f4:ef:6e:07:3f:a6:58:72:3a:1f:d4:
dc:21:09:2e:dd:5f:21:5e:4b:27:08:1f:f5:5f:7b:
6e:50:84:a1:d1:13:cc:7f:d0:12:8e:05:28:fe:f4:
fe:15:08:4b:27:9f:d6:49:c9:b7:0a:56:82:16:ba:
42:67:af:a7:38:05:fe:c0:70:af:b1:b3:b4:f5:16:
b5:3e:e6:7d:b7:6e:c9:90:2a:ea:eb:79:df:cf:79:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2A:25:01:19:93:C5:77:1D:0F:40:ED:85:32:76:83:4F:35:DB:9D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18764e5e-1b70-46e3-bcfa-d66f6a515ae7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:08:81:1d:00:e5:98:fd:4e:7f:21:48:f2:d8:af:11:ae:
cd:13:9a:fa:24:4c:39:93:0c:43:be:16:be:4c:30:08:23:cc:
d7:2b:35:b1:db:91:71:1b:dc:17:10:df:12:46:ee:04:13:ba:
07:dc:7b:21:0a:86:f4:dd:ca:0c:0f:d7:d2:07:49:21:1d:92:
b3:3c:2f:9b:83:b1:f3:85:f0:8c:e1:e8:bb:26:4f:b2:c1:c0:
38:7e:f8:8d:93:d8:bf:0b:f1:b8:b4:e3:67:b4:3f:c7:e2:22:
80:6e:20:a9:0d:8b:4a:dd:b7:07:fa:5f:d7:63:0b:5c:64:c6:
5b:53:4d:81:74:d8:8f:be:85:40:73:3d:72:d1:f5:da:e0:0a:
56:0d:40:43:1c:f7:ed:c4:49:f0:34:d2:c4:ce:52:42:39:04:
1f:51:36:4f:c8:e4:f1:26:64:75:ff:da:8a:61:f4:0a:91:65:
eb:a3:de:bf:95:d2:21:d1:8e:84:9d:41:22:5a:ac:ab:ee:47:
c2:5d:6b:b6:40:05:85:d5:63:15:0f:c1:da:f9:ac:28:7c:80:
17:e7:9e:9a:d0:52:ac:a4:f7:36:11:5e:9a:be:c3:4f:8d:2d:
3d:f5:7f:4b:c8:7a:e5:b2:87:74:9e:03:d9:29:d1:12:23:ca:
ab:11:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net