Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19842602-6f66-4726-ab95-0fdb2f41ed55.roa
File: 19842602-6f66-4726-ab95-0fdb2f41ed55.roa (raw, json)
Hash identifier: efP6YGAmDvXiNW3xWcSR8GBypN7oDS3qx+DE0Y9zCYk=
Subject key identifier: B3:DC:2E:91:B4:2C:D3:BA:15:6D:02:D9:2C:C9:65:5F:AC:CD:EE:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6653BFD0C17BE5AEF5FB5D84531F3D04D83D926F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19842602-6f66-4726-ab95-0fdb2f41ed55.roa
Signing time: Fri 24 Nov 2023 00:00:00 +0000
ROA not before: Fri 24 Nov 2023 00:00:00 +0000
ROA not after: Fri 29 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:53:bf:d0:c1:7b:e5:ae:f5:fb:5d:84:53:1f:3d:04:d8:3d:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 24 00:00:00 2023 GMT
Not After : Dec 29 23:59:59 2023 GMT
Subject: serialNumber=e61af4118b082d3998d0ece1173439a308312c665d9bb380bd3508e3f159934c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:02:8e:b6:51:76:dd:e4:fb:2f:76:0a:63:
50:c4:d6:2a:50:f2:16:96:fb:57:0f:6e:28:11:fc:
29:3c:ed:5f:ba:f7:01:d7:76:fc:6b:d5:44:f2:3f:
23:61:65:01:28:93:b2:ed:92:da:0b:50:0c:1a:49:
55:b2:f6:f4:b6:ad:5a:4f:1e:0d:dc:3d:21:f5:9a:
a6:3c:bd:7c:aa:33:9c:f5:91:c2:50:d4:8d:45:cc:
e1:66:43:b7:d0:81:9d:e5:a6:29:0d:0e:23:c6:e8:
fe:94:c9:55:22:f6:f7:05:86:63:2a:db:41:c0:03:
42:10:f0:55:66:8d:12:23:20:4b:c0:ba:98:59:fb:
68:04:c3:92:b9:12:1d:6a:4b:c8:f1:c7:c5:90:6f:
35:de:91:32:62:d3:7b:b0:30:ad:3e:98:2c:96:ad:
8f:0a:22:87:90:ff:68:b4:c5:c5:a2:bf:5b:af:9a:
ab:e6:8a:de:27:3b:06:25:7d:87:66:af:76:4a:a9:
1d:0a:2e:01:61:a8:f7:7f:a3:0a:27:ba:63:16:31:
7e:29:be:b7:2e:9c:5d:1b:9d:f3:6c:bd:bf:fb:90:
c1:4f:c5:8f:6d:48:a1:f7:36:ed:84:79:a4:fa:16:
9d:f4:b7:46:b3:cd:09:2e:2e:99:8f:3d:a7:18:02:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:2E:91:B4:2C:D3:BA:15:6D:02:D9:2C:C9:65:5F:AC:CD:EE:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/19842602-6f66-4726-ab95-0fdb2f41ed55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7d:61:eb:8f:d3:f0:ce:3a:30:61:28:b1:f1:9e:d6:9d:a2:
81:fe:0a:a5:cd:67:63:8f:d8:4c:d7:80:53:35:34:6f:14:a8:
d1:07:f8:bd:1d:0f:bb:a8:c5:f7:7b:48:42:8f:84:2e:f8:84:
26:e9:bb:ca:3c:a2:88:de:3c:1c:0d:cb:43:e4:98:24:7c:e6:
30:6f:ee:fb:b4:e9:d2:b7:32:0d:22:d7:b0:c7:f1:3d:67:95:
f7:2a:0b:9f:44:82:54:f6:84:7a:a7:44:61:48:07:3d:9a:b0:
cd:67:de:54:78:89:67:44:b9:96:e2:cf:11:7a:15:fa:d8:d6:
ea:01:fe:a4:05:5d:46:4b:90:b0:7b:41:92:9e:81:db:0a:e5:
f3:dd:77:74:f6:9a:78:ff:10:9d:2a:50:46:b2:1f:60:7b:32:
4c:95:73:b6:ba:24:3e:c4:39:5e:ef:2e:c7:04:fc:32:c0:cd:
93:39:e0:c2:1d:04:ed:2b:8c:71:c8:77:e1:a5:68:43:1c:7d:
a7:bd:bb:61:f3:80:69:c4:3b:e2:8a:f7:3d:54:d4:b7:ec:f9:
fa:20:08:76:81:34:9a:9a:eb:c1:b1:16:1c:4d:37:67:a3:17:
1f:48:c3:37:14:32:48:ae:3a:b4:3c:ef:0b:e4:fb:52:03:51:
6c:bc:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net