Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b144f9e-f999-4c9b-b1f9-a322f048bb69.roa
File: 1b144f9e-f999-4c9b-b1f9-a322f048bb69.roa (raw, json)
Hash identifier: DbdeU7OqEf89OGCoaHD8QcjGkYwVk1h+5lrVAYh9QmA=
Subject key identifier: 50:13:15:59:33:6A:74:7B:0A:CA:8E:1F:FC:1F:8A:5B:EE:ED:32:D3
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A603D23CF93FD97635B989D4C4AF6FDB1CC10EB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b144f9e-f999-4c9b-b1f9-a322f048bb69.roa
Signing time: Sun 03 Dec 2023 00:00:00 +0000
ROA not before: Sun 03 Dec 2023 00:00:00 +0000
ROA not after: Sun 07 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:60:3d:23:cf:93:fd:97:63:5b:98:9d:4c:4a:f6:fd:b1:cc:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 3 00:00:00 2023 GMT
Not After : Jan 7 23:59:59 2024 GMT
Subject: serialNumber=4ab5988d710f8933411270754b75b6c6b24011c499cd457cc76a0dde6c383131, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:c4:ab:0f:56:0c:15:2f:c6:0e:f2:0d:80:
f7:81:d8:4d:ef:b0:cd:f4:59:20:38:41:2a:61:f8:
16:05:8c:39:9c:6b:e2:c8:a5:8e:81:5a:34:fc:dc:
71:81:7a:c0:b8:29:3f:3f:64:86:a7:d1:c7:eb:55:
e2:de:2f:2c:bb:98:b8:50:9c:22:20:58:c5:bd:85:
f6:6e:1f:c6:76:b9:b0:b3:d0:41:14:02:de:59:15:
29:28:40:fe:b6:36:ef:06:4b:8f:89:34:d3:d4:a8:
6a:02:fa:cd:fb:4f:8c:c6:ef:79:7d:16:ec:41:10:
b8:c3:ba:50:eb:89:6c:97:35:f9:8b:bc:a4:ec:29:
a9:07:0d:df:e6:b0:45:4e:0b:01:92:f0:b2:de:58:
ec:a1:6e:07:f4:6e:d6:49:9c:6a:16:29:6b:b1:39:
00:69:6a:9d:1c:9f:88:e0:0f:a2:c3:c6:16:38:35:
93:33:10:f7:fb:5a:a4:f5:96:cb:af:0a:74:03:dc:
1c:66:45:80:82:69:da:d2:b4:bb:44:b9:2d:f5:45:
27:19:61:70:96:0b:8d:db:71:91:ca:70:56:59:b0:
ba:c4:7b:31:d6:8f:7f:1e:3d:d1:2b:40:17:dd:11:
37:75:19:ba:ab:66:14:03:e3:8e:8f:35:eb:c2:8b:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:13:15:59:33:6A:74:7B:0A:CA:8E:1F:FC:1F:8A:5B:EE:ED:32:D3
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1b144f9e-f999-4c9b-b1f9-a322f048bb69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:44:fa:71:49:fd:18:34:c1:ef:cf:b7:2e:31:84:f1:e0:de:
1e:42:91:9a:35:1b:14:49:d1:78:c1:21:a4:31:94:6a:9f:87:
b8:66:2a:57:51:61:ac:b0:ed:cc:2e:59:2e:1e:c3:78:34:55:
cc:de:59:e1:21:89:90:0f:0d:9a:75:46:68:18:cb:ed:d5:13:
05:eb:fd:ec:6c:b7:c8:d3:d9:ec:57:1d:0e:14:13:d6:79:5f:
96:3a:80:6c:7f:90:0e:b8:cc:86:96:06:7c:14:21:77:2f:33:
09:77:de:89:ef:43:7a:ed:06:7f:d9:0a:98:aa:c8:16:62:68:
1d:70:67:19:e6:5e:6a:b3:6d:f2:a8:03:3e:4b:23:88:82:57:
c1:d7:f2:f4:3b:44:ef:6e:fd:1d:d0:28:65:6e:7a:7d:25:6d:
98:0c:df:58:d6:c0:f1:6a:38:72:61:95:f8:64:f0:08:d5:bc:
1e:f2:03:69:48:03:11:82:6a:d7:fc:ef:fb:c4:2e:57:2b:98:
2c:d0:54:34:68:c3:07:17:23:c4:25:c1:08:d8:b5:95:6d:21:
37:f3:55:80:96:5c:dc:e2:63:2b:f6:f4:90:d5:d8:93:d4:b6:
90:f6:38:59:5b:07:0d:36:9b:23:13:4a:e8:70:be:c1:41:09:
7c:16:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net