Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c50b75b-99d5-4e43-9d34-0cc7bcdb9a3b.roa
File: 1c50b75b-99d5-4e43-9d34-0cc7bcdb9a3b.roa (raw, json)
Hash identifier: hRPKXgbvqXBkyJdy8qFCcpejS7aXGRuA0hSVglYbHeI=
Subject key identifier: BB:F6:C3:F3:78:84:4D:EB:8C:81:C7:EA:25:65:61:13:E1:7B:D3:25
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 39B1E3F9656DD3D92ACB5F28BDF5BADDE511E52F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c50b75b-99d5-4e43-9d34-0cc7bcdb9a3b.roa
Signing time: Thu 21 Dec 2023 00:00:00 +0000
ROA not before: Thu 21 Dec 2023 00:00:00 +0000
ROA not after: Thu 25 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b1:e3:f9:65:6d:d3:d9:2a:cb:5f:28:bd:f5:ba:dd:e5:11:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 21 00:00:00 2023 GMT
Not After : Jan 25 23:59:59 2024 GMT
Subject: serialNumber=986c8d3699e23fc6f0aed8d11155170f36204841148638af4b25223497fe4c89, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:84:c6:50:1e:fa:9b:68:b9:ef:e1:08:ed:
5e:35:db:8b:f5:40:d2:29:b0:c3:e8:80:e7:27:d4:
13:9c:c1:d2:76:b6:36:d6:25:47:f9:28:d4:8d:02:
e6:ca:e6:50:10:65:bb:6f:2d:7f:7c:83:c7:4e:e8:
75:8d:fc:e4:6e:7e:f0:25:7e:2d:c8:24:88:f7:56:
55:54:4f:f3:76:c6:65:09:5b:df:4a:63:83:a8:31:
fa:11:b3:e8:c0:dc:21:fd:00:b2:a7:36:53:28:46:
75:ad:50:6f:83:d5:2b:97:14:8e:e5:62:e2:39:40:
ba:d0:49:58:7b:e4:6f:21:8b:97:02:a7:f1:2e:9f:
5b:5a:4b:1f:1b:c9:2d:cd:da:4e:6d:9b:74:b0:eb:
a9:ed:ef:37:71:36:9b:bf:f9:be:c6:ea:d4:dd:96:
47:04:a4:69:42:21:df:aa:30:4a:8f:83:f8:91:42:
fb:59:97:8d:ee:18:29:f7:26:20:bf:a1:a9:dd:61:
89:f1:db:49:5b:58:97:cc:fd:11:38:44:69:49:22:
80:2e:f0:65:05:5a:f6:b9:35:5d:92:94:a2:88:57:
5a:44:3d:d2:a2:dc:e6:07:77:39:95:69:43:de:37:
09:b6:80:64:74:14:0c:a3:38:c8:5f:c0:53:8f:a7:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:C3:F3:78:84:4D:EB:8C:81:C7:EA:25:65:61:13:E1:7B:D3:25
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c50b75b-99d5-4e43-9d34-0cc7bcdb9a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:69:ae:f7:7f:d7:31:d0:52:27:dc:c6:77:c9:67:2a:3e:ad:
fb:bb:9c:af:20:09:60:3c:42:1c:7b:eb:6f:6d:66:65:a9:78:
f5:d6:26:63:31:4e:43:08:0a:01:0b:b5:5a:f9:d6:54:18:fb:
96:c4:dc:85:8b:24:fb:4d:82:95:02:e9:c6:7c:69:2f:36:eb:
64:51:5b:99:97:29:09:88:aa:34:4a:64:69:5c:e6:1c:fa:13:
3d:e1:aa:c9:35:93:f1:0e:8d:fd:6f:8d:ee:de:83:b9:9a:1a:
ec:53:61:57:3d:2c:bd:ee:72:1f:43:33:e9:6b:3f:55:bb:af:
03:6f:a5:f8:cc:b8:ed:ad:8c:90:61:b9:4a:18:43:4f:1a:9d:
6b:e4:4d:1a:85:98:02:27:19:5a:83:3e:24:d1:1f:55:04:73:
04:92:fe:84:e6:91:e8:4b:3c:d0:61:62:09:a5:5f:a5:ec:23:
e3:88:bb:aa:3f:d8:61:4a:d3:93:ab:dc:9e:24:07:29:cb:56:
29:dc:cb:03:54:9a:9a:3c:d0:71:e4:9a:24:69:a3:26:12:ab:
17:c1:d2:e7:85:4e:c2:b4:f6:d2:56:d6:10:f6:f4:32:2c:45:
c5:9f:f2:f3:94:3c:1a:8b:3b:af:4a:54:27:85:56:4c:80:0a:
fd:1b:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net