Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c55a50e-dbf6-496e-993a-cf2cfe22014b.roa
File: 1c55a50e-dbf6-496e-993a-cf2cfe22014b.roa (raw, json)
Hash identifier: QfCy3elVIEsk8Cg64ByzFYLqDTaHK0TNmLbbiwkNf1w=
Subject key identifier: 46:EC:E2:62:4A:2E:16:05:A0:79:52:09:42:20:7F:35:D9:CF:85:DF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2B81DFE559A5A58A5DA11CEA5210F92A62034C77
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c55a50e-dbf6-496e-993a-cf2cfe22014b.roa
Signing time: Mon 08 Apr 2024 00:00:00 +0000
ROA not before: Mon 08 Apr 2024 00:00:00 +0000
ROA not after: Mon 13 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 09:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:81:df:e5:59:a5:a5:8a:5d:a1:1c:ea:52:10:f9:2a:62:03:4c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 8 00:00:00 2024 GMT
Not After : May 13 23:59:59 2024 GMT
Subject: serialNumber=fc5eff6212e79d0174e6e49a6e69790481fb669aec5793626e7a300523d09e4d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:8b:3c:71:63:7e:b5:bb:44:21:e8:a2:35:
05:ad:a1:fd:06:5c:f4:7d:d2:70:89:7c:14:24:3f:
f7:c5:9f:02:fc:fc:f0:27:17:f1:99:db:6b:af:ee:
9a:27:a7:81:82:cc:64:ae:a0:61:e1:53:8d:90:3d:
56:d2:d1:db:d7:7b:7d:db:7b:8e:36:d9:f4:b2:d2:
72:b4:7e:0f:c4:d8:60:df:5c:ea:34:6e:91:a0:36:
a7:5d:70:f8:67:24:8b:81:cd:ec:44:a4:75:6f:60:
00:24:31:80:f3:ad:6f:82:13:b5:e5:0b:1f:e5:f1:
92:2c:d4:03:e9:ac:be:14:91:3a:5e:1a:99:b2:c4:
4c:76:bb:7e:82:09:a7:d7:26:3d:14:dc:66:36:ff:
7d:29:6d:4c:9e:3a:fa:90:3e:9a:b4:1d:22:1a:79:
f6:3d:29:96:7e:86:c7:ae:9a:3c:b9:07:08:f5:3a:
e8:6e:c9:a6:08:cc:f0:fd:a5:34:6b:6e:d4:12:0f:
b3:69:16:6c:83:5c:db:b4:c1:05:69:c5:d2:d9:8b:
8e:d4:84:0f:83:37:43:07:56:50:97:da:67:6b:23:
af:31:eb:ab:80:2b:5a:a2:91:be:5c:a0:fd:87:df:
7f:d2:d8:25:24:5b:2c:93:84:e3:c0:cf:51:3a:8c:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:E2:62:4A:2E:16:05:A0:79:52:09:42:20:7F:35:D9:CF:85:DF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c55a50e-dbf6-496e-993a-cf2cfe22014b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cb:c9:68:eb:3c:85:93:ee:11:4e:a8:c8:24:98:e6:e5:d3:
a4:8e:65:60:3e:0a:2b:25:e2:cb:d9:95:05:f9:b5:31:8a:58:
2e:06:8c:00:f0:39:1b:fb:89:74:e9:15:dc:7a:1a:32:a1:34:
4e:af:e6:46:9f:ee:79:51:a0:e2:ca:40:4b:9b:c2:68:3f:d5:
81:ac:96:cd:55:4f:7c:33:1b:a3:34:42:6e:a1:86:3f:1b:53:
1a:d9:77:90:0c:d4:6c:cc:27:8c:7f:11:3d:8f:60:0d:26:c2:
bf:2e:c8:05:11:a2:03:d6:18:3a:07:1d:d7:59:71:56:f8:73:
9a:3f:cd:c1:bd:7f:4d:0b:67:c2:4b:72:39:d3:45:42:c3:b6:
82:50:ca:5d:24:21:d9:72:1a:38:4e:c1:75:e4:5e:de:4e:a1:
cb:ca:5b:be:d8:fc:37:e2:39:70:c4:f1:ed:35:cb:3d:92:94:
d4:b7:b4:73:a8:77:16:ac:4d:a9:e3:04:b3:3c:12:1f:00:db:
35:db:b5:94:60:61:e3:f1:56:8c:ea:cc:a3:ea:15:86:83:26:
2f:96:79:f5:3c:74:73:81:39:f4:39:20:a5:9d:02:d9:f2:74:
02:99:f3:48:1d:a7:27:4c:d4:2b:da:a3:27:9d:91:9c:29:c0:
99:e4:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 12:58:55 2024 by rpki-client on console.sobornost.net