Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c67e1cc-6545-4f05-a91e-862c367993db.roa
File: 1c67e1cc-6545-4f05-a91e-862c367993db.roa (raw, json)
Hash identifier: o16WbplPbdshfD9EMqoqc82E20z+Bz10wEDp/Bo4Ck4=
Subject key identifier: 16:F4:57:BD:42:0A:C9:22:31:03:10:D4:9B:AE:EE:9F:2B:1B:85:9F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1CD5BE2253966439BB6EFA3538A1FF753D0ABA9A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c67e1cc-6545-4f05-a91e-862c367993db.roa
Signing time: Mon 18 Dec 2023 00:00:00 +0000
ROA not before: Mon 18 Dec 2023 00:00:00 +0000
ROA not after: Mon 22 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d5:be:22:53:96:64:39:bb:6e:fa:35:38:a1:ff:75:3d:0a:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 18 00:00:00 2023 GMT
Not After : Jan 22 23:59:59 2024 GMT
Subject: serialNumber=356c3c3bb86f189cda1aa1f56d574ad96ee15b65d85f9384240f82bcc2b8335e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:99:8d:9b:fd:a7:61:5a:d6:af:89:ac:34:
40:31:8f:5d:93:1d:3b:bf:6c:12:53:e1:56:d4:ea:
5c:6b:63:28:ba:c6:63:90:71:16:c2:c7:4f:4e:3a:
f9:a6:52:9c:fa:17:e4:de:4a:43:98:88:b6:cc:6b:
2a:fa:5a:bb:6e:f2:e4:94:29:9a:02:35:3b:03:b0:
84:eb:6d:fd:03:13:8d:a0:40:27:50:67:a2:96:3c:
37:25:ce:79:8a:da:1c:a5:5c:5b:12:e6:c5:c6:64:
cf:bd:a7:e4:c4:b0:bd:54:dc:00:c2:78:76:06:1c:
cd:cc:ca:c7:61:ff:b1:46:3b:1f:c8:3d:04:97:f1:
f5:64:d3:5f:7a:df:ac:d3:b1:ad:a6:5d:7a:82:09:
31:d4:2f:af:b5:6a:0a:e4:02:c7:eb:c3:6f:06:c9:
12:e0:bc:4f:ce:21:c2:1d:77:7a:f8:38:ba:42:87:
b9:33:e6:4f:89:d1:6a:e4:43:d7:c8:55:d1:b9:57:
7b:81:f9:ae:da:ff:7e:38:28:6f:a2:97:c4:17:36:
fe:38:e5:fe:61:ed:33:e0:87:ba:ce:ab:38:b1:48:
69:33:00:aa:d6:b3:bd:6b:66:fc:4e:77:8f:c5:4e:
fe:f0:35:f9:8a:9f:42:3d:44:2b:e3:af:ba:3a:af:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:57:BD:42:0A:C9:22:31:03:10:D4:9B:AE:EE:9F:2B:1B:85:9F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c67e1cc-6545-4f05-a91e-862c367993db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:66:b0:67:77:78:d7:5d:59:1b:b4:8f:b3:a8:61:5b:e1:b7:
00:2c:db:3f:4b:d8:24:83:95:16:be:43:41:93:b4:13:51:e0:
f2:66:09:14:14:5b:ed:fe:cb:b1:bc:57:28:34:e8:c8:ca:0c:
6d:60:80:ea:af:9c:b1:d2:98:96:10:dd:a2:ed:91:35:d3:0e:
40:15:eb:61:6a:e6:58:cd:2b:06:a7:df:fd:29:9c:58:89:59:
5a:b3:01:ce:43:c9:af:01:ab:25:6c:81:8e:84:52:d6:ff:c1:
02:42:0b:64:e3:2d:27:8c:a5:a5:c8:64:56:7a:58:63:d3:36:
c9:6e:62:50:e6:57:97:09:f0:04:da:0e:92:11:ed:49:8a:10:
e1:48:d9:b7:ee:72:bb:7a:c2:8a:07:9b:dd:cf:28:a6:5d:8c:
1d:c0:2e:79:7d:64:44:5a:30:49:3f:58:9d:de:60:43:e3:83:
16:e6:23:43:76:db:90:62:d5:68:5c:bb:1d:a8:4c:68:24:14:
e4:ad:68:dd:9f:81:c4:17:6a:02:9f:1b:c6:3f:ae:36:2e:ba:
b3:8e:c9:1b:37:76:ae:17:0d:45:f3:17:14:ea:bc:bb:b3:f5:
46:4d:00:2c:52:21:d6:8a:4a:7e:5b:52:49:69:a1:4d:9d:7f:
39:c1:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:10 2023 by rpki-client on console.sobornost.net