Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1db246f2-edee-413e-8e12-6bb50972c910.roa
File: 1db246f2-edee-413e-8e12-6bb50972c910.roa (raw, json)
Hash identifier: xdiSbPs+ix9KnG3hvxgEJ0tIdVTggbIoW2R+k48jCVY=
Subject key identifier: 2A:23:E6:2A:E8:7F:8B:D7:E5:FE:D1:F7:E4:E7:D0:30:E9:BA:DA:17
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0C3C6ABC16C5B7032EE28E6B15B28975F85FF63C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1db246f2-edee-413e-8e12-6bb50972c910.roa
Signing time: Sat 23 Dec 2023 00:00:00 +0000
ROA not before: Sat 23 Dec 2023 00:00:00 +0000
ROA not after: Sat 27 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3c:6a:bc:16:c5:b7:03:2e:e2:8e:6b:15:b2:89:75:f8:5f:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 23 00:00:00 2023 GMT
Not After : Jan 27 23:59:59 2024 GMT
Subject: serialNumber=296c105f6c9aa1dbcfdf1049ef0538319163cbf0fe855c5c2ccd1f12f75c8e0f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:62:35:0f:e6:cd:53:2a:7c:4c:6d:68:9f:
42:7e:a7:69:97:46:04:35:c6:c2:fe:88:1d:87:71:
ee:98:f1:ec:9c:06:58:02:fb:4e:d6:2f:3f:df:ca:
97:6c:5e:29:e0:b9:73:cf:1f:8c:12:cf:df:72:5c:
8f:b7:a1:2c:68:05:e5:70:39:5c:a7:76:23:21:a1:
c2:17:c9:12:e3:47:c8:a7:64:1b:a4:4c:ee:d5:e1:
37:bf:fd:0c:7c:13:a1:62:17:35:61:03:cd:e4:ef:
4b:8b:4a:9d:ba:5b:bb:06:c2:31:11:d7:0f:be:bf:
f4:cd:2a:dc:3f:f8:d1:68:a0:60:8a:c7:5d:13:e0:
0d:62:c0:d0:14:fa:dc:f0:e0:da:f7:59:f0:19:e7:
ca:c3:fb:e1:35:39:e0:67:e5:df:00:e0:27:60:91:
a3:18:f4:da:3b:42:97:70:e3:69:42:2a:4a:9a:4d:
1b:b3:8e:6e:58:c5:7f:ec:55:a7:4b:0b:2a:eb:c0:
2b:25:e0:96:14:8e:73:68:89:64:8b:cc:15:74:be:
a2:18:dd:2c:31:af:82:e5:da:17:f4:ee:2a:2f:7f:
4e:cc:8f:ff:06:59:c2:d5:4c:0c:2b:e8:9d:72:fc:
05:56:ef:10:d7:b6:b3:68:da:07:bb:85:f1:ce:96:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:23:E6:2A:E8:7F:8B:D7:E5:FE:D1:F7:E4:E7:D0:30:E9:BA:DA:17
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1db246f2-edee-413e-8e12-6bb50972c910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d8:6f:79:96:38:ab:91:57:67:51:75:13:3f:ad:25:61:39:
dd:a4:c8:a0:22:b1:1c:a8:59:32:d0:07:a1:cd:2c:be:dd:c5:
3c:56:46:9b:8e:01:e2:2d:dc:76:2e:9d:50:67:e4:e4:43:8d:
76:3d:28:44:32:97:0a:35:42:da:d1:a1:76:12:3e:1c:62:7a:
c6:35:a6:7f:51:f0:02:af:57:fa:51:53:76:21:8e:8a:23:2b:
71:88:0e:06:5b:e4:d2:be:4f:9e:0f:74:78:b9:21:39:ad:ed:
73:9c:dc:75:f6:4e:93:03:c5:0d:db:d5:49:9c:f0:f7:04:ee:
0a:cf:29:12:39:c1:0f:be:e6:bc:b4:df:d6:49:94:3a:fc:1e:
82:31:95:1e:90:9b:f6:ee:7f:6b:dc:54:72:a9:7b:bb:63:39:
eb:7b:31:48:21:55:db:dd:fa:70:ab:ac:61:5e:ab:29:41:70:
a5:92:57:e6:16:b3:4f:97:30:7a:c5:fe:3a:aa:72:aa:50:58:
cd:ff:33:b2:1f:68:44:89:5d:b0:5c:48:d0:71:f5:f0:dc:27:
f8:3d:d4:91:33:37:a2:e4:44:2c:fd:40:9a:8e:bd:4d:21:06:
06:ad:94:11:d2:1e:f6:4b:65:c0:2d:3d:9f:32:f0:6d:80:46:
49:31:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net