Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e19f5d0-87a9-4808-b388-7ba824912564.roa
File: 1e19f5d0-87a9-4808-b388-7ba824912564.roa (raw, json)
Hash identifier: 1i589M1CoXVBKJVPYBY7eIbxEqggkRnjwEvob6p2Q3U=
Subject key identifier: 00:D7:DB:7A:CA:1E:68:FC:E5:E6:F7:11:6B:A1:87:13:0C:A1:DD:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3228C35800A1CA15C51097B19A96E72A93E68537
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e19f5d0-87a9-4808-b388-7ba824912564.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:28:c3:58:00:a1:ca:15:c5:10:97:b1:9a:96:e7:2a:93:e6:85:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: serialNumber=4663cf857a279b22224e5c1ce91704aed90100a571815dba0098dfaa2062faf3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:64:a8:6f:c1:43:e0:7c:b8:8b:85:9e:7a:
94:c3:24:9b:14:cf:be:01:93:63:1a:d8:70:61:38:
a5:fa:68:aa:1b:e5:a4:b8:b1:f5:71:c0:88:f0:8c:
c1:82:e3:0c:b7:07:4e:ea:d8:33:44:8b:a7:7a:12:
10:34:b1:52:42:a9:89:94:ea:d4:cb:70:80:f0:9a:
f9:9d:49:28:cd:5f:b6:9d:60:25:dc:33:8e:e4:12:
2e:a8:ec:06:b4:77:5c:9e:0f:18:99:cf:fa:29:9b:
83:f3:19:e4:0f:9a:5d:a3:fb:dc:ec:36:92:0a:be:
2b:6c:bd:ad:13:50:29:0d:ae:4d:14:ca:b5:ed:ae:
8e:f4:1a:c0:3b:77:d3:53:a3:2e:de:90:6b:09:b7:
b9:4d:47:ac:2f:59:93:7f:be:90:ec:34:34:2a:8a:
c0:b2:32:6a:7c:0c:2d:c8:ba:ad:0f:4c:5a:03:77:
82:5c:c2:20:6c:ac:6b:8a:94:a2:21:33:6e:12:e2:
21:db:d2:a6:d7:76:c7:94:86:d7:41:af:be:b7:8e:
4c:53:52:a5:df:52:4d:bb:de:0f:05:2e:7d:75:d3:
ca:cf:c4:9d:e1:33:58:f0:08:97:c7:77:ec:47:5b:
52:76:de:0e:98:9d:e1:7e:d5:b4:85:b5:b3:bb:ee:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D7:DB:7A:CA:1E:68:FC:E5:E6:F7:11:6B:A1:87:13:0C:A1:DD:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e19f5d0-87a9-4808-b388-7ba824912564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7a:bd:1d:b2:1b:d2:6c:3f:aa:48:a7:65:28:60:5e:24:71:
95:4b:d5:14:90:f9:7c:cf:97:19:42:f3:bc:c9:9b:62:74:0e:
29:7e:4a:e6:69:b8:32:92:3a:ac:7d:99:7c:0c:ec:51:6c:67:
e7:7a:94:98:c7:70:ca:44:db:e9:b0:9e:f7:d7:ae:a0:d0:c2:
c1:52:f2:94:51:20:87:63:93:34:bf:94:59:9c:35:2b:df:b2:
55:f3:61:d6:c2:c7:bb:32:45:38:73:6b:ef:f4:91:8f:fb:86:
e5:db:53:a4:95:04:b0:3a:36:44:ef:f6:63:49:ec:c2:57:aa:
e4:3c:fd:f7:f7:eb:2f:f6:eb:71:03:17:7a:4c:82:d2:b2:97:
0c:13:aa:c0:a6:39:c9:d6:aa:5a:e6:bd:15:ca:b8:e0:a0:bf:
02:aa:d1:d7:05:09:ed:ae:f1:49:90:3a:aa:bb:7e:ec:07:85:
11:e2:93:75:e5:66:25:47:26:89:a1:fb:fc:d8:df:5f:a7:98:
09:7d:ea:ce:24:b0:89:53:23:47:ba:4f:c3:7e:28:41:46:bb:
f7:99:45:b7:9d:36:48:c0:3f:2b:ec:0e:89:65:b6:4f:f9:4f:
f5:79:2c:c1:54:59:b1:67:d7:7b:52:71:93:eb:0e:78:f7:7b:
e9:81:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net