Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e51e477-aa78-40b2-85d0-8b23c90e8726.roa
File: 1e51e477-aa78-40b2-85d0-8b23c90e8726.roa (raw, json)
Hash identifier: /r5IWdHKg2aIlufLHael7osAmS6Pj05DnRUG5eBDaXI=
Subject key identifier: CF:42:83:AE:C3:1F:78:A5:88:60:75:49:51:1C:9D:F8:72:1C:38:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 04B750F296D637233C7F0BA25737357C847BD5F8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e51e477-aa78-40b2-85d0-8b23c90e8726.roa
Signing time: Thu 11 Apr 2024 00:00:00 +0000
ROA not before: Thu 11 Apr 2024 00:00:00 +0000
ROA not after: Thu 16 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 18:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b7:50:f2:96:d6:37:23:3c:7f:0b:a2:57:37:35:7c:84:7b:d5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 11 00:00:00 2024 GMT
Not After : May 16 23:59:59 2024 GMT
Subject: serialNumber=89bd8276ce04ca9f83881d8e6a9224261784f09293b9de2bfade50ac2745b35c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:8c:8e:b0:02:e2:bc:3f:47:e0:cd:08:64:
81:60:21:8a:cc:e2:82:2d:2e:a0:f5:1b:4b:21:5d:
75:1e:25:9f:f6:18:dd:67:d4:72:08:b7:ca:69:01:
aa:97:b4:84:86:2b:e9:87:9a:6e:10:d3:56:9d:7a:
1c:64:58:2f:65:b2:f5:06:50:d8:23:a4:87:8a:d0:
be:85:f0:83:c0:e9:57:91:e1:50:00:2c:69:74:e0:
1e:cf:fe:7b:9a:9a:86:3a:d6:b8:38:e0:5d:56:a2:
be:33:e2:2b:18:91:45:16:ba:f0:c0:6f:85:fd:5b:
a0:f0:af:ed:56:a3:95:f5:d8:fd:22:8f:d6:0f:29:
c1:37:1a:8c:18:32:9a:aa:4c:55:21:5d:4e:db:aa:
d1:d5:5f:b6:de:01:1a:97:49:97:16:f8:76:cb:a0:
3c:16:d6:26:63:3f:ff:f5:39:5e:9e:93:93:a6:fd:
d0:9c:cb:ac:3a:18:bb:65:79:87:5f:15:2a:74:df:
ec:1f:45:f1:48:3b:67:2f:1e:a6:19:97:81:b7:33:
cf:f6:d8:db:76:32:09:e8:19:e7:d9:17:b5:cf:7f:
d9:e8:51:a8:fe:77:fb:c5:03:fa:c3:40:7a:25:42:
a4:c0:0b:80:cc:47:f4:2d:28:16:3d:1b:7c:7e:be:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:83:AE:C3:1F:78:A5:88:60:75:49:51:1C:9D:F8:72:1C:38:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e51e477-aa78-40b2-85d0-8b23c90e8726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:2b:a9:4f:b0:c3:47:03:52:fa:66:95:42:ea:10:16:97:ba:
5c:a3:11:c9:8f:aa:2f:da:14:0d:51:30:d3:81:87:c6:29:00:
33:9e:6e:bd:ae:3c:20:6e:19:bd:d8:1f:e2:6f:ce:07:c3:71:
95:73:50:72:9b:ac:cf:f4:64:34:e9:f9:15:88:af:3c:9f:95:
6c:54:57:d5:10:ac:03:54:e4:c0:92:9d:c1:69:2d:da:61:65:
5a:28:46:7b:d7:39:37:5b:47:c8:76:e4:d8:9c:a3:db:71:ac:
7e:b5:b6:90:77:0a:2e:37:1d:e2:32:b1:e2:f6:69:08:c5:9e:
4c:df:77:9d:d9:cb:92:db:bb:fb:3c:e1:84:c6:cd:6a:16:20:
99:1c:3d:7b:22:b2:87:2e:86:ff:e6:41:fe:2d:55:a8:c5:9c:
6c:9c:f6:79:8c:2e:07:7d:e7:c0:01:c5:50:2c:93:2f:28:cd:
eb:b2:8e:52:3e:e1:80:4a:65:aa:1b:24:51:30:14:9a:9b:fb:
9e:3b:03:1a:ee:b4:89:0e:48:e1:14:92:d9:35:12:72:eb:55:
21:4f:52:f4:91:80:88:6b:3b:9a:f2:a3:4a:46:c6:10:bb:cd:
01:b7:6b:99:3f:12:8c:4c:84:9e:b4:d0:84:6e:92:f0:fa:71:
05:44:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 20:58:41 2024 by rpki-client on console.sobornost.net