Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/205de5bd-ec80-4d20-a20e-81f0077130bc.roa
File: 205de5bd-ec80-4d20-a20e-81f0077130bc.roa (raw, json)
Hash identifier: DL4ZjwKsRFlhpbd4gbSdHL0+li1O0SCEzBtXv6sTOcY=
Subject key identifier: 4D:64:A2:96:86:A0:2C:9A:2E:20:2D:B9:1B:AA:50:51:28:62:A5:7F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 164EDDF0FA3EC3945CE7F6D77312E40D6831CEDC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/205de5bd-ec80-4d20-a20e-81f0077130bc.roa
Signing time: Sun 24 Dec 2023 00:00:00 +0000
ROA not before: Sun 24 Dec 2023 00:00:00 +0000
ROA not after: Sun 28 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4e:dd:f0:fa:3e:c3:94:5c:e7:f6:d7:73:12:e4:0d:68:31:ce:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 24 00:00:00 2023 GMT
Not After : Jan 28 23:59:59 2024 GMT
Subject: serialNumber=99ad702dae48debe8ab576da8b6d469bb7b16c27b53d99bcd227f5b9611cdfe2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:dd:14:98:bc:9c:17:f6:94:82:8d:ac:84:
5a:a3:50:56:ae:6e:eb:b2:05:04:58:57:d1:09:1e:
5a:e4:ec:33:66:51:9f:d7:a5:fe:38:af:55:e1:1b:
32:9e:28:e3:42:b6:81:4e:9e:0f:a9:d9:87:56:1a:
22:12:30:c5:7a:7b:9b:e9:c4:a4:a0:b4:66:1c:85:
d9:6f:be:77:b5:a8:c3:27:db:f0:00:cb:a4:47:62:
a5:f2:b2:88:9f:18:83:2b:ad:f0:3f:7e:dc:0b:e9:
e9:a1:1c:b6:12:4d:f0:f2:e5:09:35:c6:ae:24:92:
25:f5:83:ca:97:47:e9:b6:25:3a:2b:68:12:fc:f9:
29:35:bf:68:e5:ce:0c:21:dd:2c:24:f1:43:e2:56:
9a:38:6a:e5:a5:00:bf:7d:dc:83:df:15:bb:ec:8e:
40:2c:28:31:c2:58:72:3a:47:87:c4:bb:c9:8c:4a:
64:cd:9a:22:45:59:0f:77:d6:de:43:e4:b0:7f:af:
9d:a5:36:bb:fa:96:73:39:b2:85:b5:7e:ea:7b:78:
99:6d:5b:5a:7b:97:2c:2e:69:62:13:2b:f6:dc:8b:
54:70:91:bc:67:32:4b:ff:61:78:10:22:a8:50:85:
81:ba:26:27:40:51:10:6b:93:be:e2:41:05:25:79:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:64:A2:96:86:A0:2C:9A:2E:20:2D:B9:1B:AA:50:51:28:62:A5:7F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/205de5bd-ec80-4d20-a20e-81f0077130bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:30:a3:dc:ed:32:3a:04:24:01:96:b6:45:09:23:8c:66:0e:
87:3b:1a:f3:87:fa:39:4d:e3:af:40:f2:20:96:cf:c4:ba:71:
de:5c:33:a5:ab:9d:8e:e3:29:4a:49:6b:0a:cd:a9:de:3a:80:
48:40:26:80:b5:e1:41:c0:58:96:16:ac:92:19:26:dd:f0:62:
b9:8e:73:b9:30:3b:cd:28:1e:8b:4f:e4:d1:05:b2:00:fd:3e:
fc:d7:aa:67:3c:07:9b:66:07:d5:19:9f:25:14:9b:4a:15:ea:
d0:42:7b:63:65:91:9f:5a:40:ab:42:fc:e2:fe:01:5d:f5:3d:
6e:32:29:93:f9:86:5f:d6:6d:f4:e0:46:66:d1:c9:4f:22:73:
e6:6a:93:60:67:f6:2f:49:55:32:f0:9e:bf:02:5c:85:c0:0d:
e5:fc:e2:83:e9:d2:88:ff:28:27:45:b5:d5:51:37:06:b4:69:
f7:7d:41:88:2b:d2:d3:88:dc:28:85:31:4c:b0:90:9b:f8:1c:
51:dc:10:05:ac:01:87:c6:2a:fa:7e:2b:bf:5d:6d:63:9c:e1:
9c:25:b0:21:e1:84:62:6c:0a:fb:4c:78:fa:f4:66:25:92:34:
8d:28:39:a5:c9:3e:96:29:c9:98:67:44:a5:ba:ac:b4:60:69:
35:1b:3b:55
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFk7d8Po+w5Rc5/bXcxLkDWgxztwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjI0MDAwMDAwWhcNMjQwMTI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OWFkNzAyZGFlNDhkZWJlOGFiNTc2ZGE4YjZkNDY5YmI3
YjE2YzI3YjUzZDk5YmNkMjI3ZjViOTYxMWNkZmUyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjkt0UmLycF/aUgo2shFqjUFaubuuyBQRYV9EJHlrk7DNm
UZ/Xpf44r1XhGzKeKONCtoFOng+p2YdWGiISMMV6e5vpxKSgtGYchdlvvne1qMMn
2/AAy6RHYqXysoifGIMrrfA/ftwL6emhHLYSTfDy5Qk1xq4kkiX1g8qXR+m2JTor
aBL8+Sk1v2jlzgwh3Swk8UPiVpo4auWlAL993IPfFbvsjkAsKDHCWHI6R4fEu8mM
SmTNmiJFWQ931t5D5LB/r52lNrv6lnM5soW1fup7eJltW1p7lywuaWITK/bci1Rw
kbxnMkv/YXgQIqhQhYG6JidAURBrk77iQQUleTznAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTWSiloagLJouIC25G6pQUShipX8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzIwNWRlNWJkLWVjODAtNGQyMC1hMjBlLTgxZjAwNzcxMzBiYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAEswo9ztMjoEJAGWtkUJI4xmDoc7
GvOH+jlN469A8iCWz8S6cd5cM6WrnY7jKUpJawrNqd46gEhAJoC14UHAWJYWrJIZ
Jt3wYrmOc7kwO80oHotP5NEFsgD9PvzXqmc8B5tmB9UZnyUUm0oV6tBCe2NlkZ9a
QKtC/OL+AV31PW4yKZP5hl/WbfTgRmbRyU8ic+Zqk2Bn9i9JVTLwnr8CXIXADeX8
4oPp0oj/KCdFtdVRNwa0afd9QYgr0tOI3CiFMUywkJv4HFHcEAWsAYfGKvp+K79d
bWOc4ZwlsCHhhGJsCvtMePr0ZiWSNI0oOaXJPpYpyZhnRKW6rLRgaTUbO1U=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:11 2023 by rpki-client on console.sobornost.net