Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25322f05-a0a4-4566-a423-35b7f9083635.roa
File: 25322f05-a0a4-4566-a423-35b7f9083635.roa (raw, json)
Hash identifier: oAuRWobK4yM7cuHMBv98VuRo6ixKj+xqCz04CVtTIpg=
Subject key identifier: 61:56:99:B6:4A:9F:C0:E7:E6:7E:56:6A:45:D6:C0:7B:AD:5F:40:1A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 71CB74F6CB264743589664B764D44B35AF5BCA95
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25322f05-a0a4-4566-a423-35b7f9083635.roa
Signing time: Wed 03 Jan 2024 00:00:00 +0000
ROA not before: Wed 03 Jan 2024 00:00:00 +0000
ROA not after: Wed 07 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cb:74:f6:cb:26:47:43:58:96:64:b7:64:d4:4b:35:af:5b:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 3 00:00:00 2024 GMT
Not After : Feb 7 23:59:59 2024 GMT
Subject: serialNumber=e6d746fd18428abed2e7f00b4a125cf6c4a71bdef413784ac56402b29c7199dc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:44:31:08:08:58:95:a5:82:9f:ff:ca:36:
8b:ef:e5:3a:9a:57:6e:e9:ef:17:e4:2f:5f:55:0c:
85:ca:4d:a1:9e:3f:f0:d1:a4:5d:14:6e:a0:93:73:
89:51:5b:07:8e:98:d9:22:70:b8:7b:90:cf:65:11:
94:bd:3c:e2:81:ca:4c:da:1d:40:6e:24:53:bc:bb:
33:7f:54:c0:97:90:5b:55:e7:6f:b7:45:14:f1:ff:
89:16:2d:7e:8d:5e:97:5b:bc:81:31:dc:60:73:2e:
4f:f3:8e:01:4d:77:c4:32:e1:6d:cf:ef:6f:d5:8a:
18:75:1c:db:ac:d6:9c:69:96:ab:ad:10:17:61:6c:
c1:9d:c7:02:b4:ce:5f:1b:09:56:b4:ac:0f:4c:f9:
6d:e9:72:78:d7:72:5f:da:a8:2c:bb:13:04:b3:9f:
e6:1f:bf:ef:e6:92:5f:c9:8e:24:4b:bd:d1:c2:c2:
97:94:c9:84:00:f9:7e:08:d1:84:38:33:f6:ab:f2:
77:e3:57:4f:5c:b0:12:ed:00:d7:34:b5:6b:79:99:
e0:f5:a9:c8:bf:1f:c5:2f:2c:78:8a:5b:88:f1:67:
2d:b7:af:af:e4:11:ee:cd:bc:38:01:48:ed:e4:c5:
a7:ef:90:3d:6b:47:2d:3a:c2:74:5b:bb:4e:13:92:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:99:B6:4A:9F:C0:E7:E6:7E:56:6A:45:D6:C0:7B:AD:5F:40:1A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/25322f05-a0a4-4566-a423-35b7f9083635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b2:e2:67:84:75:d8:fe:69:54:61:97:29:fe:25:5d:ea:da:
2c:a6:cc:72:f2:28:75:52:d0:d3:a1:f7:3e:d9:d8:80:4e:d5:
7c:99:79:94:e5:25:f1:15:29:9c:d5:1c:b6:65:65:87:6d:a3:
66:b0:4c:3e:8b:8d:d8:57:d6:37:d7:72:fb:a0:a7:b8:34:7e:
33:b3:4c:75:91:b4:45:1c:62:c2:68:f6:1a:ce:7c:a7:e8:7d:
ed:e2:6f:a9:a8:61:6f:ef:c0:aa:88:b4:5e:fd:1b:69:d4:c6:
c6:f2:13:f0:40:e7:7e:2e:09:81:90:f6:ab:2c:83:06:b0:5a:
d4:53:25:d8:af:8c:c4:1c:40:be:2e:58:44:f2:bf:76:f9:60:
df:f5:70:57:67:66:95:98:67:b4:0b:66:bc:31:ff:5e:2f:59:
95:ad:f6:f5:2c:4d:af:44:7d:c5:14:bf:df:5a:b1:8d:c8:fc:
da:b0:99:a8:81:3e:38:79:54:b1:48:01:46:42:02:da:d8:01:
85:a3:dc:21:b1:c6:60:56:dc:3e:63:fd:bc:f6:b6:68:a6:b0:
f5:98:17:1d:25:dc:9d:1d:86:c2:e5:38:d4:b4:5e:34:72:6b:
ca:83:fe:b3:5f:fb:6f:f7:78:ca:82:53:1f:f9:8d:32:74:b2:
72:e7:a6:b2
-----BEGIN CERTIFICATE-----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Generated at Wed Jan 3 23:28:36 2024 by rpki-client on console.sobornost.net