Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26224455-8d46-48e5-a593-3210008bad4c.roa
File: 26224455-8d46-48e5-a593-3210008bad4c.roa (raw, json)
Hash identifier: io0ZsNiUKS4PJmn7kSui6DQoyRm3tUPDnrcEHwYI4hU=
Subject key identifier: 78:6A:D0:72:19:22:62:64:5B:9B:52:33:88:B5:99:84:B9:B5:C0:1B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25BD15E8ECDEDA70C86DC2D59684F20A0D0E4EB8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26224455-8d46-48e5-a593-3210008bad4c.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bd:15:e8:ec:de:da:70:c8:6d:c2:d5:96:84:f2:0a:0d:0e:4e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: serialNumber=1863be9cc83fcc92f08593e166159e3185d0910b87b3e545a248a321f39f3064, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:d0:82:7b:92:21:b2:74:02:ec:be:a9:a0:
da:33:5b:c9:2e:90:b5:b6:b7:8c:c7:4d:44:1b:dc:
28:48:df:1f:de:dc:44:6d:ff:d5:18:46:39:aa:96:
30:84:45:f7:a3:c0:91:d8:f6:27:26:9f:03:ba:ea:
9c:9f:f2:93:91:72:3a:8b:c0:76:67:82:9e:38:0e:
b2:6e:2a:96:23:73:09:22:61:ee:96:e5:e4:9f:90:
e7:0a:40:a7:13:95:c5:b9:9c:47:54:e5:84:af:93:
47:61:42:c0:36:27:59:4a:2b:24:de:4d:3a:5d:78:
f7:4f:5e:5b:98:9b:e8:0e:74:72:50:58:de:c2:3a:
ea:79:00:79:75:34:32:d9:45:fb:c7:66:e0:dc:0b:
ec:af:f9:f7:4d:0a:94:b6:0d:53:29:f5:2c:31:5a:
79:4f:a6:fb:03:a9:75:74:17:e6:6c:17:ce:e7:29:
a1:ae:ff:09:a5:52:fd:78:2b:30:6b:a7:b8:20:11:
41:54:45:71:57:eb:5a:9c:97:0a:48:22:8c:9c:69:
1b:77:85:ac:93:e5:c8:67:18:20:cc:b5:da:a5:d4:
b3:d7:ff:b4:5a:30:c4:5f:f1:c1:a5:a9:ea:84:9c:
2c:54:21:b2:53:48:21:fd:06:c2:09:60:39:a3:7a:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:D0:72:19:22:62:64:5B:9B:52:33:88:B5:99:84:B9:B5:C0:1B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/26224455-8d46-48e5-a593-3210008bad4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b0:d9:59:a0:20:7c:c4:c2:6a:5b:a4:84:c6:57:3f:f3:fa:
36:f4:1d:7f:b6:e3:70:45:76:66:d7:21:ec:8f:d8:91:50:7d:
1b:34:b0:02:7d:33:12:7c:6f:f5:25:d2:7a:41:40:ae:28:71:
10:82:9d:35:a8:95:9f:2b:03:28:a2:77:e8:6e:9e:3a:76:90:
39:9e:12:90:ac:ed:dc:4d:16:96:35:a9:f0:7d:72:45:52:74:
66:54:13:76:b6:7e:72:4b:e4:1a:d6:ac:2a:5d:68:89:e5:8d:
e3:7e:47:a0:16:ab:9b:3b:0c:32:22:d1:a4:fc:6a:6d:e6:97:
2b:94:c0:dc:74:cd:bb:7f:fe:c5:9c:a5:fa:e6:96:ae:10:91:
b5:5d:c1:16:72:8b:fa:37:a4:ca:39:ed:3d:55:97:72:d5:68:
f6:48:69:de:fc:fa:fa:91:70:ec:6c:1b:3a:52:e0:f1:88:da:
65:87:c9:80:ff:eb:5d:a2:ad:14:c0:61:aa:13:59:4c:75:cd:
a1:b5:06:48:0f:8f:20:76:41:a4:8f:96:c1:45:8d:9d:62:6c:
b8:0d:bf:b1:49:30:1a:8e:6d:c0:8c:ab:30:ca:29:59:4b:82:
15:b8:09:ec:fa:2f:f4:60:58:3f:f1:74:f3:aa:50:0f:c5:00:
5d:29:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net