Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e27cba6-fdca-4fea-afae-6fac0d6c3eab.roa
File: 2e27cba6-fdca-4fea-afae-6fac0d6c3eab.roa (raw, json)
Hash identifier: fYrEOqY82qzdeF53Tmh2U/W7+mUBh8GCDtEvY2bO5Bk=
Subject key identifier: 5B:00:BD:7B:56:53:8D:77:24:71:F6:A0:BC:F6:9C:55:76:A2:AF:17
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 04C0FE2978B70638ED87E31644D9DCA801B9A232
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e27cba6-fdca-4fea-afae-6fac0d6c3eab.roa
Signing time: Thu 28 Dec 2023 00:00:00 +0000
ROA not before: Thu 28 Dec 2023 00:00:00 +0000
ROA not after: Thu 01 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c0:fe:29:78:b7:06:38:ed:87:e3:16:44:d9:dc:a8:01:b9:a2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 28 00:00:00 2023 GMT
Not After : Feb 1 23:59:59 2024 GMT
Subject: serialNumber=cab6bae78cf47e3abd56471cf6930bef123f69b26f2210e7e1e99ec53c64b319, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:10:33:f1:9b:2e:1d:5a:60:70:e3:52:a9:
bc:df:79:b8:74:7e:1a:e8:74:62:1e:1a:d8:e3:8d:
b4:5c:25:c6:04:a4:55:27:0c:df:86:b9:ed:31:72:
ea:4c:b8:26:59:ce:6b:6f:07:6b:ff:ff:4a:51:e2:
62:38:fc:ea:24:52:8d:b1:6e:27:81:b9:fc:97:ba:
70:06:48:1d:3d:b5:15:e6:d6:24:b8:b3:c7:f9:6e:
20:01:c7:da:1e:73:f5:86:37:7a:60:6a:7f:a5:9d:
b9:65:bd:2c:2c:f8:1e:8a:1d:88:4a:71:99:9a:5a:
5c:8f:80:cc:df:d0:61:80:2d:5d:69:90:d8:19:2d:
81:8a:55:4b:6a:a9:56:4c:57:63:e8:db:5e:19:e8:
14:01:d8:76:49:66:73:98:d9:25:3b:74:e7:0b:7b:
e4:a5:3b:8d:d4:68:85:16:ee:5e:ab:b2:6a:a1:26:
a6:e8:bd:bc:75:6a:7d:2e:cd:88:57:8a:bd:df:bd:
d1:31:db:77:f4:bf:f5:4f:42:dc:e0:a1:5f:42:f0:
7c:3a:8c:f0:a5:b3:5a:38:3e:05:1b:d2:84:b0:2e:
85:e2:68:8c:2f:4a:fb:c6:25:00:8d:5f:69:d2:13:
80:d4:7b:3a:e1:4a:85:aa:af:20:ab:ed:02:5d:89:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:BD:7B:56:53:8D:77:24:71:F6:A0:BC:F6:9C:55:76:A2:AF:17
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2e27cba6-fdca-4fea-afae-6fac0d6c3eab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7f:fd:d5:8f:80:5c:32:81:bb:d8:29:4d:3f:2d:7b:86:8a:
df:8c:d2:88:d5:3f:b6:66:66:5e:14:01:35:fa:4d:69:1d:04:
50:2f:30:ae:b2:b5:2b:d1:01:85:93:39:3a:77:83:d4:7a:e7:
3f:ae:79:d2:4a:5e:af:7a:24:09:60:eb:2a:83:4a:47:6e:39:
a1:09:52:48:23:61:59:bd:05:00:76:0c:94:2d:29:7b:c2:e5:
14:d6:6b:85:68:59:d5:a8:75:7c:07:5a:ab:dc:ea:e9:6d:c6:
66:33:5d:99:b9:fb:27:10:f9:02:84:1e:1d:2c:65:fc:97:d2:
23:37:03:07:ca:a9:26:52:f9:69:13:7f:d7:4f:3e:a8:0f:e0:
ff:45:6c:fb:71:76:67:78:9a:f6:ab:25:0c:54:54:c1:2a:9f:
93:32:5c:e7:57:ea:23:5a:3a:60:af:8b:96:53:11:d2:79:50:
df:d6:e2:6b:ee:85:2f:6c:bf:79:10:d0:28:87:5d:0d:f8:b3:
8f:b2:f0:f2:ec:fb:4a:60:2a:15:45:79:da:89:e6:89:70:fd:
66:cf:5c:20:04:24:a3:fe:71:9d:ef:b9:91:57:66:2d:b9:b4:
59:31:13:c3:cd:bc:3e:91:31:0e:4a:4b:49:63:51:13:19:ce:
e8:b5:bc:b7
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 28 19:36:00 2023 by rpki-client on console.sobornost.net