Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2faeda8e-1d9e-4954-9f1d-2b6d23fcd26c.roa
File: 2faeda8e-1d9e-4954-9f1d-2b6d23fcd26c.roa (raw, json)
Hash identifier: upuKxApyjP876+7y+hPEcKIWNVTEjmNeVnXNsk5f8TM=
Subject key identifier: A8:A7:2A:DF:CB:4E:27:D1:5C:08:6E:D3:C4:7A:7A:66:69:E2:9E:BD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3B44552E09717C9A4FBB3617E8EE56B1B439BADE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2faeda8e-1d9e-4954-9f1d-2b6d23fcd26c.roa
Signing time: Sat 06 Apr 2024 00:00:00 +0000
ROA not before: Sat 06 Apr 2024 00:00:00 +0000
ROA not after: Sat 11 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 01:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:44:55:2e:09:71:7c:9a:4f:bb:36:17:e8:ee:56:b1:b4:39:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 6 00:00:00 2024 GMT
Not After : May 11 23:59:59 2024 GMT
Subject: serialNumber=841b2e841d9fc7efbd2085b77e369cb4931c0118844da89daa71fe7c868ca325, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:e1:70:8a:71:09:96:bf:b9:32:f0:03:42:
6b:7d:c5:2b:9f:45:40:02:ec:b6:15:a0:39:a0:51:
53:69:3d:f4:5e:6a:79:c8:e6:f8:dd:28:2e:a2:e0:
15:03:20:5b:ad:fd:8f:d7:84:0b:62:c4:d0:6d:38:
58:93:0d:9d:1e:4d:41:21:3e:11:e6:53:55:6e:70:
38:81:24:c3:be:df:78:98:2a:15:dd:9c:2b:ae:04:
6c:a9:c5:69:ab:69:48:5d:e3:60:be:58:a8:a5:e0:
6f:03:39:0d:24:2c:84:40:46:8c:6d:0b:aa:ce:23:
f3:3b:5a:3b:d5:ec:1b:a7:20:9e:c4:f2:51:ed:41:
28:3c:52:cd:94:1c:0c:0d:f7:f6:48:92:09:41:48:
80:38:14:fa:5a:bf:15:ba:d5:24:51:56:6c:b6:8f:
18:35:02:2f:b9:7a:68:03:9c:a2:93:3d:a6:e4:9b:
d9:e2:5d:4f:b3:98:00:e1:11:aa:0e:7e:2a:5c:28:
05:c6:af:8b:28:cb:96:ca:81:ae:aa:8a:d1:24:10:
3c:d8:d4:95:eb:29:a9:96:ce:15:a1:0b:28:4a:49:
6d:55:66:62:a4:a9:df:bc:d0:3c:f6:39:25:90:e6:
2e:b1:e1:cd:33:73:e9:fb:82:0e:e6:39:fc:29:cb:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:2A:DF:CB:4E:27:D1:5C:08:6E:D3:C4:7A:7A:66:69:E2:9E:BD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2faeda8e-1d9e-4954-9f1d-2b6d23fcd26c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c5:dd:56:e4:81:76:ed:66:ed:aa:9d:bf:63:25:98:cf:9d:
46:fe:a1:60:d1:b9:e5:94:c3:14:b7:ea:ee:0d:e0:86:0a:46:
7b:45:d9:f1:43:c9:9e:28:f9:22:9b:e0:1c:c1:83:86:39:18:
ac:19:2a:e3:46:27:14:1b:c8:1a:db:30:51:43:c8:8a:cc:db:
99:96:be:e0:6f:f2:a1:05:b3:aa:22:90:ad:a4:49:f6:a9:b2:
9d:b5:34:a8:8f:8c:bd:16:63:4d:aa:38:7f:6f:43:02:4a:79:
cd:14:32:fe:64:46:bc:33:47:47:f4:4a:2a:6e:5b:d0:ac:56:
2d:aa:34:27:40:a8:d9:fd:69:2a:33:3b:f8:b1:5f:a0:66:11:
a4:1e:ef:0d:ed:d4:c5:2d:5f:53:29:a5:af:33:f9:5e:3f:1f:
93:e8:8e:09:ac:de:06:c7:e5:2e:a7:69:44:90:cc:f1:ee:3b:
75:6d:a7:bd:7b:7c:9d:2d:0e:0f:5b:7e:90:f3:49:4b:91:75:
20:da:9f:00:7a:8b:79:76:11:cc:2a:1d:25:fa:f1:85:b2:55:
0b:fd:ec:47:ef:0f:9c:0c:44:c7:5c:63:49:f8:15:7a:b7:54:
37:02:1f:cc:54:59:05:bf:32:64:7d:55:32:dd:b3:ce:ee:4d:
b3:0f:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 03:14:09 2024 by rpki-client on console.sobornost.net