Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/314114e1-9991-439b-a940-805aabc8332f.roa
File: 314114e1-9991-439b-a940-805aabc8332f.roa (raw, json)
Hash identifier: s2N05fVJmplLSoYSePxaAxmvYmW93P+QsS8uT15+rPI=
Subject key identifier: 25:96:77:1E:73:16:E1:97:F8:4A:0C:FB:63:CF:94:F3:28:EA:F6:60
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 78F0754734FF6FFC4353E0EA616DFF0F78B3235F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/314114e1-9991-439b-a940-805aabc8332f.roa
Signing time: Fri 05 Jan 2024 00:00:00 +0000
ROA not before: Fri 05 Jan 2024 00:00:00 +0000
ROA not after: Fri 09 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f0:75:47:34:ff:6f:fc:43:53:e0:ea:61:6d:ff:0f:78:b3:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 5 00:00:00 2024 GMT
Not After : Feb 9 23:59:59 2024 GMT
Subject: serialNumber=35874ae832769b88d541655cd73fc5229f10fed61898dda4c8aafc8c019b3f81, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:e0:e8:5b:d3:fe:25:b0:60:a7:98:ea:03:
83:b4:b5:8a:74:59:fe:1a:3e:b3:77:e9:de:75:20:
a9:66:9a:64:16:47:e5:32:91:54:42:7f:5b:dd:bd:
a0:e4:ba:a3:c1:2e:21:72:2c:1b:e6:ea:92:1d:6f:
2e:18:4c:be:a3:ed:db:15:e8:63:85:52:7f:db:7a:
47:ec:42:78:ab:6e:1d:6c:10:1f:4d:55:1e:0d:d6:
a0:b6:38:95:75:51:c2:a3:3c:f7:40:51:af:82:0f:
05:81:5a:26:0c:0b:99:ba:a5:3d:f2:15:13:28:60:
30:e5:13:37:11:68:bc:26:89:5a:c7:39:c0:ea:41:
90:94:5b:25:bd:98:28:91:cb:17:12:2f:47:67:25:
0e:27:1c:08:51:70:56:c1:db:c3:c1:6b:1b:d2:e1:
65:c4:2b:8e:9e:9b:77:78:9c:e2:02:ea:75:12:83:
07:6c:5b:93:e9:5b:ac:f4:9b:e4:83:82:0a:c0:29:
39:1a:2a:ab:2d:af:75:1e:02:35:84:dc:f2:df:6e:
e7:89:5f:06:c3:9a:09:c0:81:e9:de:78:85:5d:61:
f1:e0:26:16:bc:fc:11:29:cc:7a:07:f5:4f:95:ae:
12:d0:40:55:09:4a:22:c0:d5:bc:25:d7:b9:7a:4f:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:77:1E:73:16:E1:97:F8:4A:0C:FB:63:CF:94:F3:28:EA:F6:60
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/314114e1-9991-439b-a940-805aabc8332f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
58:31:47:d0:4c:5d:b4:49:dc:fa:1f:91:88:c0:5c:b4:f2:f4:
42:df:aa:8b:97:8e:d8:56:e0:6b:28:81:e3:8c:f0:c7:34:2f:
fa:d9:49:bc:4b:00:50:d2:66:71:a4:23:7d:6f:23:ff:eb:0e:
af:ea:4b:ea:9f:bb:fb:3a:f9:7f:cb:47:79:3b:12:1b:ce:cc:
ce:bd:b0:87:b2:38:7e:72:fa:23:45:24:1c:5f:1c:47:ce:a0:
5c:1e:19:d8:11:05:cb:6e:4c:bd:d9:be:24:c8:33:4f:c9:9b:
55:13:0a:4d:40:9e:7a:4d:83:bc:4e:a2:dc:4f:86:eb:a1:4c:
02:47:24:d2:f3:66:7e:e6:9d:53:37:bb:2b:0e:0b:af:e0:55:
71:b6:d6:b4:75:f0:6b:c8:99:09:60:dc:3a:cc:76:1c:3d:fd:
df:b3:c1:fd:32:e1:b2:c6:e2:1a:65:83:76:fd:b4:ea:0e:75:
93:00:c8:a8:dd:25:92:14:4c:1b:f7:38:e2:cf:4c:47:b4:e2:
28:6a:b3:c5:76:30:5b:05:93:32:13:58:7d:69:f8:22:d8:cc:
0b:3a:13:a4:04:94:46:9a:29:27:94:f1:25:28:c3:23:37:89:
47:39:8f:d9:ed:1c:4a:df:b5:31:6c:fa:ed:ae:25:de:d7:fe:
7b:7c:56:2d
-----BEGIN CERTIFICATE-----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Generated at Fri Jan 5 04:23:58 2024 by rpki-client on console.sobornost.net