Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/316e3bcf-26c6-4bf7-b0f8-dfb582ba04ad.roa
File: 316e3bcf-26c6-4bf7-b0f8-dfb582ba04ad.roa (raw, json)
Hash identifier: 9yLXAWW8ICuxmWcMHNRxeGJ4WBBSm86IAlkwWFpoEkg=
Subject key identifier: 65:E1:6F:63:B4:F6:A5:36:3B:D5:6C:9B:6C:21:02:4D:92:25:A5:0C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 18DE3952E67BA3D79393695EEAD00C6D530F414D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/316e3bcf-26c6-4bf7-b0f8-dfb582ba04ad.roa
Signing time: Tue 04 Jun 2024 00:00:00 +0000
ROA not before: Tue 04 Jun 2024 00:00:00 +0000
ROA not after: Tue 09 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 03:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:de:39:52:e6:7b:a3:d7:93:93:69:5e:ea:d0:0c:6d:53:0f:41:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 4 00:00:00 2024 GMT
Not After : Jul 9 23:59:59 2024 GMT
Subject: serialNumber=d593d1b8c0dc723c5aa330ea535352373b74451a5383bdeaffc388c94e9ded71, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:dc:27:69:83:67:c4:7c:43:89:f1:75:d2:
fa:10:3b:57:0d:84:be:42:46:08:42:5f:74:f2:ae:
83:fc:56:48:dc:fd:7f:cb:9a:43:7b:52:fd:f5:cd:
ce:05:cf:6a:02:b0:55:70:85:dd:00:3e:06:f3:db:
1e:45:7f:df:87:e2:b9:43:57:5f:88:6c:8d:9d:a0:
d0:6d:cd:57:30:1c:ab:28:32:06:f6:9f:16:2e:0f:
1e:0e:3a:58:68:1c:57:3f:8b:2a:72:fb:50:03:bc:
d1:1d:c5:1c:0a:a4:b0:34:0b:95:ad:7e:fa:8a:12:
2f:31:88:23:ae:31:d7:ca:cd:dd:d5:53:1b:89:d6:
0b:d5:fb:b7:3d:ce:f9:db:35:0e:7a:a1:40:a9:03:
37:63:17:a2:80:1d:d5:bf:df:65:ac:93:ca:fd:02:
ae:b8:b8:2f:e5:3f:e9:c3:56:32:1d:6e:34:58:08:
5d:0e:11:d3:54:ad:81:1d:88:70:47:33:99:7d:13:
cc:ea:63:77:2c:9c:55:9d:a1:c8:de:5e:c6:bf:57:
cf:73:3d:01:ce:9e:af:ac:f1:7b:6b:4c:b0:1b:33:
c8:80:fe:4c:ed:42:35:36:eb:53:e4:3f:5c:32:86:
75:d7:e2:41:a8:b0:d3:cb:6d:e3:55:a6:52:c6:a9:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:6F:63:B4:F6:A5:36:3B:D5:6C:9B:6C:21:02:4D:92:25:A5:0C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/316e3bcf-26c6-4bf7-b0f8-dfb582ba04ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a1:cf:32:1b:8a:60:28:b1:ad:c2:b5:73:ff:0a:cb:6f:ba:
2a:51:54:38:94:fe:5d:c5:d8:b6:31:77:46:98:46:4d:c8:24:
e9:13:eb:e6:f8:51:9f:2d:e0:7b:68:1a:90:8a:6d:78:af:47:
6d:12:41:6e:84:3d:42:dc:40:4d:9a:e8:ae:4a:ea:2e:3c:6a:
4f:ca:9b:65:65:93:d4:07:85:68:ed:c4:81:29:8a:5d:0e:a5:
65:38:93:93:21:3f:16:9c:4b:10:24:68:73:eb:db:ba:0e:45:
54:64:3e:ac:ca:60:50:93:5f:c4:cf:73:ea:b7:c1:6e:e4:81:
47:e7:a4:9d:30:3a:e2:e2:62:4f:17:17:07:0a:44:27:b1:30:
35:0b:3a:f7:b4:fc:e8:1b:70:fd:7c:4a:c8:39:8f:db:73:05:
74:ab:16:92:c6:dc:21:9c:20:2f:b0:27:4a:5b:38:f1:c4:94:
dd:ad:11:84:c6:3d:57:4f:00:e3:89:7c:30:60:be:56:86:a0:
2e:55:21:91:98:32:d6:c9:6f:03:31:4b:ac:b5:5b:b1:db:8b:
8d:fa:04:80:4c:69:65:90:1e:d5:3d:a4:80:07:a8:84:7c:74:
71:42:1a:df:51:9d:fa:50:04:1d:3b:39:33:f6:9e:fe:df:42:
11:77:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 14:56:26 2024 by rpki-client on console.sobornost.net