Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33e14f90-d1fd-47a9-8ab3-d10c746c48c8.roa
File: 33e14f90-d1fd-47a9-8ab3-d10c746c48c8.roa (raw, json)
Hash identifier: rQLUWEieaYYuwaTSd2IZmC7qgFBqlM6klgfMn6jZ/wA=
Subject key identifier: 4C:AB:76:0D:DE:53:4D:CF:DE:8D:F4:68:24:7C:06:35:D3:98:E9:80
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 480BAAC7F4D891FDDB902DAA003EFD93691B7C46
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33e14f90-d1fd-47a9-8ab3-d10c746c48c8.roa
Signing time: Tue 12 Dec 2023 00:00:00 +0000
ROA not before: Tue 12 Dec 2023 00:00:00 +0000
ROA not after: Tue 16 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:0b:aa:c7:f4:d8:91:fd:db:90:2d:aa:00:3e:fd:93:69:1b:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 12 00:00:00 2023 GMT
Not After : Jan 16 23:59:59 2024 GMT
Subject: serialNumber=769f576e3cf75070409ef083a47dfe97030040598f2c60b72fb6b84a4ed6b556, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:58:93:76:fc:07:7d:72:72:ee:af:e5:c4:
64:be:45:97:1f:bb:04:cb:74:41:a2:1a:7e:bd:a9:
73:2e:d4:48:d1:60:10:8c:1c:f8:a2:2e:43:98:d9:
1a:4c:9e:87:77:3e:b1:8d:c0:aa:ba:9b:74:d1:b3:
71:67:40:45:78:17:b9:29:80:b4:c5:68:1d:68:4d:
b4:61:fa:33:98:95:7e:75:6b:52:9d:29:7e:62:fe:
8b:81:d3:05:d7:05:3c:a4:56:99:5a:91:6d:97:c0:
d9:60:15:17:f5:0a:58:52:a5:41:34:4d:89:ff:ad:
b3:c5:02:c1:3c:b9:f9:95:84:c0:b7:9e:6d:4a:66:
be:7e:0e:db:65:2f:4e:38:3d:ed:3d:7a:53:0d:1b:
70:16:61:bf:3b:2a:35:a9:01:f4:6a:36:72:89:98:
e8:62:e8:f1:53:1e:91:39:c9:38:56:da:dc:81:af:
96:db:6d:b0:05:b3:3c:63:6e:a3:e3:1f:22:3a:e1:
18:5d:42:7b:c6:d2:e8:c0:91:a2:a6:65:c2:a5:c8:
a7:b2:59:90:90:e6:ca:d8:e4:ff:0d:10:89:02:25:
2b:ff:d8:e2:e7:f1:68:8a:5e:00:51:07:29:6c:e9:
d1:1b:ae:03:4e:7f:fd:fc:83:63:b4:b3:a2:b0:00:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:76:0D:DE:53:4D:CF:DE:8D:F4:68:24:7C:06:35:D3:98:E9:80
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/33e14f90-d1fd-47a9-8ab3-d10c746c48c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2e:d3:c8:3d:96:23:9b:17:46:bc:13:83:07:eb:68:66:1d:
85:a8:c7:c1:2a:d7:59:43:07:3e:b7:4e:1e:25:5b:a1:3b:03:
ae:84:0d:84:02:24:74:a6:1a:39:3a:35:58:89:f0:8c:32:06:
e0:d4:b4:ed:ef:ea:14:1c:fd:45:88:1a:7f:0e:c4:37:1a:80:
1d:d7:e9:cb:e0:41:51:6c:f8:6f:ae:dd:ff:6c:43:8b:27:ac:
71:13:8f:08:cb:d4:da:b9:5d:c2:0f:30:cb:9b:10:05:51:cb:
2a:b3:fc:18:a7:a1:b6:a4:c4:5b:bb:4a:c3:2b:9c:f8:75:1b:
2c:7e:57:07:bf:cd:ba:f9:c1:ea:39:4a:d1:05:75:fb:b9:0d:
21:c7:d3:1a:e3:d0:e4:d0:38:96:f8:da:97:57:e5:35:46:78:
fd:aa:76:c3:2a:ff:70:aa:80:80:ff:54:ff:1b:5d:dc:9c:88:
bd:8f:1d:49:db:cc:4f:e2:39:5e:4f:48:f8:ad:47:c0:bd:14:
ab:8c:a0:57:a0:97:60:ac:34:27:b6:ea:7c:50:50:63:ef:b6:
7c:b0:bf:c6:bc:63:6c:07:ed:03:a1:22:7d:de:89:8d:de:e9:
de:f7:c9:66:b0:5a:78:3d:ef:3f:84:19:b7:31:cb:1f:d7:f6:
2a:14:cf:8a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSAuqx/TYkf3bkC2qAD79k2kbfEYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjEyMDAwMDAwWhcNMjQwMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjlmNTc2ZTNjZjc1MDcwNDA5ZWYwODNhNDdkZmU5NzAz
MDA0MDU5OGYyYzYwYjcyZmI2Yjg0YTRlZDZiNTU2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/VFiTdvwHfXJy7q/lxGS+RZcfuwTLdEGiGn69qXMu1EjR
YBCMHPiiLkOY2RpMnod3PrGNwKq6m3TRs3FnQEV4F7kpgLTFaB1oTbRh+jOYlX51
a1KdKX5i/ouB0wXXBTykVplakW2XwNlgFRf1ClhSpUE0TYn/rbPFAsE8ufmVhMC3
nm1KZr5+DttlL044Pe09elMNG3AWYb87KjWpAfRqNnKJmOhi6PFTHpE5yThW2tyB
r5bbbbAFszxjbqPjHyI64RhdQnvG0ujAkaKmZcKlyKeyWZCQ5srY5P8NEIkCJSv/
2OLn8WiKXgBRByls6dEbrgNOf/38g2O0s6KwABavAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTKt2Dd5TTc/ejfRoJHwGNdOY6YAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzMzZTE0ZjkwLWQxZmQtNDdhOS04YWIzLWQxMGM3NDZjNDhjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGYu08g9liObF0a8E4MH62hmHYWo
x8Eq11lDBz63Th4lW6E7A66EDYQCJHSmGjk6NViJ8IwyBuDUtO3v6hQc/UWIGn8O
xDcagB3X6cvgQVFs+G+u3f9sQ4snrHETjwjL1Nq5XcIPMMubEAVRyyqz/Binobak
xFu7SsMrnPh1Gyx+Vwe/zbr5weo5StEFdfu5DSHH0xrj0OTQOJb42pdX5TVGeP2q
dsMq/3CqgID/VP8bXdyciL2PHUnbzE/iOV5PSPitR8C9FKuMoFegl2CsNCe26nxQ
UGPvtnywv8a8Y2wH7QOhIn3eiY3e6d73yWawWng97z+EGbcxyx/X9ioUz4o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:13 2023 by rpki-client on console.sobornost.net