Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3863ee8c-e2f6-4cfb-ac65-1a7d29afd5ba.roa
File:                     3863ee8c-e2f6-4cfb-ac65-1a7d29afd5ba.roa (raw, json)
Hash identifier:          kZjtPN2hyc5ZdfLQQGlKtHlP5dZTvd9MYkJJi79p+Fc=
Subject key identifier:   A3:03:DA:58:FF:16:FE:05:D0:F2:53:1F:BB:12:0F:92:51:30:45:9C
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       367A3880EB030FA17F8F52B937296125C7AF4BEF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3863ee8c-e2f6-4cfb-ac65-1a7d29afd5ba.roa
Signing time:             Wed 20 Mar 2024 00:00:00 +0000
ROA not before:           Wed 20 Mar 2024 00:00:00 +0000
ROA not after:            Wed 24 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 16:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7a:38:80:eb:03:0f:a1:7f:8f:52:b9:37:29:61:25:c7:af:4b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 20 00:00:00 2024 GMT
            Not After : Apr 24 23:59:59 2024 GMT
        Subject: serialNumber=e4c0ca58be9e33c8212db167659dbcad429e44d65107b38e554cf44a2fd8047b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:08:3a:a4:ee:ed:84:17:99:c7:e6:c4:97:
                    57:ac:38:17:29:da:98:05:20:02:b4:a2:db:cb:8c:
                    f8:96:8c:c7:f2:78:07:5b:85:ef:8d:64:e9:b6:bf:
                    df:43:25:eb:11:29:e9:15:d9:9a:b1:77:89:dc:d0:
                    1d:cd:76:64:94:15:50:77:dc:5c:9a:67:ab:a7:1b:
                    83:aa:cd:47:4f:b0:0c:47:e5:2a:a2:45:72:e7:3b:
                    3c:eb:54:04:7a:c7:6a:2d:8b:a9:52:de:e2:e3:01:
                    ea:1f:17:08:da:66:33:c9:c4:67:0f:4d:2c:78:53:
                    a6:c2:b3:19:a9:20:29:fe:71:d4:e3:a9:27:1b:45:
                    22:60:fd:ae:da:aa:a4:3c:48:59:02:29:3e:2e:55:
                    1a:85:50:dc:ac:13:ee:17:82:e7:5c:78:51:8c:8b:
                    bb:0d:21:b7:d6:64:bb:0e:f7:78:60:20:fb:e0:69:
                    7c:2b:e2:31:9f:fe:52:4e:e6:42:be:86:28:f0:af:
                    f4:e1:68:c9:b6:0d:4e:f6:87:a4:6b:0b:bc:f5:be:
                    d0:c3:b7:eb:f3:7c:2d:83:57:1e:c3:4e:5b:ef:e9:
                    0e:ff:bf:01:81:87:78:28:50:5c:dc:3c:9e:b8:f1:
                    ee:a9:ee:d0:c7:28:2d:af:e0:72:49:d6:96:53:39:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:DA:58:FF:16:FE:05:D0:F2:53:1F:BB:12:0F:92:51:30:45:9C
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3863ee8c-e2f6-4cfb-ac65-1a7d29afd5ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:77:f5:81:54:5a:7a:29:76:fa:94:d7:53:c7:fb:6a:06:94:
         19:55:c3:89:fa:28:aa:0e:f4:40:95:dd:76:c6:30:9f:ae:e3:
         1c:c4:da:67:f8:31:bb:cd:d6:7f:6a:3e:05:3c:99:d5:c7:ee:
         cf:a7:c6:c0:51:66:00:0d:8c:7b:74:33:80:87:cb:d6:75:71:
         99:96:9d:9b:47:e4:7d:1f:61:0c:8b:f7:ef:bd:9a:3c:32:af:
         d7:d9:c0:cc:b7:3d:de:c9:c4:3d:43:c2:f0:6c:38:8e:17:a7:
         08:6e:b8:84:16:ba:ad:9d:ff:4e:c0:3f:b7:67:d3:67:83:f0:
         80:07:d8:45:ba:af:70:3b:93:2a:fb:b3:1a:cf:df:dd:78:21:
         88:19:c4:ac:3c:8c:91:d9:6f:81:c0:22:46:97:bf:03:e1:d9:
         d2:6d:b4:0e:b0:77:80:e8:3b:b6:5a:15:3a:9b:e0:ff:24:59:
         6d:8d:db:ad:47:62:98:4f:25:b0:15:76:f3:ba:16:c2:24:8d:
         34:33:c4:e4:d4:0f:34:f4:9c:75:8a:16:61:09:75:cc:4c:97:
         00:31:11:ba:88:b3:76:e3:3c:55:bf:d6:a9:2a:48:46:95:fa:
         29:a9:73:9a:85:a4:b0:1e:dc:b8:27:c3:29:0d:4e:79:dc:b4:
         0e:63:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:24:06 2024 by rpki-client on console.sobornost.net