Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f1a9e2b-5eb2-4d5a-b823-815fb426b308.roa
File: 3f1a9e2b-5eb2-4d5a-b823-815fb426b308.roa (raw, json)
Hash identifier: 6cF72LClZJnQPyNfVNVJICqT8KZp1bzcQN7mj62BzSw=
Subject key identifier: B9:29:E2:59:49:1D:7A:9C:BB:31:AA:83:4B:C4:0C:06:7A:84:16:97
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 74132EEECAD70B1D3085396D97680508DDB2D5B2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f1a9e2b-5eb2-4d5a-b823-815fb426b308.roa
Signing time: Sun 26 Nov 2023 00:00:00 +0000
ROA not before: Sun 26 Nov 2023 00:00:00 +0000
ROA not after: Sun 31 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:13:2e:ee:ca:d7:0b:1d:30:85:39:6d:97:68:05:08:dd:b2:d5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 26 00:00:00 2023 GMT
Not After : Dec 31 23:59:59 2023 GMT
Subject: serialNumber=a2ba8ff6a0a5abac417b6e6a19ef12611e2c531dd8ef14769b6d4408e020949a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:f6:7c:14:b3:9b:33:c2:48:e0:49:69:b5:
60:e6:f9:1b:f4:8e:b0:5a:0e:93:57:8f:49:df:66:
42:4a:91:19:d9:9a:17:3b:e4:16:1c:08:af:7e:06:
8b:2e:70:32:2e:0d:7e:6a:9c:a5:a3:04:f8:dd:e6:
df:6b:79:cd:da:78:12:fe:20:ae:96:f4:19:1e:a6:
4f:2e:2b:57:dd:74:10:09:f3:b2:65:40:5a:10:3b:
70:a4:33:50:28:01:55:35:38:5c:69:ec:a9:e5:a5:
32:97:c2:e2:24:f6:ee:e7:0d:98:f2:02:7d:60:e0:
a5:56:1d:01:c4:db:5c:c1:6a:b7:7d:da:f3:db:c4:
fa:70:43:e8:a6:96:a8:8a:72:31:5f:a8:ab:29:db:
60:52:a8:8b:55:3f:22:c4:0c:50:63:04:8a:22:4e:
90:ab:48:3c:d8:6c:06:29:f2:38:5a:63:87:e8:59:
90:09:8b:83:74:7b:ae:59:3c:8c:ed:30:f0:56:81:
e5:22:14:5d:80:6c:93:7a:6e:c8:f8:65:96:31:79:
9d:6d:12:d1:f8:0c:1e:49:a6:3b:d6:ec:8d:72:82:
db:bc:1b:61:84:0f:4d:f8:0f:cd:5b:a2:c1:46:86:
01:38:23:53:78:e9:9e:7f:61:20:24:9f:ba:89:13:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:E2:59:49:1D:7A:9C:BB:31:AA:83:4B:C4:0C:06:7A:84:16:97
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3f1a9e2b-5eb2-4d5a-b823-815fb426b308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:47:67:9b:cb:94:6a:56:56:12:39:29:8f:22:9c:96:a4:31:
fe:f6:de:8d:5e:78:86:44:06:da:f6:a8:a0:22:67:97:bf:b1:
c1:77:9c:26:44:43:36:ec:d2:f4:db:97:30:2e:bd:21:69:49:
12:93:8c:d1:86:68:bd:bd:e5:13:e5:86:5b:3f:9e:c3:a2:11:
12:da:f1:17:ea:98:8d:8e:2a:06:ee:2d:53:b5:5a:d9:55:27:
20:9f:1f:24:ce:aa:be:e1:bb:e8:7b:54:16:ee:24:1b:ef:df:
e5:09:0b:4c:c7:dc:fe:10:2e:12:46:82:fb:54:24:62:3f:a7:
04:65:03:f6:a3:cf:bd:28:c0:41:44:ef:28:c6:bf:49:35:3d:
82:ca:77:8e:19:6d:5c:55:af:61:ab:ed:b8:fc:38:35:22:00:
e8:18:a9:e4:53:33:98:f1:eb:8e:f4:d1:b9:6d:f3:a4:fe:8c:
48:e1:85:c3:88:0a:f7:cb:54:20:70:9e:6c:ee:4f:8c:65:05:
99:80:71:0b:25:2e:bf:c6:73:eb:27:0c:33:6c:79:87:53:3e:
13:e2:fe:ad:6c:9a:79:98:3c:28:16:10:7c:1b:e7:b1:2b:23:
3b:0b:bb:60:eb:3f:5a:3d:5c:0a:fb:e0:32:f6:7e:05:4a:ab:
b2:72:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net