Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4140159a-a5a0-4c15-accc-e9947d2ac186.roa
File: 4140159a-a5a0-4c15-accc-e9947d2ac186.roa (raw, json)
Hash identifier: 7sdga2FWZXng46NxcaWtjXv/HFCzJojlYRxAd641gVU=
Subject key identifier: B7:1E:38:1E:15:D8:DB:98:5A:CD:5D:52:54:D8:EA:21:ED:8D:78:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3BFEA4DBE3D7817A7C537FCD62F0A49F886DFE29
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4140159a-a5a0-4c15-accc-e9947d2ac186.roa
Signing time: Thu 02 May 2024 00:00:00 +0000
ROA not before: Thu 02 May 2024 00:00:00 +0000
ROA not after: Thu 06 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 20:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fe:a4:db:e3:d7:81:7a:7c:53:7f:cd:62:f0:a4:9f:88:6d:fe:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 2 00:00:00 2024 GMT
Not After : Jun 6 23:59:59 2024 GMT
Subject: serialNumber=94a12c84d56f17a5a78c78605a02b2ae259b1f4359125afb22c93b00cd57d23b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:b0:b8:70:df:34:fb:88:24:1b:77:ab:2a:
4a:e2:44:9f:c5:2c:e3:04:d4:fc:45:9b:7e:10:82:
eb:3f:bf:82:ca:75:56:1c:9a:14:b1:11:82:44:1c:
39:fe:53:90:e8:b2:60:36:c9:a6:76:f1:f5:e0:e4:
78:1a:a6:4a:10:8b:d2:c7:35:e0:12:40:c8:1c:12:
27:7f:b7:4a:7a:80:c4:14:da:59:4e:d9:fd:6e:c6:
fd:3e:9a:75:66:f4:2b:7c:58:17:e9:3a:20:38:bb:
39:57:a3:bf:bd:be:58:5f:9e:ca:85:2f:a0:24:3d:
c2:8c:bc:75:e8:f4:c5:87:a0:91:81:03:30:27:bc:
fb:68:e5:ae:df:86:45:f5:a6:37:b6:4f:b3:a8:03:
93:7b:ce:20:f8:67:14:22:ac:82:80:85:30:d1:06:
07:04:2b:92:6b:b2:60:e8:17:48:17:c1:5a:c7:b9:
67:bd:d9:90:d8:9a:52:7d:20:7c:f5:57:82:f1:2d:
39:fe:9a:1b:73:38:2b:87:fa:d0:84:ed:7a:ba:7b:
d3:bc:6c:f6:28:ac:06:ba:28:5d:49:a0:58:ef:50:
c8:56:21:28:1f:43:d0:e8:31:3e:3e:4a:c4:a7:1a:
80:fa:84:91:be:5f:37:ed:c5:e1:bd:5a:b0:83:64:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:38:1E:15:D8:DB:98:5A:CD:5D:52:54:D8:EA:21:ED:8D:78:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4140159a-a5a0-4c15-accc-e9947d2ac186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a4:21:5a:58:60:20:f6:c6:48:4e:0a:96:2b:f4:ad:7c:75:
ce:d0:e8:2f:fd:71:e6:aa:fa:ab:4e:9f:45:95:fc:c0:9c:f0:
e1:cd:c3:92:83:9d:ed:e8:93:38:da:a9:8f:91:72:cc:2c:03:
69:d4:63:c4:4d:52:de:e1:31:70:fe:2a:5e:d5:bf:75:82:a1:
f4:1f:df:2c:f5:94:19:cd:d5:1f:1a:84:a5:de:51:db:9a:de:
f9:e4:04:2e:9e:7e:d4:f7:f6:e6:76:0c:36:06:b9:36:69:35:
bf:79:09:8b:18:8a:4e:aa:59:29:ed:1e:8d:56:fb:f5:f5:a3:
04:90:92:79:ab:f5:5f:bb:91:a4:d6:bb:e3:8f:15:8a:a3:40:
44:85:c5:4d:bb:ed:fa:85:68:f0:44:4c:60:aa:e3:3a:74:12:
8b:b2:7a:cf:15:5b:20:13:f3:88:18:98:83:cf:de:38:03:90:
72:0e:55:e1:da:f6:be:35:dd:47:da:11:8e:c8:73:78:92:09:
4e:15:3f:a7:cc:c5:07:2e:88:2e:54:a2:7a:d6:55:75:02:21:
51:98:05:3f:4e:dd:80:88:e0:a2:3a:50:78:10:42:91:5f:e6:
a4:65:ce:09:aa:4f:e1:88:f8:de:85:a6:b0:eb:4b:e9:85:18:
a4:4c:af:ad
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUO/6k2+PXgXp8U3/NYvCkn4ht/ikwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTAyMDAwMDAwWhcNMjQwNjA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NGExMmM4NGQ1NmYxN2E1YTc4Yzc4NjA1YTAyYjJhZTI1
OWIxZjQzNTkxMjVhZmIyMmM5M2IwMGNkNTdkMjNiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1ZbC4cN80+4gkG3erKkriRJ/FLOME1PxFm34Qgus/v4LK
dVYcmhSxEYJEHDn+U5DosmA2yaZ28fXg5HgapkoQi9LHNeASQMgcEid/t0p6gMQU
2llO2f1uxv0+mnVm9Ct8WBfpOiA4uzlXo7+9vlhfnsqFL6AkPcKMvHXo9MWHoJGB
AzAnvPto5a7fhkX1pje2T7OoA5N7ziD4ZxQirIKAhTDRBgcEK5JrsmDoF0gXwVrH
uWe92ZDYmlJ9IHz1V4LxLTn+mhtzOCuH+tCE7Xq6e9O8bPYorAa6KF1JoFjvUMhW
ISgfQ9DoMT4+SsSnGoD6hJG+XzftxeG9WrCDZHMxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtx44HhXY25hazV1SVNjqIe2NeM0wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzQxNDAxNTlhLWE1YTAtNGMxNS1hY2NjLWU5OTQ3ZDJhYzE4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAOkIVpYYCD2xkhOCpYr9K18dc7Q
6C/9ceaq+qtOn0WV/MCc8OHNw5KDne3okzjaqY+RcswsA2nUY8RNUt7hMXD+Kl7V
v3WCofQf3yz1lBnN1R8ahKXeUdua3vnkBC6eftT39uZ2DDYGuTZpNb95CYsYik6q
WSntHo1W+/X1owSQknmr9V+7kaTWu+OPFYqjQESFxU277fqFaPBETGCq4zp0Eouy
es8VWyAT84gYmIPP3jgDkHIOVeHa9r413UfaEY7Ic3iSCU4VP6fMxQcuiC5UonrW
VXUCIVGYBT9O3YCI4KI6UHgQQpFf5qRlzgmqT+GI+N6FprDrS+mFGKRMr60=
-----END CERTIFICATE-----
Generated at Fri May 3 00:05:49 2024 by rpki-client on console.sobornost.net