Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/47c69006-1b17-4136-bc55-e557b1527c3d.roa
File: 47c69006-1b17-4136-bc55-e557b1527c3d.roa (raw, json)
Hash identifier: S/dlmOvdtFiDYw+2C2nVFrxPL1Xk7m7qOKXEx9ifqzw=
Subject key identifier: 09:3B:5F:30:E0:1D:27:71:B5:C0:D6:BA:47:79:C9:A1:6A:85:40:35
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7CDE6A31BA57DA425266046F88097241378FD162
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/47c69006-1b17-4136-bc55-e557b1527c3d.roa
Signing time: Sat 02 Dec 2023 00:00:00 +0000
ROA not before: Sat 02 Dec 2023 00:00:00 +0000
ROA not after: Sat 06 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:de:6a:31:ba:57:da:42:52:66:04:6f:88:09:72:41:37:8f:d1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 2 00:00:00 2023 GMT
Not After : Jan 6 23:59:59 2024 GMT
Subject: serialNumber=312b17be2f453087fe01c31a80ad05a49866ac26807916554f902ccf0945ec27, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:ea:69:e8:6e:5c:4d:89:13:57:55:83:e9:
47:36:3e:6d:f6:fa:0f:43:44:ce:bc:cd:71:04:a4:
aa:14:c2:c9:e6:6b:6e:d1:f0:78:22:b7:90:87:2f:
a6:b9:51:01:2a:4c:93:e5:55:3d:d5:97:31:f1:f8:
36:d9:48:eb:4d:e7:40:c3:8c:6b:a6:bc:68:22:01:
63:c8:22:90:08:cb:37:39:dd:be:d2:2d:7a:13:ef:
2c:c4:d3:4b:c5:5a:e9:01:98:f3:d2:60:4e:d2:d7:
e6:72:82:0a:e9:41:ec:47:e0:80:84:fe:e8:21:bc:
7d:ab:b4:46:4b:d5:85:86:7a:1a:42:04:1a:66:b6:
45:40:45:c8:de:e6:af:d9:bb:8d:44:a1:61:93:16:
5e:de:f4:36:ad:0d:20:73:3f:e8:bf:65:dd:e8:2f:
e1:47:9e:03:9a:15:8e:94:6d:4c:bf:fc:3b:60:e3:
93:e9:a6:bb:1b:cb:db:79:b9:e7:5a:a6:35:7f:23:
e1:04:f0:ef:7d:d9:8e:f5:d6:82:12:02:f7:b1:6d:
a7:54:68:3c:72:a0:2f:52:b6:40:e1:08:9c:6b:b1:
d3:8d:bf:87:bd:13:39:b6:2f:a8:11:5f:e6:80:23:
32:d5:3e:de:10:75:5f:e1:60:3d:52:d0:56:53:cc:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:5F:30:E0:1D:27:71:B5:C0:D6:BA:47:79:C9:A1:6A:85:40:35
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/47c69006-1b17-4136-bc55-e557b1527c3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
94:87:7f:ab:16:41:f5:95:4d:15:be:18:17:67:a4:94:25:3c:
b8:6e:e0:43:02:9f:4a:14:33:a3:87:41:7c:0c:0d:4a:0e:ba:
8a:69:b2:bc:1f:23:97:30:3e:1e:fa:68:1d:63:02:de:f2:be:
ad:c5:df:e2:fa:ef:06:85:fd:55:04:87:a0:55:d1:33:b8:d2:
81:5d:ef:65:57:34:ec:96:d4:eb:02:0a:40:c5:f2:11:91:cc:
9f:f7:36:41:36:e9:24:47:05:ad:42:41:a6:64:1c:8b:7c:ff:
02:b0:ef:18:26:c9:91:aa:20:a6:3f:b5:4c:d8:97:2f:d7:cd:
08:cf:d6:36:0c:de:67:9b:ca:3c:cd:f2:44:3c:26:e0:e4:51:
3c:71:0e:ce:cf:d4:b3:c1:61:90:d4:b8:a5:82:c9:03:af:51:
bf:c8:27:5a:97:cb:2e:79:48:84:22:06:03:06:37:b0:e6:48:
03:21:af:ab:29:81:3a:e0:3e:71:72:56:14:52:88:f7:c6:25:
a7:8f:6f:cc:af:52:59:3e:c7:c1:c0:2b:7c:c9:a6:42:47:17:
ed:89:a5:c2:7d:db:61:db:77:2a:41:b4:6e:72:8b:21:f9:4e:
a5:7d:3b:42:3e:76:2c:d2:34:63:d0:be:63:2a:b7:12:e9:c5:
8a:ee:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net