Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4aa4fdae-b74f-4bdd-a65d-6c62fce730b9.roa
File: 4aa4fdae-b74f-4bdd-a65d-6c62fce730b9.roa (raw, json)
Hash identifier: mUdmEHZXuHoG9Lhtl4ADwDUwDT3KsY2I1g+NH1S63kQ=
Subject key identifier: 82:E7:F9:8B:17:8C:F9:C8:0A:E6:AD:26:9A:34:5B:B5:D4:5C:9F:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 66E3EE3505B59BFD241DEFD5CB3FC71FB58C3430
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4aa4fdae-b74f-4bdd-a65d-6c62fce730b9.roa
Signing time: Mon 11 Dec 2023 00:00:00 +0000
ROA not before: Mon 11 Dec 2023 00:00:00 +0000
ROA not after: Mon 15 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:ee:35:05:b5:9b:fd:24:1d:ef:d5:cb:3f:c7:1f:b5:8c:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 11 00:00:00 2023 GMT
Not After : Jan 15 23:59:59 2024 GMT
Subject: serialNumber=2dc846718e474b168647834475d1e830a801a68e60a65fb8827ca39bdc50de4c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:fe:40:ae:fc:1e:56:06:fe:d6:98:b2:8f:
0a:ed:e8:cd:58:3e:7d:bf:5d:0f:99:6d:e1:bd:f6:
76:b4:d9:d4:19:50:2c:eb:61:98:0c:39:be:81:8f:
5f:e6:d5:58:1f:d7:bb:30:7b:b9:11:47:80:e1:5d:
ec:9d:0b:56:c4:0b:54:8b:3b:59:a6:30:08:b0:42:
29:6d:6c:ec:1a:3b:f5:db:ac:63:db:ba:eb:e8:e4:
bb:67:09:0c:c5:c3:9f:83:9a:6e:62:cd:10:e1:8f:
f0:81:78:92:b6:0f:b7:65:44:9c:c4:cb:fc:f5:e5:
58:41:e9:41:11:78:38:cc:85:32:2e:00:73:af:2e:
ef:d8:db:a3:c3:e3:0d:ac:a3:6f:c6:aa:4c:95:b9:
17:3f:3c:37:df:7b:61:07:a8:d9:ed:f3:1e:6e:1a:
b7:b7:66:6b:3f:7c:82:2a:3e:2f:eb:ad:ef:72:d5:
78:f1:6c:c9:2e:d3:96:ef:21:fb:83:53:9b:e6:e0:
ee:88:76:4c:c1:79:b3:9a:29:75:0d:3e:db:eb:97:
6f:97:0c:ef:cf:c6:e5:14:6c:44:fa:30:8a:0f:5e:
ca:04:9c:81:c9:e4:30:a1:b6:80:c9:3f:87:b0:0f:
22:94:fa:08:eb:20:0e:46:24:a5:ea:45:d3:8c:87:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:F9:8B:17:8C:F9:C8:0A:E6:AD:26:9A:34:5B:B5:D4:5C:9F:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4aa4fdae-b74f-4bdd-a65d-6c62fce730b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:76:28:00:ae:2d:e4:60:69:8f:c4:2f:0a:3c:3c:ae:50:dc:
4f:ad:7d:ab:79:3b:79:cb:1a:d0:fc:26:db:86:7f:f4:c6:86:
e3:ad:ee:77:4e:9f:43:a4:ff:fc:31:63:f1:49:19:28:7f:1e:
82:34:03:a4:83:68:9d:c5:1d:1d:9c:18:47:58:30:20:64:e3:
8f:15:bb:f4:3f:6c:b0:bd:8c:b2:e6:b5:ab:63:62:f0:f2:58:
7e:ab:b8:4c:08:7a:cf:82:c2:d3:9e:00:16:ec:76:8e:ce:38:
1a:32:34:7b:66:78:71:86:a8:4f:7f:8e:dc:02:63:63:eb:f0:
f1:4a:6b:ae:17:8d:82:e9:a8:ea:79:ce:c2:46:3f:11:72:3b:
ac:c5:6e:85:73:85:02:04:48:d8:5a:9e:03:f0:fa:70:6a:45:
20:da:7c:f6:09:2f:d3:06:e9:0a:23:5e:67:24:fe:2f:6c:3a:
88:3f:01:23:89:6e:5f:db:e1:39:a8:c8:80:d8:1d:cf:c1:fa:
19:9d:e4:58:a1:2c:a5:7e:18:a5:16:ef:28:d4:d1:5f:07:be:
85:05:66:f8:c6:89:88:15:d3:f5:54:c1:e2:97:bd:d3:9f:a3:
c4:9e:26:60:64:51:24:0b:f0:b4:c3:cd:89:d4:2b:8a:b2:02:
1e:5e:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net