Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d89e5dc-736d-4c52-831a-5f3eb6eba1b5.roa
File: 4d89e5dc-736d-4c52-831a-5f3eb6eba1b5.roa (raw, json)
Hash identifier: zeyawlNmsQyF3SS4lR9iCjkl85eLOcmtde+qij127V4=
Subject key identifier: 69:A1:BB:4C:33:90:F6:ED:29:7B:38:76:66:97:31:DD:ED:BA:92:BE
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4B5CF56475CDF2F7E3004AB9296F5CB3B6A301F4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d89e5dc-736d-4c52-831a-5f3eb6eba1b5.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5c:f5:64:75:cd:f2:f7:e3:00:4a:b9:29:6f:5c:b3:b6:a3:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: serialNumber=3782fa122873ac40e4ce8230c84e994699019a6561ecf3c50d5f9f2722834315, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:1a:a8:c1:bf:82:78:18:e3:6d:dc:5e:b9:
bb:57:f3:b5:44:cb:06:11:2a:c7:72:9f:43:ac:b5:
44:bf:8c:98:a4:b3:62:22:d7:10:fd:88:aa:de:07:
83:61:12:49:1d:29:90:fc:e5:38:ea:a1:6e:7b:f7:
b5:5a:fe:22:35:b9:84:cf:0f:12:0e:7f:9d:ad:41:
3e:5e:f0:ff:66:bc:6d:f7:a2:a9:13:d9:fa:5f:9d:
88:30:e9:d0:ad:11:1d:62:71:e3:6a:1d:93:79:9a:
d7:fc:58:27:97:06:16:b2:76:37:da:6d:7e:b7:ca:
58:fd:bc:f8:c7:9b:ab:13:10:1d:6d:a7:dd:68:6a:
76:27:78:2e:0a:cc:78:b0:09:85:c7:32:89:81:83:
cc:6f:08:cf:54:08:19:af:14:b8:58:88:da:6b:d4:
d7:1a:73:35:c5:fb:9c:82:d7:ee:e2:37:70:f0:84:
a1:a1:8f:5d:bb:b8:31:d5:27:8a:07:cf:40:b0:37:
62:30:e2:a2:06:05:f5:98:3a:d4:77:83:97:94:81:
41:14:57:b2:74:70:b2:95:a7:91:22:6e:27:cf:30:
87:b1:58:75:89:66:78:69:2a:5f:d8:12:5c:45:b2:
35:73:b2:43:58:80:3c:f2:7e:6e:86:71:47:8a:d8:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:BB:4C:33:90:F6:ED:29:7B:38:76:66:97:31:DD:ED:BA:92:BE
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4d89e5dc-736d-4c52-831a-5f3eb6eba1b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b8:7b:c2:71:62:60:80:ea:5b:1b:a4:42:55:fd:ba:1f:8d:
d6:a0:25:c6:e2:2d:bf:04:e2:80:3d:96:16:5a:3d:02:0d:76:
ff:d8:5d:2d:15:22:a4:4e:63:33:f7:64:da:2a:44:c8:aa:66:
7f:cc:61:8d:89:f4:55:9f:d7:72:4c:00:a5:3f:bb:dd:e4:80:
02:9a:58:dd:6d:58:f2:21:67:e4:4b:0a:a5:1c:e5:4c:60:e3:
dc:c3:80:2f:69:a3:86:99:e1:aa:29:af:af:ed:30:4c:34:c6:
6f:d6:24:3e:eb:92:dd:a9:27:42:6c:0f:42:ad:7a:4d:4b:80:
1f:14:71:b4:50:19:19:f6:ec:60:3a:58:d8:49:73:07:1d:a4:
b7:8d:03:1f:66:54:22:0e:85:10:6b:b8:92:77:cc:cf:0b:63:
7b:29:93:d1:d7:81:e1:6d:b3:35:87:04:74:ec:89:8e:40:46:
e0:16:d9:be:79:02:af:d9:a6:0e:0b:e6:68:20:80:b4:9b:b4:
8d:71:ee:94:3b:0b:08:e2:76:4b:44:c2:4e:31:48:dc:56:2f:
0d:8b:55:cc:96:f5:c5:88:ec:28:94:8d:2f:05:44:90:d4:04:
93:09:4a:d8:32:35:41:1b:d9:f5:41:5f:64:bf:d0:d1:09:b5:
5c:83:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net