Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4fe419fc-f431-40d2-a322-02c0ebb1d8e4.roa
File: 4fe419fc-f431-40d2-a322-02c0ebb1d8e4.roa (raw, json)
Hash identifier: Pyo+J5B6KImlo9i39r2OHeXu7NqycWu0U18xc9J01Zg=
Subject key identifier: 02:39:87:98:E7:6C:24:9B:D7:BA:A0:74:7A:86:89:C2:B1:D1:B4:38
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2DAB9476B3691F04AF6A772E430B9E0B9B58FD15
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4fe419fc-f431-40d2-a322-02c0ebb1d8e4.roa
Signing time: Thu 18 Apr 2024 00:00:00 +0000
ROA not before: Thu 18 Apr 2024 00:00:00 +0000
ROA not after: Thu 23 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 10:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ab:94:76:b3:69:1f:04:af:6a:77:2e:43:0b:9e:0b:9b:58:fd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 18 00:00:00 2024 GMT
Not After : May 23 23:59:59 2024 GMT
Subject: serialNumber=5ee742d9a027fba4b9bfaef7b3665ca60907553ae26321deab3fa6f4021a6721, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ff:aa:dc:e2:48:2f:fa:d8:82:f6:3e:7d:d3:
dd:24:d4:6c:13:60:ce:95:de:11:00:05:35:8a:0e:
a0:7e:a0:c3:75:be:56:3f:6c:c6:96:72:a1:b4:14:
85:ac:28:0b:d0:04:0f:65:0f:54:de:d1:17:80:aa:
77:8e:f8:03:66:37:ac:20:e0:83:a2:e2:75:81:a4:
c8:7c:53:e0:33:ad:b3:f1:41:54:0e:81:84:cb:df:
8d:01:cf:b8:5d:e2:51:53:9d:c5:62:46:c8:a6:2b:
7e:9d:57:06:87:23:4a:9b:73:8a:32:f3:ad:5c:aa:
88:6f:1d:9f:12:d5:d5:5c:7c:95:85:e3:c1:3d:75:
b4:fb:60:74:e8:25:e5:e9:cc:fb:0a:71:e5:9a:1e:
29:43:29:89:af:78:74:2d:0e:a9:b1:64:2b:e6:da:
c2:7e:72:bc:e0:29:97:c2:bf:69:a4:f6:d3:85:aa:
9a:ff:a0:36:6a:4b:2f:60:64:ed:79:d4:2c:b8:32:
41:e1:78:dd:66:6a:81:72:16:16:0f:b5:81:f6:3b:
c3:4d:53:3e:58:24:8f:55:cc:24:1d:35:99:a0:6e:
01:9c:2b:ba:06:e9:21:7b:7a:bd:99:29:ff:c5:44:
07:ad:e9:eb:06:78:26:f7:ec:f4:32:e7:ad:42:38:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:87:98:E7:6C:24:9B:D7:BA:A0:74:7A:86:89:C2:B1:D1:B4:38
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4fe419fc-f431-40d2-a322-02c0ebb1d8e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:80:9b:93:9a:81:f2:06:15:be:29:89:99:e2:22:45:e4:
20:f0:b4:46:65:bb:f8:3d:9d:30:31:52:0c:2e:2e:54:91:63:
09:da:91:c3:66:f1:f6:92:32:c3:a7:67:16:66:97:a5:c8:f2:
01:63:56:4d:d2:7c:dc:da:45:11:f1:61:2b:43:9b:63:24:a6:
13:28:25:4c:12:90:46:e0:a2:7c:62:4e:81:c8:06:03:71:95:
a7:5c:ef:c0:29:12:0a:7c:b4:b4:42:4e:80:b7:2c:7a:fe:bd:
21:db:be:d9:7b:88:11:76:c1:30:ff:9d:b0:83:4e:b6:47:86:
16:b7:6f:7e:53:19:f0:e8:1a:d1:2c:0c:68:3a:81:26:b1:e0:
7f:b1:ca:04:a6:9d:9a:4d:89:48:2d:e5:af:2e:eb:54:e6:79:
80:ba:9d:56:a7:61:1f:c2:96:3c:e6:8c:bd:4d:4d:8a:30:5f:
e3:bb:3c:57:3c:0f:5f:9f:18:27:40:77:34:07:0c:2e:43:4a:
5d:40:1e:b6:00:34:86:14:e3:0b:bf:ad:89:6e:42:47:a1:79:
4c:93:4b:fd:73:02:88:0f:f8:21:d5:9f:5a:f5:00:8b:2c:42:
af:f4:99:08:cd:58:88:f2:53:30:df:61:d3:c8:ef:95:c1:29:
2e:9e:d3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:09:40 2024 by rpki-client on console.sobornost.net