Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50cd599c-3e5f-4a20-addb-3993e530db92.roa
File: 50cd599c-3e5f-4a20-addb-3993e530db92.roa (raw, json)
Hash identifier: PNyz6muwydNK8jRVmC8d3va3l+dYPDmw1RyAtglmJ70=
Subject key identifier: AB:C7:32:3B:57:54:41:91:53:66:C0:E4:F5:6D:59:9E:7D:AC:30:A9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2A59E2E02EEED84CF0FCC637B5A90E6E2E17B695
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50cd599c-3e5f-4a20-addb-3993e530db92.roa
Signing time: Mon 18 Dec 2023 00:00:00 +0000
ROA not before: Mon 18 Dec 2023 00:00:00 +0000
ROA not after: Mon 22 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:59:e2:e0:2e:ee:d8:4c:f0:fc:c6:37:b5:a9:0e:6e:2e:17:b6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 18 00:00:00 2023 GMT
Not After : Jan 22 23:59:59 2024 GMT
Subject: serialNumber=798c5b0c5bd825f1d95c2c0df9493c6ac472c4c2a24c18d2f88f2064a09cbf7a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:1c:5d:db:4c:34:24:65:dc:67:07:9d:3a:
7b:7a:bb:89:ee:00:f2:99:1a:48:23:c5:35:30:7c:
b1:48:14:22:a3:0f:9c:54:5c:30:40:17:0c:1a:23:
9a:11:7d:17:1e:89:1c:cf:ad:00:b1:3c:40:3e:01:
a0:06:2c:bb:40:fc:a3:73:e9:f6:f3:b6:5c:c5:21:
21:5c:d8:f2:b1:a5:d6:7f:68:45:35:24:1e:66:7d:
65:b5:0e:56:f6:de:f5:64:8f:a3:12:13:0d:ce:89:
ee:a9:8a:df:ba:4e:46:c9:ca:b4:18:41:be:d5:24:
20:b8:63:8c:65:dd:ad:74:50:15:49:89:e2:74:41:
7f:da:4f:6a:d3:f9:5b:7d:dd:36:13:a3:e9:34:e7:
65:ba:b5:16:d1:68:5e:2b:52:35:20:d5:a9:ef:72:
f3:62:f3:68:a7:65:fc:0f:b2:88:86:b0:b4:cd:f4:
c9:f4:45:c8:c5:60:bb:e3:11:86:39:b0:a1:ca:96:
f9:83:03:8e:13:65:f5:25:f8:86:0b:30:01:6d:98:
65:83:4a:24:8c:40:80:55:e1:de:75:80:b8:0d:33:
02:aa:22:c5:bb:db:46:8b:2a:cd:70:0a:d9:87:9c:
48:28:72:1e:dd:89:5e:6c:fb:9d:cc:4b:70:15:b9:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:32:3B:57:54:41:91:53:66:C0:E4:F5:6D:59:9E:7D:AC:30:A9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/50cd599c-3e5f-4a20-addb-3993e530db92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cf:ad:b8:f7:2a:56:bc:2c:5e:93:ef:73:ac:9c:5c:a6:b7:
2d:28:b5:de:1e:3f:e5:5d:4c:01:af:aa:c0:c9:03:ff:81:cc:
60:8e:62:1c:f4:33:88:e6:41:f9:55:a6:80:2d:07:54:ac:37:
7f:d1:08:5c:4e:c0:5c:f7:a3:12:b7:36:16:79:4c:87:76:9e:
db:f2:e9:9e:d6:42:db:be:d7:5a:d0:68:d7:a9:ec:1f:f7:8f:
92:6d:fd:0b:a3:c7:a4:7b:54:86:c8:50:be:b0:14:ca:26:49:
43:01:0a:b6:00:5a:18:ab:0c:71:96:4d:c7:bb:6d:ab:6b:55:
7d:98:c4:8b:cd:0e:f1:43:48:e1:78:79:aa:dc:63:a3:5d:07:
cd:44:68:38:bc:e5:9b:a5:1c:93:48:ab:af:f7:22:d4:84:b7:
15:85:7a:02:d1:db:82:d5:da:fb:4f:a8:f9:3a:73:1b:a7:28:
87:ed:18:0e:04:90:c7:ed:38:f5:f0:90:1c:50:50:90:97:5f:
a4:47:9b:48:1d:ba:6d:aa:f0:e1:61:af:5f:24:0b:9c:7b:9c:
4d:00:4b:cb:56:67:12:cc:7a:94:58:37:b0:a1:09:a5:8e:7d:
1d:45:56:26:9c:18:d6:17:fe:92:4e:48:2c:29:07:75:11:a7:
b0:38:e0:a2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKlni4C7u2Ezw/MY3takObi4XtpUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE4MDAwMDAwWhcNMjQwMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3OThjNWIwYzViZDgyNWYxZDk1YzJjMGRmOTQ5M2M2YWM0
NzJjNGMyYTI0YzE4ZDJmODhmMjA2NGEwOWNiZjdhMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRsRxd20w0JGXcZwedOnt6u4nuAPKZGkgjxTUwfLFIFCKj
D5xUXDBAFwwaI5oRfRceiRzPrQCxPEA+AaAGLLtA/KNz6fbztlzFISFc2PKxpdZ/
aEU1JB5mfWW1Dlb23vVkj6MSEw3Oie6pit+6TkbJyrQYQb7VJCC4Y4xl3a10UBVJ
ieJ0QX/aT2rT+Vt93TYTo+k052W6tRbRaF4rUjUg1anvcvNi82inZfwPsoiGsLTN
9Mn0RcjFYLvjEYY5sKHKlvmDA44TZfUl+IYLMAFtmGWDSiSMQIBV4d51gLgNMwKq
IsW720aLKs1wCtmHnEgoch7diV5s+53MS3AVudg/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUq8cyO1dUQZFTZsDk9W1Znn2sMKkwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzUwY2Q1OTljLTNlNWYtNGEyMC1hZGRiLTM5OTNlNTMwZGI5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAADPrbj3Kla8LF6T73OsnFymty0o
td4eP+VdTAGvqsDJA/+BzGCOYhz0M4jmQflVpoAtB1SsN3/RCFxOwFz3oxK3NhZ5
TId2ntvy6Z7WQtu+11rQaNep7B/3j5Jt/Qujx6R7VIbIUL6wFMomSUMBCrYAWhir
DHGWTce7batrVX2YxIvNDvFDSOF4earcY6NdB81EaDi85ZulHJNIq6/3ItSEtxWF
egLR24LV2vtPqPk6cxunKIftGA4EkMftOPXwkBxQUJCXX6RHm0gdum2q8OFhr18k
C5x7nE0AS8tWZxLMepRYN7ChCaWOfR1FViacGNYX/pJOSCwpB3URp7A44KI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net