Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/53d60475-c390-4900-b784-fb3fc7684d02.roa
File: 53d60475-c390-4900-b784-fb3fc7684d02.roa (raw, json)
Hash identifier: Gg6XsjVo37yGZR/Ci2xK40ZAoRZdxB0mvoe/QO25cNA=
Subject key identifier: 2E:E7:19:63:DA:20:4F:36:F5:E3:7B:B4:23:74:61:C8:D8:07:39:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 528336486214D0684D4F3D5D3EBDC4072855F39B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/53d60475-c390-4900-b784-fb3fc7684d02.roa
Signing time: Sat 16 Mar 2024 00:00:00 +0000
ROA not before: Sat 16 Mar 2024 00:00:00 +0000
ROA not after: Sat 20 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 20:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:83:36:48:62:14:d0:68:4d:4f:3d:5d:3e:bd:c4:07:28:55:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 16 00:00:00 2024 GMT
Not After : Apr 20 23:59:59 2024 GMT
Subject: serialNumber=50944aa9046292614459340142c1140482510f4522a5556ddc6750d98dd504c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:0b:cb:1c:7d:3e:f9:10:d1:da:bb:4c:89:
1c:d3:c9:91:ad:3e:d7:93:88:0e:d8:e5:5f:95:02:
04:82:7d:09:5a:d4:a7:b5:f3:0b:33:8f:e5:e4:f0:
14:25:1f:f2:0f:8a:ef:5a:38:af:61:ed:bc:ca:d9:
92:1b:ed:f0:6e:23:4b:df:e7:6a:e2:a4:6f:9c:4e:
d2:90:8b:e2:b6:6b:4d:8b:cb:a7:76:66:a8:ae:59:
47:bc:65:58:6a:1f:c7:5e:44:22:2d:92:56:1d:fa:
3b:7e:f3:e0:21:5f:a7:d4:a0:cf:a3:ec:c3:b8:27:
d4:1c:5f:25:0f:77:a7:91:fb:27:c8:04:6a:57:21:
fc:fb:e3:83:f8:b9:ae:8f:52:82:d2:5d:18:99:90:
82:c8:22:4b:15:49:83:c8:d3:5c:65:fd:ac:5b:bb:
0e:38:89:bd:b7:06:e0:3e:16:8d:d7:b9:1e:ee:0c:
66:4c:df:4b:3b:82:4e:ea:6f:6c:46:90:2e:b0:cf:
3f:62:00:0d:41:be:76:b3:a3:22:bb:7c:45:22:1b:
a3:a5:05:1f:4f:60:1c:1c:9b:4a:d8:f2:c1:ba:59:
85:58:8e:35:a8:0f:12:76:8c:6f:6b:cd:8f:ea:e0:
66:51:d0:d6:a0:fe:43:a3:26:68:08:bd:33:64:b6:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:19:63:DA:20:4F:36:F5:E3:7B:B4:23:74:61:C8:D8:07:39:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/53d60475-c390-4900-b784-fb3fc7684d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:01:87:14:1a:0f:69:6e:b2:ae:60:36:b8:48:13:05:6b:13:
69:18:e8:79:c9:0f:c4:b1:c7:35:2c:74:ad:d8:05:ea:25:e7:
b3:04:13:d3:2c:31:49:97:d3:9d:6e:98:9c:8e:5b:2c:b5:5a:
49:e2:f1:28:c2:b8:de:40:49:2b:d8:ec:53:57:89:2a:97:34:
25:26:6e:70:d4:cb:4e:5b:70:14:b2:cc:95:4c:7b:b0:cb:d9:
15:4c:05:b0:27:7f:c9:d8:f5:65:eb:d5:15:b2:b8:e5:0e:d5:
b2:ed:37:0d:33:c7:c6:4a:b2:71:07:87:1a:64:5b:a0:6a:4a:
2b:9b:40:cf:2c:a2:80:6d:e9:72:5a:e0:09:bd:1a:9a:ab:78:
5b:c7:b7:7b:09:84:44:49:29:1b:36:27:10:f9:99:ad:48:35:
c6:2f:b4:23:06:7d:3e:31:e8:f1:ab:05:9b:68:48:63:23:50:
9f:27:1d:06:31:fd:1f:ca:35:bb:a1:d2:23:25:10:f3:31:91:
7b:9d:32:a2:c3:3e:4b:f3:88:8f:ca:44:03:5b:66:f8:c2:68:
3a:20:d8:64:e0:46:94:44:5b:10:eb:f9:43:9f:7d:b4:37:ed:
35:60:0c:93:0c:8e:eb:07:90:0d:f2:cb:80:95:ef:6f:f7:e3:
da:66:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 22:49:18 2024 by rpki-client on console.sobornost.net