Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e6b47c4-e534-4501-9834-976ef7bb076a.roa
File: 5e6b47c4-e534-4501-9834-976ef7bb076a.roa (raw, json)
Hash identifier: TEdCgZI114Per3Mm9VEa1WFZqfogEkFEOzwbQhwxOj4=
Subject key identifier: 5E:7C:74:63:AC:98:A5:7A:93:82:5D:68:81:62:73:5C:4B:1B:C0:F9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 22521FE9DB49883D9CEA5F37A1169134F0316F2C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e6b47c4-e534-4501-9834-976ef7bb076a.roa
Signing time: Sun 03 Dec 2023 00:00:00 +0000
ROA not before: Sun 03 Dec 2023 00:00:00 +0000
ROA not after: Sun 07 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:52:1f:e9:db:49:88:3d:9c:ea:5f:37:a1:16:91:34:f0:31:6f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 3 00:00:00 2023 GMT
Not After : Jan 7 23:59:59 2024 GMT
Subject: serialNumber=dacb0af7a694fab35b9dbd25616f53f659a322b776f6bd16c49a036534fbae9e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:b0:2d:61:bb:92:6d:4b:12:78:d8:aa:68:
6f:b4:59:09:de:23:6c:fc:b7:2f:30:92:0e:33:ea:
89:38:54:21:a2:ba:f1:b9:8f:ba:fc:87:b1:19:15:
be:1c:65:6a:57:a5:63:a2:16:3e:79:01:2b:5f:a4:
27:ea:a2:43:ec:cb:b0:66:4d:ee:29:97:6d:a5:2d:
12:83:a0:c3:4f:43:ba:ce:05:84:2b:80:f4:eb:31:
de:8c:11:fa:1f:f2:56:b8:c8:44:61:fa:ee:70:fc:
4b:03:97:ac:17:87:0e:44:40:bf:5d:1e:a7:4c:6c:
ba:6b:75:67:83:70:ff:08:81:84:43:d8:7a:d0:a0:
60:90:67:b8:69:4f:10:6d:d7:d9:96:f9:c7:83:2e:
3e:af:0b:2f:4b:67:28:08:7c:8f:28:d1:99:a4:df:
98:1c:85:02:2e:0d:a7:fb:53:ad:32:92:0c:4c:b1:
4c:19:fc:27:5d:01:59:51:5b:94:5e:da:67:aa:80:
55:03:26:a1:6d:a3:32:bb:c4:1a:40:70:02:71:be:
a3:15:5c:26:c8:07:aa:94:56:e1:44:4d:6f:7d:37:
15:19:a6:cb:53:2f:11:b8:21:49:0e:d4:63:9c:7e:
23:48:a9:cc:9e:b5:c1:08:4c:f4:72:0f:59:b7:f1:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7C:74:63:AC:98:A5:7A:93:82:5D:68:81:62:73:5C:4B:1B:C0:F9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e6b47c4-e534-4501-9834-976ef7bb076a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:75:b0:3b:cf:c7:07:04:ef:7d:48:17:c3:52:7e:ed:c0:e9:
92:fe:98:af:7a:fa:e6:5c:9d:87:9f:f4:74:53:ec:cd:30:cb:
e8:4d:7e:4f:38:e7:f1:cf:7d:2a:e7:d9:12:ed:f5:38:a6:f1:
95:ce:81:50:32:b6:07:d8:dd:31:d5:83:25:fb:02:7d:6a:fb:
7c:86:2d:64:b7:6f:0a:ca:e9:fd:e1:18:34:42:f4:36:a4:14:
da:77:7b:77:7b:0d:32:88:8e:e5:66:68:de:a9:04:63:64:1a:
91:46:30:a5:ff:b1:ff:6a:e1:3f:24:2c:65:9a:52:b2:4a:57:
e2:0b:77:f8:9b:56:22:98:c0:ca:8f:3e:4b:68:0c:04:b0:6b:
a2:67:71:88:f7:cc:3e:54:cd:75:f8:e1:00:5c:72:4f:80:fe:
2b:69:d1:f1:e8:0c:27:f4:8a:53:ab:b0:6b:12:fa:63:bc:0f:
f8:01:3c:f8:cd:15:5c:fb:82:0c:98:6e:b6:45:32:2e:e5:46:
30:bb:3b:f2:2d:f3:47:3f:e1:67:eb:ed:e4:60:b4:24:cb:4f:
c7:ab:e2:41:b2:72:c7:4e:48:5b:3a:2f:3a:c2:db:3b:e7:c5:
59:43:0a:15:8c:da:0e:18:a8:e1:f7:dd:77:c8:b2:4e:ac:fa:
bd:dc:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:50 2023 by rpki-client on console.sobornost.net