Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/602be1da-5cd7-451a-94ab-48b24a43fc95.roa
File: 602be1da-5cd7-451a-94ab-48b24a43fc95.roa (raw, json)
Hash identifier: +ckrP7dCdVYGeiOb71CUUbr8H60n9TCYYBAmR+uuZCU=
Subject key identifier: 60:6A:E6:8B:39:B5:00:7A:16:E8:95:7E:85:D7:26:64:5E:C9:57:7F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 257E1134B1DD9294DD910E91E6136B0CE383D308
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/602be1da-5cd7-451a-94ab-48b24a43fc95.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 18:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7e:11:34:b1:dd:92:94:dd:91:0e:91:e6:13:6b:0c:e3:83:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=c3db5aa437e41a0af37a06f876930ce6bce710d9fd2663804f86a2a32dc526a3, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:70:af:c5:5b:1b:78:2e:3c:ae:5b:23:2b:
bc:af:7d:04:9e:90:92:f2:28:8a:2f:17:ba:71:e8:
7d:f4:29:32:e3:9a:87:ad:c9:8e:14:cc:91:e5:f2:
50:49:55:93:aa:1a:64:09:e4:f7:16:c1:85:3b:2e:
be:4d:b2:f1:75:0a:a5:3f:ae:aa:4c:63:e5:a9:20:
96:6b:b3:2d:dc:52:05:b4:b3:04:6d:59:e0:57:dd:
6c:4b:f9:13:4b:ed:aa:fe:d2:cf:2c:ea:32:56:7c:
2b:7f:86:2c:bc:bd:8d:eb:31:bb:ab:b1:77:29:fd:
ef:ab:be:2e:34:33:c9:11:ef:1e:c8:cd:e1:60:f6:
35:20:a5:bd:58:ba:c5:e6:0d:28:e0:ee:8f:46:14:
92:af:1a:5a:28:6c:83:ca:cd:06:72:1a:fc:7e:f1:
01:46:5a:32:b3:3d:55:40:3e:ec:3e:90:29:a4:bd:
f0:19:95:37:a3:42:7a:7f:95:b3:53:12:ac:56:23:
cb:0e:15:51:11:10:ee:2b:4a:91:c2:0b:b0:44:9f:
50:d1:d7:e3:8e:f1:55:e3:f0:73:78:10:25:5b:6b:
ce:54:be:5b:cf:18:8b:db:7c:65:a3:24:24:ba:3c:
ab:a9:6e:09:2c:b4:09:36:bb:a9:73:17:39:92:03:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:E6:8B:39:B5:00:7A:16:E8:95:7E:85:D7:26:64:5E:C9:57:7F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/602be1da-5cd7-451a-94ab-48b24a43fc95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d3:b2:02:7b:73:f3:7b:38:90:9b:d1:32:0c:be:21:c6:57:
36:29:e1:5d:03:a7:d6:d9:08:a3:72:e1:51:00:7f:73:f7:ca:
78:8c:8f:ff:1d:be:34:0a:0f:ce:af:db:ec:89:5f:7d:d0:4d:
ca:60:5d:ec:1f:68:41:e0:e3:4f:b4:30:3d:5a:0c:62:9d:6f:
ca:22:79:1f:54:ea:bd:9e:ad:35:b9:22:32:38:af:69:62:f1:
8a:c1:0a:46:e7:3e:79:32:9d:7c:9c:a4:79:eb:e4:fa:65:2b:
fa:73:40:91:1e:51:f0:dd:98:8f:dc:96:de:9c:db:5e:d4:f0:
a1:17:ac:8b:ba:96:bc:20:b5:bd:cb:13:fa:6d:d7:1f:0a:36:
ce:09:b6:ea:8b:c9:61:ef:b2:d7:55:d1:be:7e:5a:5e:2f:0e:
d4:66:7c:5c:63:66:c2:11:80:1c:5a:9b:87:a9:98:3e:da:71:
79:be:ce:c5:03:b2:39:0c:1b:3d:97:38:a5:2a:28:e3:d6:40:
9b:20:04:56:ee:7c:96:c6:ae:56:55:19:c9:67:a3:ad:e9:e5:
31:a7:a9:80:da:31:21:ee:19:8d:6a:6b:8d:bd:59:2a:16:17:
32:08:97:84:a2:b9:3e:94:87:42:e4:d3:24:8b:c3:d3:c1:dc:
38:a1:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 22:11:23 2024 by rpki-client on console.sobornost.net