Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/622c13ad-d09f-4712-9863-1ead30472244.roa
File: 622c13ad-d09f-4712-9863-1ead30472244.roa (raw, json)
Hash identifier: hgYV+dHEtUOjNk04X0MrwGS55yS7uc6lM7ZI4Oxlot0=
Subject key identifier: AE:16:1E:98:14:49:D5:7B:99:16:3E:24:8F:3D:C4:8A:E7:C9:CF:B1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0D779703F4A9CD35169C041D0AFD2485B2BCBA88
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/622c13ad-d09f-4712-9863-1ead30472244.roa
Signing time: Sat 11 May 2024 00:00:00 +0000
ROA not before: Sat 11 May 2024 00:00:00 +0000
ROA not after: Sat 15 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 22:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:77:97:03:f4:a9:cd:35:16:9c:04:1d:0a:fd:24:85:b2:bc:ba:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 11 00:00:00 2024 GMT
Not After : Jun 15 23:59:59 2024 GMT
Subject: serialNumber=9a76d5aa0dc7129ea078f4b9319b6ab5c38305b3105e170404ad29841079ef6b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:32:e0:e6:dd:22:f8:f6:ee:b2:39:c0:96:
5c:de:11:47:88:2c:3e:79:f3:90:da:d0:e9:8d:0e:
29:3e:d4:25:d4:f1:31:99:6c:a4:cc:ac:ce:8d:39:
00:8b:11:a7:29:df:f8:04:3d:ac:e1:be:a1:dd:fe:
51:af:1b:95:86:02:32:7c:d7:56:cf:38:5f:f9:8e:
e8:3b:36:a6:ea:e0:0a:3a:c7:32:4b:46:c4:0a:bd:
57:15:c0:50:ae:0d:12:4c:b3:1f:98:57:cc:52:9e:
16:03:c9:9b:00:6f:a4:19:46:aa:10:45:af:4e:f0:
c7:82:2e:ef:58:05:46:7e:f4:d7:2d:94:a6:73:f4:
68:65:cc:2e:f3:e8:d3:98:5a:53:3f:af:76:86:78:
13:7f:fb:05:1e:3c:81:59:ba:2e:34:16:8c:80:1e:
be:86:da:bb:82:19:72:89:f9:0b:b9:72:d5:fc:3e:
83:bc:a9:85:ad:19:00:39:f3:a6:29:cf:3a:c6:40:
a3:c3:02:48:b7:f3:c6:19:b0:2b:58:ff:fa:5c:c6:
cd:3c:a0:48:26:29:62:42:ee:7a:ee:65:46:6f:7a:
9b:95:80:70:e4:74:94:1d:f4:65:63:ed:b9:9f:e0:
44:2d:d7:18:9f:03:9b:d9:32:45:ee:25:79:89:47:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:16:1E:98:14:49:D5:7B:99:16:3E:24:8F:3D:C4:8A:E7:C9:CF:B1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/622c13ad-d09f-4712-9863-1ead30472244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ef:2e:39:28:d8:ec:9e:70:49:d4:d6:dc:ba:32:4b:b9:a7:
f8:50:11:6f:92:bd:9a:8e:12:6a:ba:ae:02:b6:2d:66:10:18:
67:ee:e2:50:f2:b0:d5:d9:2e:ea:94:13:79:08:eb:c1:11:2e:
98:6b:83:34:fe:18:cb:c6:dd:72:4a:74:98:a8:bd:b4:a2:15:
cf:df:d2:f7:39:82:73:b6:fd:4c:78:a0:52:bc:1f:84:46:d6:
4d:f0:8b:78:32:65:e9:80:99:82:53:f6:e3:0b:ef:e6:f9:e6:
e5:1a:9e:10:75:77:df:de:e8:b6:a9:26:bb:69:03:02:ec:35:
6f:a8:19:1f:0c:44:56:6d:25:e5:87:36:2e:6c:c8:e0:c8:77:
43:c0:f6:dd:5c:e5:53:15:8e:f8:2d:35:d9:6d:4d:5f:45:55:
ea:b4:00:53:0a:b8:b1:15:0f:a1:41:4e:31:10:ae:42:cd:7c:
0f:b7:af:05:ef:8a:99:16:92:4e:19:a6:34:a7:e7:d0:42:d1:
20:d4:31:33:be:df:22:ac:72:bf:ef:60:32:3d:14:d7:5b:a7:
4b:68:48:f0:cd:3b:c2:32:a7:a2:1e:39:de:88:a7:61:21:6b:
e5:ce:74:fc:9e:7e:f3:71:0f:b9:72:8b:20:19:6c:b3:fc:08:
ab:46:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 00:32:57 2024 by rpki-client on console.sobornost.net