Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64160e00-9632-46e2-9767-4f2a16dbd918.roa
File: 64160e00-9632-46e2-9767-4f2a16dbd918.roa (raw, json)
Hash identifier: 2Eh3agK9tdAO4QjLYzdR0HqoRTlBZF+KIhexscdSchw=
Subject key identifier: 2C:08:90:66:91:51:C9:84:7F:8C:AE:00:8B:01:37:08:41:E8:E1:2D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C282A7BC0043E8B137739F05778ACB298E9F2D5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64160e00-9632-46e2-9767-4f2a16dbd918.roa
Signing time: Mon 11 Mar 2024 00:00:00 +0000
ROA not before: Mon 11 Mar 2024 00:00:00 +0000
ROA not after: Mon 15 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 10:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:28:2a:7b:c0:04:3e:8b:13:77:39:f0:57:78:ac:b2:98:e9:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 11 00:00:00 2024 GMT
Not After : Apr 15 23:59:59 2024 GMT
Subject: serialNumber=85e300b712a9e172be5b57dc41f08214888925f9ad44694ec70f9e4d67142144, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:25:aa:a7:da:21:25:74:f3:0d:c3:e0:91:
ab:57:d9:b6:8e:8b:d4:7d:cd:66:26:42:45:70:15:
dd:05:2f:9d:63:09:cb:a7:03:34:1c:c3:43:84:25:
31:42:6c:28:4e:a7:43:00:e5:fd:aa:f8:73:3b:d9:
22:8e:14:3f:4d:4a:85:ae:70:c5:cb:09:14:aa:bd:
9a:48:1b:aa:7c:55:bf:ef:8e:01:4b:3d:06:b4:0d:
b2:08:fb:91:0f:7d:24:86:7a:ca:3f:a7:ae:be:52:
92:01:47:68:6e:28:9b:0c:d3:88:9c:88:8c:70:85:
1f:b5:ad:45:fd:51:5c:8e:e5:31:d5:40:14:95:33:
2a:22:05:4e:b3:30:f0:48:6f:9b:53:f9:0b:2f:67:
d4:89:03:4d:48:10:43:72:6d:41:0b:b3:4a:c7:5a:
d7:48:12:ed:3f:30:f6:b9:26:24:c9:f2:10:4f:cf:
0c:15:91:06:e5:1e:99:c9:95:85:d2:3e:b1:11:09:
be:55:0c:1a:d0:d4:5e:f3:78:65:52:74:a0:a3:26:
54:d5:15:c5:c3:ca:e8:28:1d:11:44:de:b3:19:d1:
18:1c:b7:36:89:02:8d:82:7b:15:0d:4c:f2:cc:11:
14:2c:34:e5:df:6f:e5:59:96:ec:24:c6:06:c0:a3:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:90:66:91:51:C9:84:7F:8C:AE:00:8B:01:37:08:41:E8:E1:2D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/64160e00-9632-46e2-9767-4f2a16dbd918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:62:13:de:8b:2a:0f:97:78:61:db:91:a9:01:de:ff:73:91:
bc:60:8c:de:81:df:9b:ca:d8:42:eb:8e:50:98:a4:34:f5:66:
78:43:21:bb:cb:c9:b6:87:29:40:87:db:1c:f5:26:98:a9:09:
a2:83:e7:54:de:ee:bc:b1:ea:e8:ab:a2:ef:4c:09:e7:2c:96:
39:7d:1a:30:37:ef:b5:53:7e:eb:2c:b5:c1:41:44:cc:ae:6e:
6c:bc:9d:85:96:9a:50:77:6d:69:a2:44:2e:66:4a:f0:08:b1:
27:a8:c3:75:00:db:78:23:0c:f6:fa:c9:01:a4:ba:e5:65:6a:
73:08:78:92:f8:81:e6:8a:12:31:62:3e:43:02:be:32:5a:21:
b2:5e:a4:42:dd:f1:7d:6c:2c:1c:a9:85:14:a4:de:03:6a:cc:
57:c3:d9:ab:3b:c8:f1:0f:cf:f0:bf:5a:e0:f0:00:2e:ed:bc:
ba:c4:b7:6c:16:07:c9:8c:9c:46:68:d8:52:29:31:3d:3f:2e:
c8:82:93:6c:ab:3f:6e:72:0e:de:0d:d2:56:89:36:d8:53:42:
48:cc:99:ac:0f:78:8a:ec:e0:d3:d8:cd:71:df:89:27:8a:eb:
03:f2:13:e7:ab:2c:7f:ae:96:45:1c:d4:27:b9:a1:a3:e0:cd:
71:ae:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 14:02:40 2024 by rpki-client on console.sobornost.net