Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69ce737f-38e8-404e-b81c-395ead89e399.roa
File: 69ce737f-38e8-404e-b81c-395ead89e399.roa (raw, json)
Hash identifier: BIhXNhExZqmf8ocU9zAisqLq9O+zu/mOEpCxDnGpXUQ=
Subject key identifier: B1:60:CB:B7:C8:D5:67:E6:D7:27:1F:17:32:AF:94:BB:5E:6C:7D:CD
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 25762C673C5E498B50C63CEBDDFFB65D3DE37D72
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69ce737f-38e8-404e-b81c-395ead89e399.roa
Signing time: Sat 06 Jan 2024 00:00:00 +0000
ROA not before: Sat 06 Jan 2024 00:00:00 +0000
ROA not after: Sat 10 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 23:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:76:2c:67:3c:5e:49:8b:50:c6:3c:eb:dd:ff:b6:5d:3d:e3:7d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 6 00:00:00 2024 GMT
Not After : Feb 10 23:59:59 2024 GMT
Subject: serialNumber=e537543c78fba815e757054a86530e8d40f85e496850814f8a900e9c57ae1468, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:a0:ca:14:9b:d6:b8:60:d4:9f:2f:a2:73:
c5:b3:64:6f:eb:38:c5:fb:e4:62:50:01:c7:c1:f3:
9b:f8:5b:1a:41:44:34:d9:73:9e:0a:d9:84:c1:08:
c1:02:80:99:57:17:b6:6e:89:33:8e:37:0d:08:d8:
2e:03:b0:9d:22:9b:91:a8:d3:74:49:71:61:e0:17:
f4:b1:d7:60:12:55:48:74:bf:e4:bf:50:cb:79:88:
c2:85:a2:38:8a:f8:22:47:42:bf:2a:21:12:78:68:
8e:1c:fc:a0:2e:39:d7:71:fe:35:a4:eb:d9:14:4b:
3c:ea:56:db:e9:b7:48:d6:99:0e:b0:0f:83:37:60:
b5:6a:a5:ab:10:fe:b3:a1:30:a8:45:83:fc:9c:e4:
ea:95:2b:9d:df:67:03:f1:f0:98:a8:1d:5d:94:37:
79:c0:1b:1b:70:6c:b7:33:e7:d5:5a:f3:b2:78:ee:
58:c3:7a:ad:58:c4:38:ee:76:9f:3d:39:c3:6c:ce:
f3:e6:ae:ef:d6:47:c9:fa:a1:9d:2f:4c:e9:cc:a7:
cb:b2:0a:8a:8f:73:4e:04:c9:ff:65:57:23:98:f0:
e7:03:a2:6d:cd:7a:09:e7:19:d4:28:ee:6a:ab:88:
db:ee:87:db:d0:ca:47:76:7e:4d:e4:f1:ae:f4:94:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:CB:B7:C8:D5:67:E6:D7:27:1F:17:32:AF:94:BB:5E:6C:7D:CD
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/69ce737f-38e8-404e-b81c-395ead89e399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:46:43:91:5c:7c:30:95:2f:3d:6f:46:2e:48:ec:e7:27:77:
5a:f0:2b:cd:fd:53:13:e2:0c:f3:c3:17:48:82:42:98:db:5c:
39:d0:01:bb:be:5e:e0:c8:7e:6a:a9:b0:b4:24:96:3e:85:88:
42:e7:12:50:32:d9:ca:ac:89:1c:3d:f0:88:dd:d1:4c:cd:f4:
b6:28:69:a4:14:18:86:bb:3a:b7:9f:46:be:e2:b0:3f:e5:8b:
07:a8:20:f9:6c:10:1d:c6:4c:ee:47:ef:ac:26:82:13:e0:33:
fc:00:14:7e:c3:81:2b:bb:ed:fb:36:61:59:0d:d5:9b:b2:01:
4b:06:4f:85:bc:f7:a0:31:9a:15:bf:82:b9:c6:c6:97:9b:7f:
0d:08:58:b4:45:16:b0:78:e7:57:61:d4:90:31:e3:3b:9a:43:
80:6c:ab:fa:0d:67:9f:be:eb:00:e2:0a:dc:53:ae:49:0f:0b:
60:5f:dc:58:13:be:e0:5a:75:be:79:9e:25:f4:3c:f8:19:fe:
6c:b6:3c:ca:20:c7:1b:c4:b1:c7:9e:71:83:02:f0:12:d2:60:
3a:95:bd:8a:e0:29:36:37:f4:d7:b5:7d:37:c0:ef:8a:4e:a3:
78:fc:81:b5:ad:07:de:a2:85:ab:57:9c:45:6a:8d:b0:4a:49:
d3:87:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 00:55:54 2024 by rpki-client on console.sobornost.net