Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78e1cf70-f2a7-44d0-9056-377ee7ba1905.roa
File: 78e1cf70-f2a7-44d0-9056-377ee7ba1905.roa (raw, json)
Hash identifier: ExXrloHuW02dpYL6QPi0HkraQYnarek4O9QBgUuazs0=
Subject key identifier: 49:17:63:E0:26:31:0F:72:09:A2:BD:BA:F4:FC:1F:70:6D:F3:5D:D0
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27F01B451B3C9379471D98AD9B4F882C3AFB1C48
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78e1cf70-f2a7-44d0-9056-377ee7ba1905.roa
Signing time: Thu 04 Apr 2024 00:00:00 +0000
ROA not before: Thu 04 Apr 2024 00:00:00 +0000
ROA not after: Thu 09 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 16:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f0:1b:45:1b:3c:93:79:47:1d:98:ad:9b:4f:88:2c:3a:fb:1c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 4 00:00:00 2024 GMT
Not After : May 9 23:59:59 2024 GMT
Subject: serialNumber=129f76c879e71d07cc250898e1712782583f832227c6df172f4554b63296e53b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:28:df:a6:75:7b:82:72:1f:d8:fe:89:f9:
fd:42:7c:61:08:22:1a:67:84:94:b4:37:c8:4c:9d:
39:a1:56:9e:91:2d:5b:34:81:3b:37:89:97:72:61:
29:45:48:19:1d:60:18:f1:73:38:59:bf:57:71:9a:
f5:ea:f8:c1:bf:09:55:98:9f:4c:58:85:c0:81:35:
f3:e1:f5:b9:55:d1:ec:79:b5:e5:95:ad:98:41:a6:
8d:a6:22:ed:72:29:66:2b:7c:93:b9:2c:e8:80:c7:
d9:c1:72:d2:53:19:ed:fe:31:8e:9f:98:38:72:70:
c0:25:3c:bc:5d:05:73:5e:cb:c4:8a:ab:35:4f:8a:
ba:26:e6:a4:61:fd:23:9f:4e:5c:a0:3b:6c:b0:e3:
38:8a:d7:71:b6:95:50:ca:e3:d3:6e:5b:70:10:ef:
cc:13:31:8e:dc:02:3d:7b:be:4b:2a:af:f9:f4:c1:
03:79:3e:92:a9:2d:87:46:74:f3:55:b1:91:c0:5b:
b5:92:03:a0:b0:38:72:21:99:aa:c7:ca:aa:f4:83:
c2:50:35:7e:82:92:4c:03:0b:34:a2:aa:11:bc:1d:
c7:f9:ee:70:67:37:ec:7d:b6:58:95:ed:c0:cd:bf:
28:13:31:21:fe:c4:69:e4:21:51:72:98:54:30:c3:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:63:E0:26:31:0F:72:09:A2:BD:BA:F4:FC:1F:70:6D:F3:5D:D0
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78e1cf70-f2a7-44d0-9056-377ee7ba1905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1b:58:d4:28:81:d5:ea:e9:41:e8:63:f6:3a:84:89:f4:22:
3e:5f:52:83:d0:0b:86:45:9b:db:ba:70:e0:76:64:3e:78:25:
ad:de:57:29:9f:7e:b8:d5:8f:34:99:6f:b7:ef:87:79:f4:12:
1f:e3:d9:4f:68:be:c9:24:50:86:27:17:4b:21:cb:f1:99:f4:
91:71:ee:b1:91:4e:61:ca:1f:d6:0f:35:0b:2e:de:15:6f:e0:
bb:39:8b:9e:d3:74:29:2e:83:8b:d5:ce:96:30:07:3f:a5:18:
ef:8a:5d:59:8c:0b:92:70:65:75:c7:c5:d0:c1:ac:e9:6e:79:
c3:c8:ac:0c:cb:9b:17:2b:c3:2e:68:83:54:50:b1:a8:69:10:
e3:fb:0f:41:56:ea:9a:a5:3a:40:15:7a:4e:34:83:4a:5b:41:
32:ab:a0:24:0e:1e:1d:14:bb:01:7d:40:5e:57:3e:a9:ed:a0:
4d:48:9c:f6:a4:28:fa:42:85:82:b4:68:0e:6d:ab:8a:69:8d:
af:74:78:cc:84:82:ec:62:35:e8:71:71:88:76:df:72:64:1a:
ec:52:53:2d:04:84:ec:04:35:43:be:ef:79:74:eb:b0:b0:2c:
25:b8:f6:b2:df:86:b9:99:33:30:dc:7c:cb:1c:bf:25:21:d3:
7f:29:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 19:57:51 2024 by rpki-client on console.sobornost.net