Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7d73f6e8-685a-4393-838d-2e823085b172.roa
File: 7d73f6e8-685a-4393-838d-2e823085b172.roa (raw, json)
Hash identifier: kg8PCyoP9kIm295kDWP2aayKrTHYzgst0srGDMZLUfs=
Subject key identifier: 75:13:70:FD:46:2B:5C:B5:FD:5C:D0:A1:BC:BE:59:C3:40:05:6C:6F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 273142DE921FCEACB4FBB2BA3FC1B3CAB10809E8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7d73f6e8-685a-4393-838d-2e823085b172.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:31:42:de:92:1f:ce:ac:b4:fb:b2:ba:3f:c1:b3:ca:b1:08:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: serialNumber=2b73dc04ad44c7e5ca1bf3ecd9c1f96786e28af6cadfb6668cce945b5bb9ad8a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:50:0d:9f:e5:b8:42:cd:59:80:f6:3b:3c:
3c:45:6f:28:17:02:63:18:94:cc:a1:d6:eb:43:48:
df:6b:23:2b:43:3e:19:2d:0a:7c:7b:06:84:0d:75:
90:85:a4:5a:3c:62:6d:a6:c3:a4:83:1e:48:83:bc:
02:43:a1:1e:93:5e:a7:f6:79:58:5d:f3:7b:13:6c:
71:10:b7:20:a1:ee:db:19:d2:be:b9:d1:89:34:46:
05:13:75:9d:2c:20:6d:b7:4a:bf:d6:c6:da:05:d5:
50:06:aa:6f:97:0e:85:dc:7d:54:e9:55:1b:fd:0d:
6f:6d:b6:27:72:a9:3e:80:f1:4d:69:ea:05:f6:2c:
b8:0f:35:21:da:9f:97:1d:27:f2:f0:e7:d0:ad:db:
56:cb:b3:d5:17:6d:fb:a8:86:51:94:b3:d8:16:de:
e6:5b:1b:bc:b3:9f:6f:4e:1b:b1:ed:a4:5d:74:f1:
b9:53:0d:3c:68:73:eb:9b:4c:e0:d8:1d:09:6e:12:
d0:ce:a6:56:77:c6:c0:80:d9:90:44:42:6a:8a:2c:
78:68:04:a0:36:7c:12:78:95:87:9a:85:7c:19:e9:
01:2c:32:55:34:5b:d5:18:67:ab:6a:73:87:4c:88:
ba:dc:71:e3:98:4a:b9:b0:0a:e5:91:1c:13:10:16:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:70:FD:46:2B:5C:B5:FD:5C:D0:A1:BC:BE:59:C3:40:05:6C:6F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7d73f6e8-685a-4393-838d-2e823085b172.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bf:cd:94:cc:f2:47:cb:99:4d:26:59:f9:40:45:0c:68:e8:
e4:3b:42:79:ee:19:99:8c:e8:1f:50:82:56:89:92:72:60:4d:
9a:7a:ee:9f:65:89:57:ff:9f:99:b6:38:1d:fd:0d:32:df:04:
e1:41:e1:f5:c6:0a:be:14:28:ab:39:7d:b4:2d:c6:a9:b7:71:
c1:b0:55:56:5e:0e:21:77:f7:61:5d:d0:a3:4e:e1:1a:9e:76:
af:46:73:cc:d6:6a:9a:a7:ea:cf:28:f1:f3:ea:f3:91:b0:1d:
90:34:a0:8e:c3:a0:4d:d8:5f:16:e0:97:04:a4:02:87:f4:5d:
a4:0b:58:36:a3:e9:20:9e:94:47:13:51:f5:58:31:d5:71:c3:
2a:9f:c2:de:7c:e6:ab:98:2e:33:7e:8e:3c:42:f2:cd:2a:18:
a4:e3:b5:b7:54:23:4b:ee:81:89:a7:ae:5c:79:e9:da:bd:ab:
8f:f3:a5:49:02:1f:c8:ec:71:88:a7:cb:fd:14:91:66:82:0e:
51:b7:4e:c2:26:e3:b2:fe:88:66:da:92:66:28:08:65:25:19:
04:b0:e6:58:1a:98:67:d7:48:da:eb:03:95:61:7f:28:db:37:
3b:08:c2:fe:0e:31:ef:cf:b2:60:53:12:d4:aa:4d:2a:3c:67:
a5:da:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:57 2023 by rpki-client on console.sobornost.net