Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/872fb752-747a-4be6-b3ee-de7645c56e5b.roa
File: 872fb752-747a-4be6-b3ee-de7645c56e5b.roa (raw, json)
Hash identifier: 5w2tCUD3IL2fImx8b8vzeexyN6gfZ5P+0sjQTdC00mI=
Subject key identifier: B8:FE:E6:CC:01:89:40:0E:9B:80:45:62:AD:11:51:5B:24:CD:76:48
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 27AC8B3609D047D0BF7C1907BD5C1D90D4B627D2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/872fb752-747a-4be6-b3ee-de7645c56e5b.roa
Signing time: Sun 02 Jun 2024 00:00:00 +0000
ROA not before: Sun 02 Jun 2024 00:00:00 +0000
ROA not after: Sun 07 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 14:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ac:8b:36:09:d0:47:d0:bf:7c:19:07:bd:5c:1d:90:d4:b6:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 2 00:00:00 2024 GMT
Not After : Jul 7 23:59:59 2024 GMT
Subject: serialNumber=3c19f149facff84b4f486ebc261c09a6dc74f0fee78e17e525fd42016d3defba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:a1:98:c1:4a:64:42:97:c6:52:a7:6e:50:
fd:d1:a1:ef:22:7e:2f:58:bf:f6:bd:08:fc:14:d2:
1e:df:23:65:97:2c:68:a0:98:f1:f6:e4:1b:8e:19:
9d:da:e0:72:fa:89:8a:69:9a:a4:b2:0e:83:b8:cf:
f4:77:ac:e4:54:8e:4c:10:d2:95:44:f6:ee:aa:bd:
10:82:e4:3b:53:9f:2b:e0:91:9e:e8:46:d1:c0:8e:
08:47:9e:73:83:be:dd:e3:5f:75:09:ca:b3:52:7c:
69:94:1b:80:40:5a:6b:08:1d:31:ac:0b:e8:22:8b:
26:78:ce:bd:e8:4d:3e:0c:7f:4b:1b:c5:d2:44:2c:
27:2b:48:0f:f9:ce:76:31:b2:66:33:f8:b0:71:48:
cc:1b:c6:02:16:6e:e5:79:41:b9:d2:0f:e2:0f:55:
ea:40:1e:f2:98:dd:51:88:59:d1:05:ae:a5:0f:a3:
c1:be:b5:06:65:f3:b2:a1:b0:90:d8:df:f9:c0:f6:
5a:0d:fe:b7:98:7d:c8:d5:4b:12:21:ce:dd:8b:76:
8a:b1:56:70:8d:c5:70:28:75:3f:20:25:1c:e6:1c:
46:a2:cd:cc:a2:ef:12:45:48:df:1e:d6:cc:d9:8f:
17:a7:90:35:1a:a9:65:e2:8d:74:f0:a8:2c:51:2a:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:E6:CC:01:89:40:0E:9B:80:45:62:AD:11:51:5B:24:CD:76:48
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/872fb752-747a-4be6-b3ee-de7645c56e5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:63:40:6c:4e:50:89:c0:66:51:5f:56:0f:5a:e4:87:37:51:
15:05:d4:8b:60:3c:fb:ed:b4:0d:fd:cc:2a:ac:1a:f0:c5:91:
19:cf:83:e8:25:83:4f:5a:3f:99:dc:4c:71:d8:8f:79:68:10:
54:18:02:34:d0:e8:f7:da:5f:4c:31:7b:4e:a3:bb:6a:bd:6c:
1a:3d:73:99:0f:73:c7:fc:2d:4d:81:42:ec:9a:40:20:ad:20:
96:9f:e3:64:4a:ca:b9:ba:fb:b9:e5:d8:2c:f3:40:5a:51:19:
3f:ce:89:60:b4:8c:7d:32:5e:cf:d5:1b:d3:b5:f1:65:29:89:
be:33:74:f2:9c:aa:f5:7d:d3:88:6e:78:cf:00:17:55:36:2f:
00:f0:41:f2:2d:f7:71:e1:83:5b:f8:05:3e:fe:e5:21:55:37:
93:63:f0:48:bc:34:20:97:cc:d5:a3:7b:71:32:5f:5b:00:fd:
61:96:68:60:9d:5c:3e:6d:26:4b:df:9d:58:00:6d:79:51:51:
14:3d:31:d6:1c:96:cc:df:5f:91:65:30:fe:6e:8a:2d:9b:37:
7f:95:0b:f8:1d:0c:60:8f:51:56:6e:dd:7a:9e:8b:87:bb:eb:
25:12:3c:83:2d:85:fa:ca:31:04:59:19:39:84:ef:09:c0:a8:
8c:68:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:16:55 2024 by rpki-client on console.sobornost.net