Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ac41a04-5f27-48af-b8a4-0c97f31ed40d.roa
File: 8ac41a04-5f27-48af-b8a4-0c97f31ed40d.roa (raw, json)
Hash identifier: 0RXHXP8j6caMX0N+PkQK/G10uGT5+f6mTmtyE8noW8g=
Subject key identifier: 26:5E:D0:BA:2A:00:A8:40:97:99:18:B0:D4:80:4B:64:39:39:73:7D
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 620A2CD83D18F1BA1DB60FB67CB9B8C4BE43439F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ac41a04-5f27-48af-b8a4-0c97f31ed40d.roa
Signing time: Thu 16 May 2024 00:00:00 +0000
ROA not before: Thu 16 May 2024 00:00:00 +0000
ROA not after: Thu 20 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 11:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0a:2c:d8:3d:18:f1:ba:1d:b6:0f:b6:7c:b9:b8:c4:be:43:43:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 16 00:00:00 2024 GMT
Not After : Jun 20 23:59:59 2024 GMT
Subject: serialNumber=f3f80d14c292e4f627a2b2939b5d4152cd60ec4a29a1b0482e345d22bb96a1bc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:94:53:5d:5e:94:c7:65:62:23:08:4b:28:
78:0d:be:f9:8f:59:a4:b9:84:6d:ea:2d:ac:12:ac:
3b:5c:93:d3:bf:c9:66:34:11:85:40:c5:67:e3:42:
b2:50:2a:76:08:76:83:c6:2a:3f:80:2f:d2:a4:fd:
04:79:55:50:4d:3d:ff:86:a9:c9:22:f2:a5:04:b6:
b9:17:58:c8:26:69:ba:b2:15:44:7d:d7:f3:b9:a8:
5d:25:70:9b:dc:ab:f3:59:d8:0d:09:e0:ef:34:c7:
52:f1:10:2a:6a:14:dc:ab:d7:d5:54:cb:a6:9b:26:
b6:24:f7:ea:81:ca:0e:82:13:7e:4f:31:0d:a2:40:
b7:4e:8a:48:71:64:b9:c4:76:ce:25:b7:77:f2:b8:
b8:1c:49:7a:ca:2a:9a:ce:30:ba:1f:d8:33:5c:95:
74:7f:7c:5a:75:4e:ff:8b:e4:e1:50:6d:87:2d:de:
fa:36:54:02:30:e3:0e:4a:64:8c:57:36:6a:60:f8:
cd:3c:4f:fb:b0:fa:05:1d:c5:ab:75:35:46:db:c6:
62:c3:10:0e:52:ab:0f:f4:a1:59:15:b5:4a:2a:7c:
e5:b4:ad:e0:d4:94:1b:58:50:58:1a:4e:63:af:c1:
6d:74:2c:f8:20:06:a1:d1:e8:10:cd:71:eb:a6:65:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:D0:BA:2A:00:A8:40:97:99:18:B0:D4:80:4B:64:39:39:73:7D
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8ac41a04-5f27-48af-b8a4-0c97f31ed40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:46:b9:0b:f5:e3:52:c6:61:ed:5d:9d:77:ab:5b:c9:dc:65:
ce:3b:36:47:26:69:c2:9e:1c:2c:cc:ce:25:e7:24:76:00:30:
48:71:ff:24:d0:6b:c2:a6:90:5c:2f:63:f9:96:a7:c4:ba:a4:
fb:06:01:16:37:56:a3:70:7a:1d:6a:02:a8:f1:87:6e:cc:14:
c1:a8:8e:c4:ca:fd:f0:46:97:d3:4a:0f:bc:34:32:56:fc:df:
5b:ab:87:4f:6c:0c:c4:47:d8:3e:43:4d:83:98:92:68:86:cc:
a6:9c:48:84:09:d9:4b:5a:22:c1:dd:74:50:51:02:58:a7:b5:
70:46:53:4e:82:44:4e:ee:b0:1d:96:8c:df:67:5e:e1:40:cd:
c3:3b:b5:22:a7:8a:6d:0f:60:11:2d:9c:de:0b:dc:5e:80:1e:
2d:0f:6f:79:31:2c:18:8d:2d:b4:c6:7b:d0:76:90:6e:c1:1b:
3b:18:2e:f9:96:bb:6c:22:8f:41:64:87:3c:fc:e0:4f:02:d9:
f4:39:2e:65:13:e1:03:10:9f:01:8e:86:90:98:f1:e8:78:bd:
62:e9:fa:5d:9f:f7:32:63:6b:0b:06:54:3e:be:31:28:ca:85:
99:83:8a:96:f2:7a:98:ec:68:6c:93:60:ae:56:1a:88:21:c0:
b8:61:0e:32
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYgos2D0Y8bodtg+2fLm4xL5DQ58wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTE2MDAwMDAwWhcNMjQwNjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmM2Y4MGQxNGMyOTJlNGY2MjdhMmIyOTM5YjVkNDE1MmNk
NjBlYzRhMjlhMWIwNDgyZTM0NWQyMmJiOTZhMWJjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDLS5RTXV6Ux2ViIwhLKHgNvvmPWaS5hG3qLawSrDtck9O/
yWY0EYVAxWfjQrJQKnYIdoPGKj+AL9Kk/QR5VVBNPf+Gqcki8qUEtrkXWMgmabqy
FUR91/O5qF0lcJvcq/NZ2A0J4O80x1LxECpqFNyr19VUy6abJrYk9+qByg6CE35P
MQ2iQLdOikhxZLnEds4lt3fyuLgcSXrKKprOMLof2DNclXR/fFp1Tv+L5OFQbYct
3vo2VAIw4w5KZIxXNmpg+M08T/uw+gUdxat1NUbbxmLDEA5Sqw/0oVkVtUoqfOW0
reDUlBtYUFgaTmOvwW10LPggBqHR6BDNceumZexrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJl7QuioAqECXmRiw1IBLZDk5c30wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhhYzQxYTA0LTVmMjctNDhhZi1iOGE0LTBjOTdmMzFlZDQwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAA1GuQv141LGYe1dnXerW8ncZc47
NkcmacKeHCzMziXnJHYAMEhx/yTQa8KmkFwvY/mWp8S6pPsGARY3VqNweh1qAqjx
h27MFMGojsTK/fBGl9NKD7w0Mlb831urh09sDMRH2D5DTYOYkmiGzKacSIQJ2Uta
IsHddFBRAlintXBGU06CRE7usB2WjN9nXuFAzcM7tSKnim0PYBEtnN4L3F6AHi0P
b3kxLBiNLbTGe9B2kG7BGzsYLvmWu2wij0Fkhzz84E8C2fQ5LmUT4QMQnwGOhpCY
8eh4vWLp+l2f9zJjawsGVD6+MSjKhZmDipbyepjsaGyTYK5WGoghwLhhDjI=
-----END CERTIFICATE-----
Generated at Thu May 16 14:50:04 2024 by rpki-client on console.sobornost.net