Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d3404c0-d11a-4b6c-82ae-18a64bc1ad1e.roa
File: 8d3404c0-d11a-4b6c-82ae-18a64bc1ad1e.roa (raw, json)
Hash identifier: A1Jc82Bw1EM50v+qDXRs3wjEJllgma4fYLmKvIyRquQ=
Subject key identifier: E9:7A:55:E8:51:2B:6E:58:81:36:C8:D5:F8:00:15:64:08:5D:ED:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 5A832D3B048B4DF1D72BE101B1FEC05BEED9B8D4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d3404c0-d11a-4b6c-82ae-18a64bc1ad1e.roa
Signing time: Sat 09 Dec 2023 00:00:00 +0000
ROA not before: Sat 09 Dec 2023 00:00:00 +0000
ROA not after: Sat 13 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:83:2d:3b:04:8b:4d:f1:d7:2b:e1:01:b1:fe:c0:5b:ee:d9:b8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 9 00:00:00 2023 GMT
Not After : Jan 13 23:59:59 2024 GMT
Subject: serialNumber=a7070260c117439469f5e0c42b8e380be898a9fc1a3542b3b7c0bd9cd15bbc2e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:76:cb:5a:9f:50:b5:02:40:8a:e3:d1:99:
95:02:a8:c1:1d:0a:32:ee:f2:b2:8a:ac:97:ff:a9:
f3:77:16:66:32:5f:d1:5a:22:26:44:bb:e4:c7:e3:
63:3f:79:a7:a5:ba:b6:96:01:00:b5:3f:9a:7f:88:
0d:f1:ba:ae:aa:f5:a2:59:a5:79:4b:80:60:43:22:
9f:ae:55:58:3d:1d:d9:31:b9:ab:ea:1d:d2:6b:f5:
0e:f4:c0:69:b7:02:40:d1:e0:42:60:a9:b2:51:5f:
33:66:fe:12:1c:ee:e2:8d:78:b5:cd:73:ca:bb:1b:
1f:16:19:45:29:fc:83:bf:1e:c0:f3:8e:62:be:cb:
40:6e:98:0c:e0:34:82:6d:65:e1:f8:da:0c:ed:52:
c2:b0:8e:b8:90:dc:47:c0:09:68:a3:bc:98:39:a9:
1e:e4:e6:c9:4a:60:67:cc:07:dd:18:19:e3:b6:8a:
28:5a:bc:5c:1b:3d:10:7d:15:a8:c0:53:82:ed:13:
1c:80:2e:1c:34:e7:5f:3f:9e:94:0b:18:96:81:20:
13:e6:95:65:1c:fa:4d:00:de:2e:80:cc:c3:5a:6e:
9c:ed:c5:2b:d0:77:19:1d:6b:ca:f5:a7:86:bf:42:
b3:52:b7:12:f3:4b:c6:c4:21:f8:6c:ee:6d:fb:bd:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:55:E8:51:2B:6E:58:81:36:C8:D5:F8:00:15:64:08:5D:ED:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8d3404c0-d11a-4b6c-82ae-18a64bc1ad1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2f:ad:e9:07:12:ee:64:a5:c9:69:ae:08:b2:cb:68:56:fd:
65:2f:2d:7c:2b:74:58:ae:e3:20:bd:bd:f4:d3:fc:37:3b:61:
6b:11:90:75:51:e8:65:5a:50:75:38:a4:ee:9c:ab:da:e6:eb:
43:c5:72:55:fc:8f:fe:84:1b:fb:89:6e:d8:29:dc:a9:ad:37:
2b:fc:70:d3:e5:aa:f2:36:c7:74:d7:cf:a4:db:e1:4e:df:ef:
d3:a4:19:dc:be:bd:22:bb:f4:86:65:20:a8:b0:35:41:cc:b8:
eb:be:12:66:d7:97:2f:4d:26:4e:62:43:fc:f7:17:08:9c:fb:
71:18:7f:3a:be:18:c8:63:42:2e:f0:45:02:c4:dc:7c:79:65:
b8:09:f5:4b:b5:38:9c:16:df:c3:dd:51:18:61:ac:4e:3f:c4:
ff:22:4a:9c:9f:da:66:c3:62:7b:48:4d:b6:49:d9:08:b2:d6:
b0:75:f6:3e:37:61:09:e7:62:14:6a:7c:97:cd:64:c1:43:8c:
b3:db:b3:2f:c5:da:52:a4:23:2d:97:43:0d:b2:c2:cd:3c:23:
71:a1:27:65:83:56:eb:53:f3:06:34:ff:c3:87:54:73:5b:02:
2a:bb:82:3a:d2:a8:f1:66:de:45:6f:2e:ba:23:2b:40:d1:1b:
21:e6:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:01 2023 by rpki-client on console.sobornost.net