Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8fe13b5c-b14a-49d8-80fd-e4cc6822173c.roa
File: 8fe13b5c-b14a-49d8-80fd-e4cc6822173c.roa (raw, json)
Hash identifier: MDkSXAPV0LgU4YSgI3JiDKdS3jsMYjmpyKZQ9qaAjU4=
Subject key identifier: 63:7B:C4:52:AA:EE:7D:F0:7E:E4:EB:8C:54:2D:39:71:A3:B9:47:7C
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 67AAF05CA410112836ED590C35C7CA1E4428EF33
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8fe13b5c-b14a-49d8-80fd-e4cc6822173c.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:aa:f0:5c:a4:10:11:28:36:ed:59:0c:35:c7:ca:1e:44:28:ef:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: serialNumber=447680b72aab9e319bf6df9ce0d05bea6215efe4d97c842a0f236c88c53429ec, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:c4:74:66:6c:bf:64:ab:41:9e:10:18:d1:
73:6f:f2:9f:9f:ea:db:50:ec:c5:91:f6:62:92:da:
0e:cf:ed:97:75:f4:bc:cc:fd:f3:0a:96:91:ce:f1:
19:e0:19:f2:0c:fc:e8:2c:2f:5b:b5:73:2a:4d:54:
70:55:82:82:59:f7:19:05:85:68:c5:f6:f4:54:75:
74:22:64:80:e6:c0:dc:85:02:30:be:a0:04:14:34:
c7:f5:9d:c5:36:02:84:ac:0a:cd:bf:4f:7d:f1:b6:
d5:a9:c2:fb:52:ab:97:83:35:9e:6f:09:8a:8b:06:
02:a2:76:0c:9d:95:8b:d2:47:20:b1:d2:15:0c:48:
fb:c3:4c:d1:f3:4b:02:32:a7:37:ff:a0:0e:48:44:
3e:2a:17:c3:68:86:7a:11:17:0c:6f:af:82:09:c0:
0b:99:be:dc:61:7e:f0:e7:57:4f:da:df:19:40:f0:
1e:7a:cf:e5:99:d5:8c:5c:5f:f8:3c:bd:c6:41:77:
60:d9:c8:2c:b7:cd:f2:13:e7:93:d3:f6:a6:b1:27:
2f:42:3a:38:82:1e:b9:2c:a3:45:f2:56:1c:45:fb:
38:99:1b:9d:d7:0f:93:57:15:cd:3b:9d:3a:18:e3:
de:21:23:5e:de:5c:92:8f:a2:f8:52:a3:e0:9f:60:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7B:C4:52:AA:EE:7D:F0:7E:E4:EB:8C:54:2D:39:71:A3:B9:47:7C
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8fe13b5c-b14a-49d8-80fd-e4cc6822173c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:de:64:83:e6:5a:97:3e:c9:4f:1a:2b:c2:7a:48:6b:c0:78:
40:61:a6:90:c1:8f:80:65:24:a6:11:d7:05:4b:a2:22:16:45:
ae:f6:9d:4f:1a:12:48:31:26:cd:1c:e1:7e:5f:fe:3d:a0:67:
e1:af:2c:31:7a:94:90:2f:0c:32:27:28:99:23:65:1d:e6:0a:
15:85:da:55:da:32:58:44:8c:ee:ff:09:62:75:c2:be:cf:a7:
16:e1:ca:1f:b0:5d:f1:9d:c5:de:5e:d5:a5:2b:e1:34:ed:76:
aa:2b:a4:87:16:4f:7c:5b:8f:51:05:eb:07:06:44:6e:e1:b6:
1b:d1:c0:19:2a:93:cc:a2:2c:15:43:fb:be:bf:25:c5:d7:eb:
db:85:7d:09:e3:00:50:85:63:88:c2:a5:01:ff:e2:63:26:56:
78:ae:7f:48:ae:63:70:f5:98:63:eb:f0:48:1d:e4:05:e5:b9:
0b:a7:51:c6:2a:93:f5:65:f1:6c:08:31:2b:ea:fb:6e:0f:fb:
a1:84:10:59:e9:fc:5a:29:0b:11:81:b5:4a:4a:98:bc:ea:51:
52:65:9a:a6:04:54:f9:5b:4c:df:16:56:d9:f9:31:12:d5:23:
c0:de:63:de:91:92:42:0a:c8:1d:d1:a7:af:d1:ea:58:b3:9a:
22:a2:85:8b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ6rwXKQQESg27VkMNcfKHkQo7zMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI5MDAwMDAwWhcNMjQwMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NDc2ODBiNzJhYWI5ZTMxOWJmNmRmOWNlMGQwNWJlYTYy
MTVlZmU0ZDk3Yzg0MmEwZjIzNmM4OGM1MzQyOWVjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCOu8R0Zmy/ZKtBnhAY0XNv8p+f6ttQ7MWR9mKS2g7P7Zd1
9LzM/fMKlpHO8RngGfIM/OgsL1u1cypNVHBVgoJZ9xkFhWjF9vRUdXQiZIDmwNyF
AjC+oAQUNMf1ncU2AoSsCs2/T33xttWpwvtSq5eDNZ5vCYqLBgKidgydlYvSRyCx
0hUMSPvDTNHzSwIypzf/oA5IRD4qF8NohnoRFwxvr4IJwAuZvtxhfvDnV0/a3xlA
8B56z+WZ1YxcX/g8vcZBd2DZyCy3zfIT55PT9qaxJy9COjiCHrkso0XyVhxF+ziZ
G53XD5NXFc07nToY494hI17eXJKPovhSo+CfYEfbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY3vEUqruffB+5OuMVC05caO5R3wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzhmZTEzYjVjLWIxNGEtNDlkOC04MGZkLWU0Y2M2ODIyMTczYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKXeZIPmWpc+yU8aK8J6SGvAeEBh
ppDBj4BlJKYR1wVLoiIWRa72nU8aEkgxJs0c4X5f/j2gZ+GvLDF6lJAvDDInKJkj
ZR3mChWF2lXaMlhEjO7/CWJ1wr7Ppxbhyh+wXfGdxd5e1aUr4TTtdqorpIcWT3xb
j1EF6wcGRG7hthvRwBkqk8yiLBVD+76/JcXX69uFfQnjAFCFY4jCpQH/4mMmVniu
f0iuY3D1mGPr8Egd5AXluQunUcYqk/Vl8WwIMSvq+24P+6GEEFnp/FopCxGBtUpK
mLzqUVJlmqYEVPlbTN8WVtn5MRLVI8DeY96RkkIKyB3Rp6/R6lizmiKihYs=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:02 2023 by rpki-client on console.sobornost.net