Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91a1084c-bba2-47f4-8a10-2915f3b5e681.roa
File: 91a1084c-bba2-47f4-8a10-2915f3b5e681.roa (raw, json)
Hash identifier: vdDM8biiW1T/A8UAuX2Ashmpw7o1y0LkPIaAaUHJ9X8=
Subject key identifier: 41:1E:B5:0E:85:62:AF:87:3B:7D:A7:3C:A0:49:22:2B:94:E1:D9:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 093E8B463E6E6D23E2386455751A4E5716AFE40F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91a1084c-bba2-47f4-8a10-2915f3b5e681.roa
Signing time: Sat 27 Apr 2024 00:00:00 +0000
ROA not before: Sat 27 Apr 2024 00:00:00 +0000
ROA not after: Sat 01 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 17:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3e:8b:46:3e:6e:6d:23:e2:38:64:55:75:1a:4e:57:16:af:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 27 00:00:00 2024 GMT
Not After : Jun 1 23:59:59 2024 GMT
Subject: serialNumber=df03ea4d9051b4f880e4ad73bd35c88cbb2052b373066028db42ccea06d9eb62, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:48:93:05:26:04:12:13:78:83:f7:f2:f4:
27:21:f7:98:3f:14:ce:cb:da:88:fb:b0:f1:52:20:
48:e5:8b:1c:c1:27:c1:0b:df:f4:5f:c6:3b:25:62:
80:d8:b7:3f:31:a5:15:41:ea:b4:ee:eb:e7:90:6a:
41:0c:4d:9f:00:bb:8e:66:97:b8:9b:83:70:76:b4:
1b:05:53:fb:57:87:43:81:ae:f5:61:22:55:a3:ee:
c7:b7:21:86:aa:3e:af:95:77:dc:4e:fa:76:0e:1c:
26:b8:14:54:b8:dd:ea:2c:f3:a2:3c:2e:55:e4:2b:
41:8c:cc:fb:24:d5:1a:c9:30:81:e5:49:bf:72:47:
b8:3d:8c:de:77:61:c7:04:f8:5e:d5:45:92:ee:78:
39:67:d7:6b:1a:6a:d9:5a:2d:d5:9d:0b:19:01:71:
da:25:27:92:35:95:52:71:fa:5e:3b:32:19:6e:ff:
f0:46:01:9e:ac:e0:57:8e:62:ba:5f:79:e2:31:25:
35:5d:21:4d:89:17:b6:99:35:7e:2e:77:e9:2a:6a:
2a:6f:c5:f1:fb:9e:0d:a1:e8:84:b8:db:f5:38:41:
cf:c5:75:3a:c0:cf:5f:4a:22:a0:cf:e6:9c:41:c4:
d4:8d:93:84:d7:d7:58:d5:b4:e1:f3:a3:ef:7b:58:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:B5:0E:85:62:AF:87:3B:7D:A7:3C:A0:49:22:2B:94:E1:D9:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91a1084c-bba2-47f4-8a10-2915f3b5e681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:27:5f:03:89:8e:f6:e1:ff:08:23:f1:fe:4c:25:cb:9d:5d:
39:a2:8a:05:31:75:02:f7:be:d9:05:8b:a9:7e:9a:9c:9a:c6:
92:2e:fb:30:01:01:2f:e7:ca:37:f7:bf:1c:b4:27:b0:bf:41:
e3:ec:93:91:4b:c8:aa:0e:d6:24:3a:01:77:d5:ba:3a:85:5d:
2f:4a:08:0e:70:01:50:c0:64:f3:30:1a:78:6a:a0:8a:a6:84:
59:34:59:b8:45:26:c9:9e:cf:c4:a2:3c:45:3f:2a:93:cf:d7:
43:f0:61:be:1f:71:af:82:b5:99:f2:c4:f6:a1:fd:e6:a4:22:
26:13:14:39:51:c0:77:31:73:89:cc:69:cf:50:e8:16:30:21:
27:71:49:08:d4:9a:fb:22:cc:c1:ac:d8:a9:33:a6:05:3e:ac:
9b:b8:1a:1a:a6:91:5e:44:cc:4c:36:d2:b8:7c:c4:fe:8e:3e:
2e:91:22:e1:48:99:75:4d:d2:2e:4b:c5:c7:45:93:ca:25:c6:
92:17:b7:2e:b5:9c:ee:cd:95:aa:48:9a:40:46:77:49:b0:84:
75:56:b1:71:39:42:8d:1c:16:a5:3f:67:f6:e1:70:6d:da:b3:
b8:e5:b7:e3:41:f7:92:38:23:d2:9a:56:85:6a:41:56:81:08:
24:9b:f0:49
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCT6LRj5ubSPiOGRVdRpOVxav5A8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNDI3MDAwMDAwWhcNMjQwNjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZjAzZWE0ZDkwNTFiNGY4ODBlNGFkNzNiZDM1Yzg4Y2Ji
MjA1MmIzNzMwNjYwMjhkYjQyY2NlYTA2ZDllYjYyMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClIEiTBSYEEhN4g/fy9Cch95g/FM7L2oj7sPFSIEjlixzB
J8EL3/RfxjslYoDYtz8xpRVB6rTu6+eQakEMTZ8Au45ml7ibg3B2tBsFU/tXh0OB
rvVhIlWj7se3IYaqPq+Vd9xO+nYOHCa4FFS43eos86I8LlXkK0GMzPsk1RrJMIHl
Sb9yR7g9jN53YccE+F7VRZLueDln12saatlaLdWdCxkBcdolJ5I1lVJx+l47Mhlu
//BGAZ6s4FeOYrpfeeIxJTVdIU2JF7aZNX4ud+kqaipvxfH7ng2h6IS42/U4Qc/F
dTrAz19KIqDP5pxBxNSNk4TX11jVtOHzo+97WFibAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQR61DoVir4c7fac8oEkiK5Th2eEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkxYTEwODRjLWJiYTItNDdmNC04YTEwLTI5MTVmM2I1ZTY4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHMnXwOJjvbh/wgj8f5MJcudXTmi
igUxdQL3vtkFi6l+mpyaxpIu+zABAS/nyjf3vxy0J7C/QePsk5FLyKoO1iQ6AXfV
ujqFXS9KCA5wAVDAZPMwGnhqoIqmhFk0WbhFJsmez8SiPEU/KpPP10PwYb4fca+C
tZnyxPah/eakIiYTFDlRwHcxc4nMac9Q6BYwISdxSQjUmvsizMGs2KkzpgU+rJu4
GhqmkV5EzEw20rh8xP6OPi6RIuFImXVN0i5LxcdFk8olxpIXty61nO7NlapImkBG
d0mwhHVWsXE5Qo0cFqU/Z/bhcG3as7jlt+NB95I4I9KaVoVqQVaBCCSb8Ek=
-----END CERTIFICATE-----
Generated at Sat Apr 27 20:46:50 2024 by rpki-client on console.sobornost.net