Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91fe953c-9687-4ec4-be42-7de9f98af32f.roa
File: 91fe953c-9687-4ec4-be42-7de9f98af32f.roa (raw, json)
Hash identifier: W38a59CGdzbg5kbqLP3VmxNz88th1i2688yW/5kAraE=
Subject key identifier: 6F:6F:37:53:6C:60:B9:F7:EF:D2:5F:02:8F:F7:41:BB:B1:7C:7F:88
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2BD2F9087E6B308B87A7F819760E257842C77A41
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91fe953c-9687-4ec4-be42-7de9f98af32f.roa
Signing time: Fri 21 Jun 2024 00:00:00 +0000
ROA not before: Fri 21 Jun 2024 00:00:00 +0000
ROA not after: Fri 26 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 01:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d2:f9:08:7e:6b:30:8b:87:a7:f8:19:76:0e:25:78:42:c7:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 21 00:00:00 2024 GMT
Not After : Jul 26 23:59:59 2024 GMT
Subject: serialNumber=52e784e80e4cfbdb2a5334eca3feef49956fcd67bada5dbfe55cc1cb9f135130, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:37:9c:16:a0:16:4c:fb:69:0f:98:ef:23:
2e:73:85:24:06:b4:f9:2c:16:07:5f:da:e7:9f:77:
3f:b5:fd:ef:02:83:4e:63:dd:74:7c:25:1c:f6:3e:
95:75:8b:25:e4:38:c4:32:85:ce:14:c2:18:6c:0a:
a3:ad:a6:6a:71:a0:4f:09:4b:bb:62:7d:02:3d:c5:
49:c6:29:16:35:b0:21:22:b3:27:af:60:fd:e3:51:
7f:09:2d:77:44:c2:5d:b7:7b:ad:6c:d2:1a:36:27:
9e:71:b9:99:8d:af:dd:a9:9c:69:98:b7:e1:84:cf:
a7:15:cc:09:3f:3b:df:54:8a:f9:41:14:e9:84:82:
f1:db:24:a2:e7:48:2c:c1:43:5b:09:fc:3d:29:0c:
38:4a:bf:fd:0a:0a:40:4d:db:e2:90:57:35:e2:8c:
72:d7:fa:cc:38:84:a9:0e:a3:8e:bd:dc:71:44:88:
3a:3d:ce:f0:4e:98:b9:c4:fc:a3:31:da:a0:8e:40:
08:56:bf:1d:51:50:a6:61:f9:a2:89:f9:7f:eb:39:
3f:80:06:1a:1b:d8:2f:3d:14:44:a8:a5:25:d0:3f:
ab:4e:01:db:d3:27:d5:86:98:35:d4:54:55:38:f2:
d1:0a:4c:27:c1:b0:a6:73:5a:35:f9:20:25:ee:4b:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:37:53:6C:60:B9:F7:EF:D2:5F:02:8F:F7:41:BB:B1:7C:7F:88
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/91fe953c-9687-4ec4-be42-7de9f98af32f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bc:a4:0f:84:b6:23:f6:c8:89:90:89:71:de:d3:9f:aa:68:
bf:11:08:9a:ab:86:ed:9f:06:70:d5:69:78:28:ac:e8:ca:1c:
ee:aa:ca:98:88:b4:1e:43:43:3f:da:7e:b5:81:97:57:df:52:
05:75:e4:24:3f:77:1d:d1:33:8b:de:69:fd:3d:dc:20:01:ec:
9a:7a:d6:82:27:fd:27:0b:ac:46:57:21:ab:1e:8b:07:f1:e3:
d3:c1:93:3b:07:43:b9:54:6e:d2:5e:7b:a5:4e:64:4e:11:9b:
dd:28:ce:06:d4:68:a5:95:55:81:88:9b:4d:1a:ea:f9:bf:e0:
9e:dc:3b:0f:64:3a:b7:39:d0:f5:88:d8:6e:11:91:c5:81:f9:
e4:0b:9e:af:0a:66:1c:de:d6:aa:6b:2c:4c:6b:4c:15:e4:89:
a1:51:6b:30:b7:61:3d:6f:93:b5:1e:1f:dd:0e:f1:82:f2:a6:
c4:ec:8e:a8:e4:50:2d:f9:af:e1:ee:7d:03:63:5e:4c:47:92:
ad:6e:78:4d:8c:9b:41:4c:b3:d6:01:6a:b5:1d:45:05:75:11:
3a:0d:9a:39:41:29:2b:23:ec:b9:39:f4:de:e0:75:5f:e6:9f:
aa:4d:34:57:31:5d:40:5f:59:27:b2:e0:bc:64:84:3a:af:93:
7a:ca:03:ee
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK9L5CH5rMIuHp/gZdg4leELHekEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjIxMDAwMDAwWhcNMjQwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MmU3ODRlODBlNGNmYmRiMmE1MzM0ZWNhM2ZlZWY0OTk1
NmZjZDY3YmFkYTVkYmZlNTVjYzFjYjlmMTM1MTMwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTSjecFqAWTPtpD5jvIy5zhSQGtPksFgdf2uefdz+1/e8C
g05j3XR8JRz2PpV1iyXkOMQyhc4UwhhsCqOtpmpxoE8JS7tifQI9xUnGKRY1sCEi
syevYP3jUX8JLXdEwl23e61s0ho2J55xuZmNr92pnGmYt+GEz6cVzAk/O99UivlB
FOmEgvHbJKLnSCzBQ1sJ/D0pDDhKv/0KCkBN2+KQVzXijHLX+sw4hKkOo4693HFE
iDo9zvBOmLnE/KMx2qCOQAhWvx1RUKZh+aKJ+X/rOT+ABhob2C89FESopSXQP6tO
AdvTJ9WGmDXUVFU48tEKTCfBsKZzWjX5ICXuS8BdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUb283U2xguffv0l8Cj/dBu7F8f4gwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkxZmU5NTNjLTk2ODctNGVjNC1iZTQyLTdkZTlmOThhZjMyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADS8pA+EtiP2yImQiXHe05+qaL8R
CJqrhu2fBnDVaXgorOjKHO6qypiItB5DQz/afrWBl1ffUgV15CQ/dx3RM4veaf09
3CAB7Jp61oIn/ScLrEZXIaseiwfx49PBkzsHQ7lUbtJee6VOZE4Rm90ozgbUaKWV
VYGIm00a6vm/4J7cOw9kOrc50PWI2G4RkcWB+eQLnq8KZhze1qprLExrTBXkiaFR
azC3YT1vk7UeH90O8YLypsTsjqjkUC35r+HufQNjXkxHkq1ueE2Mm0FMs9YBarUd
RQV1EToNmjlBKSsj7Lk59N7gdV/mn6pNNFcxXUBfWSey4LxkhDqvk3rKA+4=
-----END CERTIFICATE-----
Generated at Fri Jun 21 08:43:16 2024 by rpki-client on console.sobornost.net