Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/931fc41b-ff7d-4260-ac09-2d0b70721962.roa
File: 931fc41b-ff7d-4260-ac09-2d0b70721962.roa (raw, json)
Hash identifier: 4RbXCX8fiHs9xX7HxEo0WAC7HhhxwGawYMNGb4ihzEo=
Subject key identifier: 45:F6:8F:E2:46:8E:36:02:6F:CA:90:62:1C:2C:92:18:3E:80:D0:77
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 4FFDB702EC3B6C83C098698D66CC63B6730EADC6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/931fc41b-ff7d-4260-ac09-2d0b70721962.roa
Signing time: Wed 22 Nov 2023 00:00:00 +0000
ROA not before: Wed 22 Nov 2023 00:00:00 +0000
ROA not after: Wed 27 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fd:b7:02:ec:3b:6c:83:c0:98:69:8d:66:cc:63:b6:73:0e:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 22 00:00:00 2023 GMT
Not After : Dec 27 23:59:59 2023 GMT
Subject: serialNumber=e3a69bb7b2e19fbaf5b78219fc3c7b82c67b2e6051adcae4e8b0f6cd1d8a12e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:b8:9c:a9:80:eb:db:4b:ee:6a:d4:5b:84:
41:c1:a4:9c:2b:e0:c7:6d:84:74:2c:71:ff:a0:ea:
2c:31:5d:b0:62:4f:02:c5:25:b3:8f:31:65:72:7c:
81:e3:de:c3:69:e8:bb:fa:8d:3b:31:1d:c6:16:60:
f1:67:d0:98:1a:3e:08:02:36:cb:d5:e4:9f:be:1c:
e1:31:89:e4:8b:86:06:f3:a1:1a:99:5d:d6:60:3c:
75:f2:00:ca:ef:a9:fd:44:43:d8:b1:a7:95:41:17:
8a:e5:56:74:a0:42:7a:37:63:67:04:b1:11:08:e2:
d6:e1:6a:90:b4:20:fb:49:3c:e7:46:d1:60:96:fd:
bc:6d:ce:a0:14:bd:87:1c:ed:51:8e:ec:67:24:1c:
45:9a:63:18:9a:04:df:d4:ca:4d:b5:4e:11:33:c2:
e3:52:7b:fd:e4:2a:09:d3:ce:eb:44:83:1f:f8:c8:
93:af:dc:4a:56:c7:8a:97:6c:76:43:7f:7e:48:24:
87:ed:ea:a5:45:18:e3:69:1e:2d:d0:e0:a0:0a:7d:
c0:8d:0d:d3:ca:9a:95:d8:b7:19:fd:b9:a7:0e:62:
b0:39:03:52:db:d0:81:d3:a9:c4:f1:38:21:81:b0:
97:2b:ef:84:11:23:9e:05:d6:ec:88:c2:e7:2a:8c:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:8F:E2:46:8E:36:02:6F:CA:90:62:1C:2C:92:18:3E:80:D0:77
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/931fc41b-ff7d-4260-ac09-2d0b70721962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:46:77:c8:b0:17:5a:8b:71:1b:c6:20:c8:ac:4b:7c:12:a0:
a8:32:b0:36:89:34:eb:01:ef:ea:2c:b2:29:08:97:73:2c:b5:
67:bd:a4:50:d8:af:9d:e1:98:bf:62:54:41:31:16:20:e4:bc:
6d:5b:9f:76:34:34:de:03:c7:de:ee:62:fa:13:e8:09:1b:17:
7a:c1:b3:a9:3a:ee:73:de:5f:34:f3:65:09:71:37:22:89:97:
fa:78:5b:c0:72:87:13:b5:a5:8d:c2:f9:64:79:27:22:65:03:
d8:0b:0e:1b:ec:b7:c9:a3:34:ae:ac:e7:dd:d1:19:6e:ad:fd:
12:ec:62:28:87:74:16:23:3f:9d:54:8c:45:62:4e:80:c1:d2:
0a:15:59:78:4a:48:77:da:2f:da:e7:a3:ec:b4:28:62:d5:42:
87:df:40:0f:10:e2:5f:96:8e:57:5e:8b:ac:f5:e8:95:da:9f:
7a:2a:04:bb:10:ed:70:bb:0f:f0:95:ba:d0:dd:b3:35:5b:da:
34:73:48:07:73:e8:29:9d:5c:e0:ba:85:4c:0a:73:6c:83:06:
8f:9a:1f:6b:23:2b:bd:d9:5e:60:e0:40:52:bd:ce:68:b7:03:
f6:34:0f:13:f9:80:f4:d4:66:46:99:58:d0:68:0c:bd:2e:de:
24:94:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:03 2023 by rpki-client on console.sobornost.net