Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9581c1f0-06af-484e-b744-e0eedd338671.roa
File: 9581c1f0-06af-484e-b744-e0eedd338671.roa (raw, json)
Hash identifier: ukc39Yqba67jl7Ihf9XN2E/sgTa0dxzOqJWGYdw7tnU=
Subject key identifier: A2:30:45:D9:66:FD:9E:F7:30:7D:2B:D3:CE:3F:33:64:06:85:E1:53
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 097545B2BB2DE891EB3806E48D00B90C1AF13189
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9581c1f0-06af-484e-b744-e0eedd338671.roa
Signing time: Mon 18 Mar 2024 00:00:00 +0000
ROA not before: Mon 18 Mar 2024 00:00:00 +0000
ROA not after: Mon 22 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 02:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:75:45:b2:bb:2d:e8:91:eb:38:06:e4:8d:00:b9:0c:1a:f1:31:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 18 00:00:00 2024 GMT
Not After : Apr 22 23:59:59 2024 GMT
Subject: serialNumber=75748620615f1ff69ac735f21fbd7e63235852552b2d42e200dbf4177c33cd8c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:cf:e2:3a:3f:59:9a:13:92:b6:c4:69:be:
ba:32:c1:27:32:5f:f3:c8:45:a6:8b:7f:c6:1c:07:
be:f2:16:b5:91:23:af:23:48:d5:17:32:6c:f5:3d:
be:57:37:25:8a:0e:ef:5d:27:c9:9a:5e:81:29:b8:
bd:9c:96:17:5d:4a:9a:3a:02:b1:18:ad:e2:d7:53:
b6:9e:e6:45:98:22:2e:36:eb:42:14:48:4d:39:9f:
49:6b:d5:f3:60:d0:00:54:39:ad:7d:be:dc:56:1a:
65:04:52:2b:f7:24:9b:d8:03:e7:c7:63:29:8f:91:
4d:fc:b6:6d:f1:48:e0:a6:9c:ed:3d:4b:af:aa:87:
06:16:d6:9f:c7:1a:0b:b4:12:03:3a:f4:d5:98:fe:
35:ae:ad:86:00:4e:b9:77:b5:da:cf:ff:f0:a8:ea:
10:e2:25:6d:eb:48:bb:f7:73:91:48:fe:40:e0:4f:
88:39:27:61:4f:40:82:ab:8a:31:0e:06:99:03:b6:
cd:45:98:89:ee:2b:04:72:cd:79:f1:d1:29:6c:68:
6b:e7:da:47:bb:f7:da:80:5a:76:2d:00:4a:66:d9:
fd:54:f2:2f:21:a0:b1:1e:71:6a:ec:53:a6:2e:e0:
6d:3d:60:c8:18:be:2e:d1:08:4a:ee:f2:bb:77:90:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:30:45:D9:66:FD:9E:F7:30:7D:2B:D3:CE:3F:33:64:06:85:E1:53
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9581c1f0-06af-484e-b744-e0eedd338671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1b:6c:66:7c:05:1c:93:80:fe:e6:3b:81:49:a1:34:47:8c:
b1:2b:f2:d6:9f:ae:4a:3f:86:4f:56:50:63:ca:8d:06:ae:26:
65:88:9e:e7:8e:8e:0a:bb:cd:58:41:b7:ce:b0:ae:5f:47:2f:
10:cf:90:27:6b:b6:71:e2:c2:bf:80:21:4e:c2:58:1a:7f:b4:
b4:02:ba:36:48:3c:3d:77:c7:8c:f1:ea:6b:2f:83:19:30:29:
a6:2e:03:3a:5e:8c:2d:0a:e2:71:59:a0:f4:0a:fb:4d:4b:6f:
aa:48:21:2d:63:9c:82:0c:6a:a1:c9:01:c6:ec:04:30:31:20:
65:14:48:e8:7c:7a:d2:27:b8:8b:d0:7b:45:8e:81:eb:2a:7d:
16:11:63:9f:7d:8d:3c:f3:f9:66:34:98:83:d4:a8:fe:5b:ec:
3a:00:dd:9c:ce:b2:0f:b8:df:c5:d4:6f:f0:67:b3:9a:c8:e1:
0d:6d:75:bd:d7:1e:d8:31:27:b9:a7:8a:89:f7:50:9f:c6:a7:
8c:c0:72:8c:f9:3e:01:68:7c:67:6e:d1:9d:89:3d:aa:6a:ed:
ff:ec:53:09:ef:7d:47:98:96:26:e3:bd:e9:f3:3b:11:ee:d6:
dc:7c:3b:f4:15:86:83:6a:f6:bf:9b:cc:00:f4:9b:06:c2:80:
68:98:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 05:23:25 2024 by rpki-client on console.sobornost.net