Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/95b4f1f6-c208-4ab8-8681-a107efe1b0eb.roa
File: 95b4f1f6-c208-4ab8-8681-a107efe1b0eb.roa (raw, json)
Hash identifier: RrYj3SXowcUelb8nt2BL39fL7mCsgj/GOrFldagluuk=
Subject key identifier: F2:B4:1C:F1:F6:C8:DF:F6:37:2B:EC:74:E4:0E:87:2F:2D:6B:A6:5B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 53BEE43D17C8F9F35A33537D8494018FEB20C3C4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/95b4f1f6-c208-4ab8-8681-a107efe1b0eb.roa
Signing time: Tue 09 Apr 2024 00:00:00 +0000
ROA not before: Tue 09 Apr 2024 00:00:00 +0000
ROA not after: Tue 14 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 17:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:be:e4:3d:17:c8:f9:f3:5a:33:53:7d:84:94:01:8f:eb:20:c3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 9 00:00:00 2024 GMT
Not After : May 14 23:59:59 2024 GMT
Subject: serialNumber=2a50d0fbb70bdd1a2425e1c13ab3e9116f3ac77fda8eb10b69daf0bcf62aa8e7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:1c:d1:22:de:ea:01:71:4e:83:dd:fb:e3:
f8:b4:03:f1:91:a8:31:8f:c0:7f:c1:ba:22:2f:38:
be:75:c9:fe:4b:e0:33:da:67:78:3b:a1:27:41:36:
b5:d3:f8:44:6d:94:9c:0e:1e:36:0b:b3:c2:1c:f3:
54:1b:82:19:db:da:b8:b9:e0:11:61:19:f6:27:94:
2c:2e:5c:29:21:2c:d5:1e:02:9e:7d:b5:32:a2:22:
2c:1e:be:da:84:eb:a4:bb:21:f0:31:6b:22:85:31:
31:75:6c:12:42:3c:2b:6e:8c:67:69:f7:d6:01:7f:
bc:21:4f:73:df:fb:e4:a4:7f:71:4b:13:df:b9:b3:
d5:ed:1a:df:c6:e7:9c:5a:eb:74:89:68:42:22:b4:
d4:9e:5f:00:29:ec:cd:79:90:eb:64:27:65:5a:b4:
83:ae:ca:28:97:d8:2e:5d:37:c0:81:ee:d9:48:8b:
3a:96:ee:95:48:32:68:af:8f:e8:c9:90:b7:12:ad:
01:5e:2d:64:fa:c3:c2:61:44:c1:a9:e6:f3:98:5b:
f1:99:17:7e:dc:27:8e:d1:c3:0a:3d:61:69:81:bd:
8a:e7:7c:99:54:60:c0:d3:4b:9f:b9:ac:81:81:95:
62:cb:4b:06:4e:8f:9e:c8:6f:c8:0f:4e:06:8b:4e:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:1C:F1:F6:C8:DF:F6:37:2B:EC:74:E4:0E:87:2F:2D:6B:A6:5B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/95b4f1f6-c208-4ab8-8681-a107efe1b0eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6d:04:47:9a:c2:f1:fa:2a:2a:b2:30:68:9d:dc:4b:96:c4:
28:cf:3b:90:a4:a2:4b:7b:de:47:a7:f1:0e:f6:11:1b:75:15:
30:4a:d3:67:94:92:75:5c:dd:83:48:a4:eb:27:2d:37:3d:6d:
15:5f:5d:8c:36:8f:e1:0c:08:35:7b:ce:df:1a:bc:9b:5e:bb:
ce:1f:f3:df:56:fb:33:88:fd:e5:55:5e:cd:b6:b7:02:15:2e:
18:0d:a8:6b:b5:20:62:d8:25:f4:67:62:6b:0b:32:ef:1a:43:
c5:cb:b6:1c:8c:e8:1a:10:ae:c1:dd:14:62:c7:c4:52:64:14:
58:17:1f:8c:4e:1e:46:27:25:b3:db:c6:d3:5d:67:33:04:6a:
0a:1f:83:84:80:ed:24:1d:ab:18:da:a8:2b:56:10:18:25:3c:
49:63:4d:cd:3f:25:1a:b7:f0:fe:ae:46:bc:f8:f8:c7:0f:b5:
e3:c9:7f:4c:55:2e:65:f5:e0:50:4b:f4:47:05:71:31:5f:6b:
85:09:b4:43:b1:4a:8d:d1:02:b7:0c:80:ff:72:80:0f:41:cc:
5e:05:6b:03:01:b2:0d:56:2f:f7:b2:05:48:d5:a3:22:88:3c:
c6:3c:b4:cf:49:21:44:3a:84:c6:fc:41:a3:76:aa:e8:68:51:
37:3d:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 20:29:12 2024 by rpki-client on console.sobornost.net