Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98af8c49-e9d4-44f1-b3ca-f6be85f48e58.roa
File: 98af8c49-e9d4-44f1-b3ca-f6be85f48e58.roa (raw, json)
Hash identifier: JJGnMm6UUGqRQUrmJZVBjJnHxDNhbbGt0C7KZU8plts=
Subject key identifier: BE:77:61:8F:B7:AE:70:79:C0:A2:97:12:45:08:D8:86:64:0E:6D:7A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 58111EB2E02BFB68BF1A926F1995B75010E097B0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98af8c49-e9d4-44f1-b3ca-f6be85f48e58.roa
Signing time: Fri 01 Dec 2023 00:00:00 +0000
ROA not before: Fri 01 Dec 2023 00:00:00 +0000
ROA not after: Fri 05 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:11:1e:b2:e0:2b:fb:68:bf:1a:92:6f:19:95:b7:50:10:e0:97:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 1 00:00:00 2023 GMT
Not After : Jan 5 23:59:59 2024 GMT
Subject: serialNumber=479b3a00517603da9dca9637e14b3906bca1a21ac09e9cd9116ee74f7821bb9d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:e0:c8:5f:bb:25:ad:28:e5:79:86:68:64:
4d:41:44:b6:ac:59:18:68:f0:38:31:8d:6d:f8:24:
2f:81:8b:b3:4e:f0:6b:08:24:4a:4a:d0:ee:69:77:
23:e6:d4:ba:5f:54:43:6d:33:5e:66:0b:a4:d2:22:
13:6d:dc:fd:a9:8f:a3:2f:5e:f3:e0:ea:1c:3b:7e:
3f:b4:1d:fd:b4:b5:97:72:05:a1:af:22:94:88:2c:
0f:7e:30:52:0a:70:a6:de:ad:3e:2d:da:76:95:f2:
02:b8:57:00:df:68:b8:70:96:ca:8a:b0:e2:9f:43:
ac:7e:b1:b1:6c:2a:dc:07:f2:cd:7b:39:08:41:32:
7a:11:8e:d4:5a:57:32:b2:10:6d:ee:45:34:08:5e:
c6:e5:6a:22:a5:b7:7c:3f:06:d1:0b:76:d9:75:ba:
8d:33:a5:ac:a0:fc:15:39:41:be:b9:8c:70:3e:e8:
dc:ef:d7:38:3a:df:55:86:4e:41:33:dd:91:b1:53:
08:7b:8a:ea:68:9c:e1:c0:fb:b3:98:00:73:82:38:
b1:73:43:3b:54:8e:d4:df:88:2e:84:37:fb:d1:9a:
14:9b:ee:a5:dd:57:ad:8b:b8:b0:d4:6c:5c:10:9e:
bb:32:d0:d6:a5:c8:b5:4d:c0:91:1a:86:4b:16:cb:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:61:8F:B7:AE:70:79:C0:A2:97:12:45:08:D8:86:64:0E:6D:7A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/98af8c49-e9d4-44f1-b3ca-f6be85f48e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0a:57:9a:3e:5f:aa:f8:cc:44:e7:76:d2:31:17:62:ab:79:
ae:4f:f4:70:99:bb:3c:33:00:ac:d1:0f:d3:24:cc:a7:ec:c4:
99:71:df:e4:e8:71:b7:4f:e6:e9:40:39:6b:5d:90:e7:cd:4a:
18:6f:00:39:0e:d9:2f:ec:bc:6e:7d:47:1a:ff:c7:ed:71:5c:
0b:ad:7b:f1:1f:88:9d:1c:6e:51:1f:ce:5b:8f:1c:2b:94:e6:
17:a7:3a:0d:6a:c1:cf:7b:01:83:4f:a1:c4:12:92:ab:33:da:
f7:7e:31:cb:a4:f1:16:01:59:fa:cd:be:da:49:c2:cb:0c:2a:
83:6f:dc:82:76:18:bd:b9:0a:1d:65:29:35:d8:7e:75:ad:b0:
4c:03:d8:60:aa:96:14:67:1d:8f:00:d3:0f:36:57:cc:62:48:
1c:55:45:8f:23:2f:c0:2c:0d:2a:d5:fa:97:4c:4c:a7:18:b5:
7a:fe:52:a6:5a:0a:da:f5:af:76:2f:c4:a3:a5:a5:f4:58:09:
31:55:1b:cd:af:20:df:a5:a8:73:b9:1a:44:64:84:a3:d1:eb:
4a:50:25:71:e1:ae:38:0d:3d:4d:34:67:88:e8:56:7d:52:d8:
7a:71:0a:58:fe:d6:e1:70:4f:cc:b2:1c:af:8b:77:6f:93:f6:
5b:0c:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:04 2023 by rpki-client on console.sobornost.net