Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/996dc5ad-a19b-440d-8bcf-52eb87f2a6ca.roa
File: 996dc5ad-a19b-440d-8bcf-52eb87f2a6ca.roa (raw, json)
Hash identifier: Dp3J4PIP6mYMvVL5K7nxClGq1FAbwTklwPHHlHOcxYY=
Subject key identifier: 75:29:5F:63:2B:88:EF:65:96:7E:4F:FA:23:63:64:EA:91:E8:D7:DB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7ACC54DAB7C8EECCB62C45CEA5B8950F318D8A2D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/996dc5ad-a19b-440d-8bcf-52eb87f2a6ca.roa
Signing time: Fri 08 Dec 2023 00:00:00 +0000
ROA not before: Fri 08 Dec 2023 00:00:00 +0000
ROA not after: Fri 12 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:cc:54:da:b7:c8:ee:cc:b6:2c:45:ce:a5:b8:95:0f:31:8d:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 8 00:00:00 2023 GMT
Not After : Jan 12 23:59:59 2024 GMT
Subject: serialNumber=85ef9dd09d07e10b91fab7f756b8c5555d6bef51442f64fc0d1efc014df2f5c4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:74:63:d6:17:25:90:68:07:6f:d1:9c:ed:
52:8c:9a:bf:af:26:2a:ff:3f:10:49:75:08:cd:62:
cb:51:7a:b5:4b:05:26:07:08:70:ed:36:39:09:17:
d2:d6:13:31:97:10:e6:e2:21:1a:08:52:e7:74:e2:
87:64:22:5e:aa:58:cd:18:80:01:1e:05:70:3a:01:
5c:6c:53:24:af:b7:15:d7:d6:6a:af:10:11:6b:d1:
3f:8c:e8:97:e6:83:69:08:41:30:3a:ca:51:75:2f:
d4:fb:29:e3:2c:a0:36:5f:e0:f5:b5:41:fe:a7:8d:
8e:7c:ed:6d:b2:1b:4c:cd:8e:54:9f:72:55:fe:08:
b4:7a:e8:b4:7c:08:d3:f4:e5:09:3e:fe:7f:fc:ce:
2d:ab:73:47:a2:b5:28:be:e0:b0:6c:97:50:8f:e8:
8a:40:d6:84:9e:e6:73:05:81:70:93:96:c3:3f:45:
5f:14:89:c5:22:d7:5f:66:ea:f4:ec:46:5d:cc:13:
87:0b:c1:37:0b:88:ac:5a:38:6c:88:21:42:1d:0c:
f7:ab:8c:8f:04:b1:80:d7:9b:1f:3b:cd:a8:a9:47:
ad:6e:21:0b:6b:e1:cc:e5:84:15:80:83:c1:ae:b5:
60:95:41:db:0b:5c:a9:20:f2:1f:8b:ac:20:a9:e4:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:5F:63:2B:88:EF:65:96:7E:4F:FA:23:63:64:EA:91:E8:D7:DB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/996dc5ad-a19b-440d-8bcf-52eb87f2a6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:75:63:9e:09:e4:de:d7:ae:e9:c2:f8:81:06:d0:e9:66:65:
56:a3:40:e6:c1:1a:8e:76:f1:98:7c:84:07:3f:6e:be:c1:6a:
9a:c5:a4:48:23:2a:02:d1:fe:65:be:be:1a:8c:c1:2f:a5:d9:
f4:d1:0d:4d:93:09:d1:f8:a7:f0:b1:82:ab:49:aa:57:32:a2:
e4:e6:03:15:00:1d:3b:75:b5:3f:de:e7:30:52:3b:93:1d:a5:
65:df:01:30:84:40:59:8c:96:b4:58:5c:83:4c:31:2f:ab:a1:
2f:ca:41:78:0b:b7:1c:99:57:e2:3c:3f:cb:3e:13:8a:47:94:
d1:4f:00:8a:9a:90:0e:b8:f5:4b:01:29:cd:fb:1a:83:d0:17:
dc:5f:2b:92:56:c1:d1:52:c7:36:f1:4c:54:aa:be:0e:4b:ac:
93:a3:18:30:ab:8c:3b:d0:d1:76:fb:d4:a8:9e:37:61:82:f5:
3f:c5:bf:18:d1:22:51:8c:bc:41:6c:42:8d:79:12:d6:65:f9:
65:a9:55:51:2d:ca:08:4e:32:20:2c:a6:b4:c1:74:6f:2c:9a:
8e:1b:8f:24:b7:18:7a:bc:e0:c5:6d:9c:dc:4c:80:b3:17:7f:
8b:f0:2c:ce:b3:ff:14:80:82:8e:40:b5:8d:ca:d7:56:54:c9:
9d:bd:bc:69
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUesxU2rfI7sy2LEXOpbiVDzGNii0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjA4MDAwMDAwWhcNMjQwMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NWVmOWRkMDlkMDdlMTBiOTFmYWI3Zjc1NmI4YzU1NTVk
NmJlZjUxNDQyZjY0ZmMwZDFlZmMwMTRkZjJmNWM0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkL3Rj1hclkGgHb9Gc7VKMmr+vJir/PxBJdQjNYstRerVL
BSYHCHDtNjkJF9LWEzGXEObiIRoIUud04odkIl6qWM0YgAEeBXA6AVxsUySvtxXX
1mqvEBFr0T+M6Jfmg2kIQTA6ylF1L9T7KeMsoDZf4PW1Qf6njY587W2yG0zNjlSf
clX+CLR66LR8CNP05Qk+/n/8zi2rc0eitSi+4LBsl1CP6IpA1oSe5nMFgXCTlsM/
RV8UicUi119m6vTsRl3ME4cLwTcLiKxaOGyIIUIdDPerjI8EsYDXmx87zaipR61u
IQtr4czlhBWAg8GutWCVQdsLXKkg8h+LrCCp5MMVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdSlfYyuI72WWfk/6I2Nk6pHo19swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzk5NmRjNWFkLWExOWItNDQwZC04YmNmLTUyZWI4N2YyYTZjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAB91Y54J5N7XrunC+IEG0OlmZVaj
QObBGo528Zh8hAc/br7BaprFpEgjKgLR/mW+vhqMwS+l2fTRDU2TCdH4p/CxgqtJ
qlcyouTmAxUAHTt1tT/e5zBSO5MdpWXfATCEQFmMlrRYXINMMS+roS/KQXgLtxyZ
V+I8P8s+E4pHlNFPAIqakA649UsBKc37GoPQF9xfK5JWwdFSxzbxTFSqvg5LrJOj
GDCrjDvQ0Xb71KieN2GC9T/FvxjRIlGMvEFsQo15EtZl+WWpVVEtyghOMiAsprTB
dG8smo4bjyS3GHq84MVtnNxMgLMXf4vwLM6z/xSAgo5AtY3K11ZUyZ29vGk=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:04 2023 by rpki-client on console.sobornost.net