Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d6841b8-a639-4b86-b149-63700805f9f8.roa
File: 9d6841b8-a639-4b86-b149-63700805f9f8.roa (raw, json)
Hash identifier: JIj518JkKUL+S6uS5An6bcyNGC+0pm2BEVkgpYFTY3o=
Subject key identifier: 7A:DD:AF:8B:13:EF:3D:2A:ED:42:52:80:B0:FE:E8:15:FF:16:4A:B9
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 70A89A3AF6DAB4BE7C1623FCAEAB639124D3DCD6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d6841b8-a639-4b86-b149-63700805f9f8.roa
Signing time: Mon 11 Dec 2023 00:00:00 +0000
ROA not before: Mon 11 Dec 2023 00:00:00 +0000
ROA not after: Mon 15 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a8:9a:3a:f6:da:b4:be:7c:16:23:fc:ae:ab:63:91:24:d3:dc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 11 00:00:00 2023 GMT
Not After : Jan 15 23:59:59 2024 GMT
Subject: serialNumber=f9c829dec783928b4922c82087f8e0963a0b820ec16e982566417ecfd93224a4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:74:c5:b7:8b:0b:16:43:ea:72:14:81:15:
f5:87:ac:df:d0:62:0c:f3:1f:49:01:30:32:8e:40:
46:8c:41:84:23:45:e0:7f:8d:f5:d1:ae:fa:65:04:
bf:f9:ee:f9:81:96:6e:fe:17:73:5e:9b:2b:a9:9a:
d9:4b:ef:ac:eb:43:76:14:77:f7:c9:a7:be:6e:67:
b2:c6:3a:52:35:c6:a9:fe:0f:79:4d:5e:f2:51:f4:
a1:0a:5b:56:db:dd:c2:49:be:a3:af:cf:e5:33:6b:
1b:1c:5b:10:b4:46:bc:78:42:b7:35:15:6e:63:23:
df:da:08:20:ee:0c:44:07:b2:2b:2a:91:4b:d8:60:
9c:11:b1:46:8a:2f:a0:55:3d:b7:c6:2f:d8:cb:2a:
93:53:74:b5:5c:44:11:ee:eb:c6:93:6e:b1:85:c3:
a6:f1:ec:cf:f7:a9:59:3e:44:6e:07:5d:db:10:1a:
a8:9a:ec:60:60:58:08:b2:e4:e5:70:2e:e1:72:54:
7d:90:59:17:5e:66:94:e3:41:31:3e:63:d0:b6:a3:
0d:e9:30:e6:85:72:ef:b9:07:9f:35:46:d9:63:bb:
cf:a0:e0:fb:99:9e:58:78:d2:9d:c6:7c:c6:04:cc:
1f:ce:1e:09:bf:16:0f:5b:87:76:b3:a7:50:82:0c:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:AF:8B:13:EF:3D:2A:ED:42:52:80:B0:FE:E8:15:FF:16:4A:B9
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d6841b8-a639-4b86-b149-63700805f9f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ed:c1:46:96:c2:3e:35:b5:9b:1d:1a:1a:9d:1a:25:5d:7e:
2c:c9:89:eb:2e:b6:33:91:6a:29:68:d3:d4:05:c4:4a:4c:2e:
2b:ad:41:5b:08:cf:5d:5b:a7:45:57:72:38:31:eb:b0:17:bc:
af:b4:f9:0c:43:3f:0e:bf:fb:a9:cf:cb:b3:71:31:92:8f:24:
69:b3:6d:03:66:08:26:8d:2b:80:74:52:6d:b7:ae:63:5d:ca:
b2:97:36:88:27:e5:73:37:d5:60:d7:e8:ca:43:54:67:b2:dc:
88:96:b0:94:eb:e5:74:69:95:aa:7e:05:d9:4c:2d:45:e5:66:
4a:17:27:e0:1c:93:58:d4:2c:e9:95:64:fd:80:14:7c:01:64:
c8:e6:1b:06:e2:8e:ee:dd:be:54:87:ef:ea:fd:e1:ce:17:7b:
ae:72:d4:4a:a0:e4:12:9f:92:6a:ce:eb:de:29:1d:c6:b1:a9:
94:48:23:2a:cd:55:f2:c9:8b:f5:a5:6f:58:90:dc:48:a8:9f:
de:26:3d:ac:03:88:9e:96:69:71:47:ed:8c:3a:de:03:90:88:
c4:4e:17:c4:48:08:da:53:47:f4:4e:f6:1e:fe:60:af:b3:13:
25:7b:f6:c6:2b:8b:a2:04:d8:7d:4a:03:47:cd:bb:70:d9:42:
1b:be:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:05 2023 by rpki-client on console.sobornost.net