Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d7cd6fd-99a0-4945-9a2c-ca00c5f0b079.roa
File: 9d7cd6fd-99a0-4945-9a2c-ca00c5f0b079.roa (raw, json)
Hash identifier: 7hEuKN3GSsJQTT4anheADHjusu8EcSsPgjzxKkszw5c=
Subject key identifier: B1:06:C3:F7:D1:3C:06:98:6D:BC:40:46:47:A4:19:56:8D:87:A2:7B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 3AE04C9C45E4867D53C19778F68815C60B9B3223
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d7cd6fd-99a0-4945-9a2c-ca00c5f0b079.roa
Signing time: Mon 04 Mar 2024 00:00:00 +0000
ROA not before: Mon 04 Mar 2024 00:00:00 +0000
ROA not after: Mon 08 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e0:4c:9c:45:e4:86:7d:53:c1:97:78:f6:88:15:c6:0b:9b:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 4 00:00:00 2024 GMT
Not After : Apr 8 23:59:59 2024 GMT
Subject: serialNumber=dbd5a0e2678eeadd3dff9d9585f3b9c816bb7fd2c7c82ab046e4a2ce586886b6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:93:ce:5a:db:68:3b:1c:3a:89:54:a5:19:
49:49:91:51:a1:14:88:88:60:55:32:06:6a:83:80:
9a:54:52:cb:15:76:c6:ef:cd:dd:0f:84:a8:0c:fb:
da:1c:95:7a:8b:14:02:c9:ec:f3:52:d0:48:df:ec:
a9:c1:59:ce:75:81:c1:5d:b6:09:d5:3b:4c:4b:2e:
4c:7d:d6:90:36:8b:d2:7c:1d:e6:1c:90:24:f7:e4:
65:91:9d:ba:01:0b:2f:0d:f5:d6:89:2e:3c:d4:06:
e2:ca:dd:2c:ba:e4:86:6d:18:01:95:be:ec:aa:e4:
bc:71:09:17:5a:d6:42:2b:0d:92:03:bd:6d:c4:1f:
5f:02:8b:3b:fe:7e:8f:cb:d9:89:d4:e9:ce:5c:5c:
7a:ec:5b:e2:28:d6:fd:88:99:19:13:da:36:15:06:
81:fe:24:c6:f5:bc:2b:eb:33:19:b7:25:43:a2:b8:
c1:df:a0:94:15:a0:30:c4:77:cf:1e:6f:ed:a9:6a:
5d:60:26:1e:15:96:cd:24:57:03:7e:85:bc:50:30:
24:7c:0d:ff:64:8c:c3:ca:42:29:77:f1:df:7f:ab:
df:fe:7d:40:28:f0:bf:05:3a:76:7c:36:7a:ff:33:
ec:b1:c6:ee:39:66:0d:ae:4b:02:8d:b0:38:e5:c1:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:C3:F7:D1:3C:06:98:6D:BC:40:46:47:A4:19:56:8D:87:A2:7B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9d7cd6fd-99a0-4945-9a2c-ca00c5f0b079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b9:bf:75:f4:cb:68:81:ef:36:48:64:a8:8a:f4:0b:c8:52:
69:2a:57:86:70:ad:79:9e:37:47:76:bb:08:82:07:1a:fe:6b:
f1:96:af:9c:ad:a9:90:b2:78:2d:8c:91:43:b1:7e:c4:35:cd:
b7:c0:b5:8e:d1:82:27:4f:ba:2d:63:61:f0:7e:b6:17:db:d4:
60:4e:3b:24:1f:c0:dc:5d:73:47:51:e5:e3:ad:1a:18:6d:1e:
13:f3:04:f6:bb:4b:07:cc:5e:44:8d:26:9b:ab:19:46:03:72:
fc:5a:eb:e9:bb:2a:e2:93:1f:8f:72:a6:ff:35:9f:42:a6:1b:
d8:fe:52:ff:25:30:44:72:e2:9c:ed:a0:47:48:fd:7d:63:c3:
21:62:cd:96:ef:e1:d2:89:1c:f4:e3:b3:6d:3b:49:62:d4:d4:
4b:60:67:8b:00:4f:72:82:40:67:2b:2f:65:eb:a5:5f:d3:c3:
8c:63:c6:8d:5f:5d:7d:6e:ca:54:68:6b:b6:92:5d:9e:5c:17:
6e:a7:9f:12:03:47:46:e9:00:87:9e:f4:e6:5c:65:b2:cd:31:
3b:7b:d0:39:29:15:8d:f4:86:d9:40:e8:11:d6:23:d7:3b:53:
5b:29:ab:b5:c0:7f:5a:43:39:d7:f6:4c:71:16:44:3a:0c:1d:
b6:a6:3e:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOuBMnEXkhn1TwZd49ogVxgubMiMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzA0MDAwMDAwWhcNMjQwNDA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYmQ1YTBlMjY3OGVlYWRkM2RmZjlkOTU4NWYzYjljODE2
YmI3ZmQyYzdjODJhYjA0NmU0YTJjZTU4Njg4NmI2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6+ZPOWttoOxw6iVSlGUlJkVGhFIiIYFUyBmqDgJpUUssV
dsbvzd0PhKgM+9oclXqLFALJ7PNS0Ejf7KnBWc51gcFdtgnVO0xLLkx91pA2i9J8
HeYckCT35GWRnboBCy8N9daJLjzUBuLK3Sy65IZtGAGVvuyq5LxxCRda1kIrDZID
vW3EH18Cizv+fo/L2YnU6c5cXHrsW+Io1v2ImRkT2jYVBoH+JMb1vCvrMxm3JUOi
uMHfoJQVoDDEd88eb+2pal1gJh4Vls0kVwN+hbxQMCR8Df9kjMPKQil38d9/q9/+
fUAo8L8FOnZ8Nnr/M+yxxu45Zg2uSwKNsDjlwWZhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsQbD99E8BphtvEBGR6QZVo2HonswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzlkN2NkNmZkLTk5YTAtNDk0NS05YTJjLWNhMDBjNWYwYjA3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHi5v3X0y2iB7zZIZKiK9AvIUmkq
V4ZwrXmeN0d2uwiCBxr+a/GWr5ytqZCyeC2MkUOxfsQ1zbfAtY7RgidPui1jYfB+
thfb1GBOOyQfwNxdc0dR5eOtGhhtHhPzBPa7SwfMXkSNJpurGUYDcvxa6+m7KuKT
H49ypv81n0KmG9j+Uv8lMERy4pztoEdI/X1jwyFizZbv4dKJHPTjs207SWLU1Etg
Z4sAT3KCQGcrL2XrpV/Tw4xjxo1fXX1uylRoa7aSXZ5cF26nnxIDR0bpAIee9OZc
ZbLNMTt70DkpFY30htlA6BHWI9c7U1spq7XAf1pDOdf2THEWRDoMHbamPmM=
-----END CERTIFICATE-----
Generated at Mon Mar 4 21:56:33 2024 by rpki-client on console.sobornost.net