Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0965f7d-0c01-4bf9-944e-a807ca2deb2a.roa
File: a0965f7d-0c01-4bf9-944e-a807ca2deb2a.roa (raw, json)
Hash identifier: DPx0kk2avKMI2bxjcBEWztWSnFmExqdohsd1zJTq96w=
Subject key identifier: F7:A2:A2:9F:CC:09:AB:91:D0:D6:3C:46:BF:B2:C6:21:D1:75:C8:E1
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 780E4C6F7F8ED7460C13EB1C371D8D9FCD8DEF8E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0965f7d-0c01-4bf9-944e-a807ca2deb2a.roa
Signing time: Thu 21 Mar 2024 00:00:00 +0000
ROA not before: Thu 21 Mar 2024 00:00:00 +0000
ROA not after: Thu 25 Apr 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 22:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0e:4c:6f:7f:8e:d7:46:0c:13:eb:1c:37:1d:8d:9f:cd:8d:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 21 00:00:00 2024 GMT
Not After : Apr 25 23:59:59 2024 GMT
Subject: serialNumber=dfdcde81f709c6e747ce59596ba9b9a951df72c232bec59f61a6d25a8610894b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:9b:9b:e0:0c:f1:c5:d5:c6:07:f0:03:e3:
d1:dd:d2:6b:10:20:05:57:8d:cd:f8:cd:2d:0b:17:
84:c1:e2:40:1c:0a:2e:6c:b4:cc:ce:f2:1e:2e:19:
92:5b:ac:b4:fb:41:34:82:87:14:f8:fa:8b:f4:4d:
c5:9b:6d:de:a5:ae:49:b5:5e:d4:cc:be:28:bd:dc:
6a:9d:e8:d8:c9:cf:76:37:be:ca:98:b0:c2:38:d2:
81:1e:48:cb:f6:34:2a:7c:df:e6:ed:ee:fe:da:5c:
d4:ff:67:1b:d1:d0:bc:0f:34:3a:d1:bb:b5:de:90:
1e:bc:b6:c2:23:8a:fb:eb:6c:99:e2:7e:49:9d:34:
11:38:ad:de:2f:b2:37:6f:d9:cb:81:21:65:1d:0c:
c3:ca:d2:b2:44:3f:35:b3:16:0a:cd:95:14:31:f5:
72:e1:06:fc:5e:00:a9:35:cb:34:68:80:a9:4f:73:
fd:e4:8c:08:fe:39:bc:d1:55:58:e6:1c:0d:27:b1:
bd:44:30:6a:c7:fd:59:98:09:d1:86:d3:e1:47:6a:
5c:bb:41:bd:e3:cc:02:35:95:2a:19:21:d6:73:6f:
46:ad:24:eb:44:f0:56:f2:07:ec:08:a8:30:7a:c5:
6f:71:6d:5a:d4:63:5b:2f:2c:3b:ff:64:43:0d:da:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:A2:9F:CC:09:AB:91:D0:D6:3C:46:BF:B2:C6:21:D1:75:C8:E1
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a0965f7d-0c01-4bf9-944e-a807ca2deb2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8e:36:47:b1:7f:10:40:c7:70:89:b2:c5:14:7c:6e:4e:bb:
71:44:3a:83:64:83:a5:30:9d:29:cb:33:bc:f6:4d:4c:74:30:
ad:e8:57:69:3b:df:2d:cf:a2:1e:27:4b:43:96:45:9d:91:cb:
c0:b0:51:ca:b2:ce:49:4f:d2:a8:5f:a7:0a:5d:84:3e:4a:fe:
64:6d:a7:78:10:2f:dc:8c:b2:ec:d6:04:e9:b2:76:4c:dc:e7:
ff:76:35:b3:a0:ba:7b:e8:0b:9a:c8:a9:22:a2:b2:d6:bd:d3:
9f:2c:61:1e:74:25:d3:23:a5:df:5f:30:42:24:56:d5:3a:bb:
e5:f8:0b:94:79:b9:4a:c9:8d:7d:94:e0:44:7c:8c:1c:a7:6b:
76:98:ff:1e:71:2f:0b:f8:4d:16:e5:b2:e5:0b:e4:d2:1c:fe:
6f:2a:1c:a5:3f:55:74:58:88:69:28:dc:03:7b:3d:fd:3d:14:
dd:4d:c9:96:a9:1f:dd:f3:e8:3c:d4:96:36:84:2e:3a:1f:ca:
a0:f8:f5:32:78:0c:3e:39:5c:1b:61:5b:78:a3:cb:91:47:2a:
67:96:86:77:0a:bc:a8:a5:16:cd:10:d9:d7:38:35:dd:39:a7:
8d:d7:2f:9f:1f:e5:e8:2c:93:e4:f8:4b:b6:63:79:82:f5:56:
32:fb:f5:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeA5Mb3+O10YME+scNx2Nn82N744wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzIxMDAwMDAwWhcNMjQwNDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZmRjZGU4MWY3MDljNmU3NDdjZTU5NTk2YmE5YjlhOTUx
ZGY3MmMyMzJiZWM1OWY2MWE2ZDI1YTg2MTA4OTRiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCeQpub4AzxxdXGB/AD49Hd0msQIAVXjc34zS0LF4TB4kAc
Ci5stMzO8h4uGZJbrLT7QTSChxT4+ov0TcWbbd6lrkm1XtTMvii93Gqd6NjJz3Y3
vsqYsMI40oEeSMv2NCp83+bt7v7aXNT/ZxvR0LwPNDrRu7XekB68tsIjivvrbJni
fkmdNBE4rd4vsjdv2cuBIWUdDMPK0rJEPzWzFgrNlRQx9XLhBvxeAKk1yzRogKlP
c/3kjAj+ObzRVVjmHA0nsb1EMGrH/VmYCdGG0+FHaly7Qb3jzAI1lSoZIdZzb0at
JOtE8FbyB+wIqDB6xW9xbVrUY1svLDv/ZEMN2q6pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU96Kin8wJq5HQ1jxGv7LGIdF1yOEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2EwOTY1ZjdkLTBjMDEtNGJmOS05NDRlLWE4MDdjYTJkZWIyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIGONkexfxBAx3CJssUUfG5Ou3FE
OoNkg6UwnSnLM7z2TUx0MK3oV2k73y3Poh4nS0OWRZ2Ry8CwUcqyzklP0qhfpwpd
hD5K/mRtp3gQL9yMsuzWBOmydkzc5/92NbOgunvoC5rIqSKista9058sYR50JdMj
pd9fMEIkVtU6u+X4C5R5uUrJjX2U4ER8jByna3aY/x5xLwv4TRblsuUL5NIc/m8q
HKU/VXRYiGko3AN7Pf09FN1NyZapH93z6DzUljaELjofyqD49TJ4DD45XBthW3ij
y5FHKmeWhncKvKilFs0Q2dc4Nd05p43XL58f5egsk+T4S7ZjeYL1VjL79a4=
-----END CERTIFICATE-----
Generated at Fri Mar 22 03:26:59 2024 by rpki-client on console.sobornost.net