Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1ff6d59-c2b5-4a62-bc39-ec6aa760ead7.roa
File: a1ff6d59-c2b5-4a62-bc39-ec6aa760ead7.roa (raw, json)
Hash identifier: Jl0uwUwDXu5gt4ZPYVE5KqIkgiFklYocOZzdrOJOMjY=
Subject key identifier: E4:F9:F1:37:99:E5:3D:81:6E:B7:65:F8:D8:D4:16:E0:10:70:24:33
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 041C1AE3C1BEB85639DA8A42AB40E67E709C8392
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1ff6d59-c2b5-4a62-bc39-ec6aa760ead7.roa
Signing time: Thu 30 Nov 2023 00:00:00 +0000
ROA not before: Thu 30 Nov 2023 00:00:00 +0000
ROA not after: Thu 04 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1c:1a:e3:c1:be:b8:56:39:da:8a:42:ab:40:e6:7e:70:9c:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 30 00:00:00 2023 GMT
Not After : Jan 4 23:59:59 2024 GMT
Subject: serialNumber=bdf29903c534191079949ea166b1b1be753eb6a88977a1ae5f139706dfca6195, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:ea:1e:58:23:a2:cf:a8:c5:8d:57:bf:8c:
ca:f6:c0:a1:86:ac:63:07:7d:d7:62:8c:10:90:83:
4d:e3:47:a7:60:2d:ef:5a:49:2b:9b:8c:59:0f:44:
7b:ae:98:73:e7:ab:14:8c:07:38:94:be:d5:22:c9:
fd:ab:ed:71:b3:dc:3f:af:75:e2:8c:ae:31:7c:dc:
bd:62:69:a4:e1:36:1c:8d:50:fc:a4:6b:22:d3:7e:
a9:29:7a:bd:b8:11:06:78:9e:bc:81:27:ef:e8:26:
70:f2:9b:b0:f5:39:92:3d:56:71:34:5d:c3:7e:b4:
d8:7d:96:97:d7:20:8d:2b:fe:e8:58:5a:c6:14:0b:
ad:86:99:6a:ac:8e:bc:cd:ba:89:aa:50:56:2e:1d:
2b:84:1e:21:6a:6d:d3:7b:40:e6:53:12:cf:71:cd:
6c:0a:cb:9c:88:90:76:4d:0c:16:fb:ce:1f:46:f7:
ff:6b:fd:59:9a:88:88:0c:0d:09:df:f6:33:2a:5b:
13:fd:81:65:8d:5f:88:38:a4:80:47:42:1c:22:02:
c8:ed:8b:42:65:4f:00:96:da:d5:5b:e4:f7:9d:74:
a9:64:bc:7a:22:7a:06:fb:0e:ff:30:bb:d1:c0:1e:
79:9d:e0:16:09:ce:84:40:7f:57:7f:09:70:f0:f1:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:F1:37:99:E5:3D:81:6E:B7:65:F8:D8:D4:16:E0:10:70:24:33
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a1ff6d59-c2b5-4a62-bc39-ec6aa760ead7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0e:9c:08:93:81:36:af:0a:11:d7:3c:18:a3:8b:90:2e:8b:
22:85:7f:5b:9c:86:14:90:a5:bf:6c:3d:9c:33:b2:a3:89:38:
c3:a2:f0:14:5f:44:75:d2:be:97:fe:96:56:0b:a1:7a:c7:c5:
5b:9d:c5:b2:cd:0b:cd:03:00:1f:1c:a4:96:4d:0d:cf:c5:4b:
51:83:d5:7e:49:54:ce:cb:25:80:53:fa:cf:3d:81:33:72:fc:
7e:f7:9a:25:fc:14:44:f5:ea:0c:7f:79:fe:33:b9:b2:cc:e8:
12:5d:fe:ef:0e:c6:fd:0e:b8:50:b8:ee:0f:25:a7:1a:d9:f9:
2e:97:bb:ab:e9:fd:18:c8:ec:43:26:48:a2:f2:04:9c:f9:f2:
9e:dd:b9:b1:1e:eb:b2:79:bd:71:54:d4:e4:36:18:98:b6:04:
75:5e:5e:93:92:d4:6b:1a:cb:69:ca:a8:cf:eb:80:48:b5:53:
70:31:74:99:cb:b8:52:33:f3:dd:c5:15:cf:f4:a8:02:5e:64:
1f:97:7d:59:2f:55:c8:25:12:a0:ab:9f:52:50:8f:f1:6b:e5:
6e:cd:22:4e:5e:33:b4:4f:c5:d4:40:e4:2b:1c:82:dd:b1:c6:
db:0a:01:b9:18:f3:e9:c5:98:0c:5e:ac:ff:f4:80:94:56:16:
06:3c:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:07 2023 by rpki-client on console.sobornost.net