Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab09bd06-ffdf-40a1-aeea-4bf2789755df.roa
File: ab09bd06-ffdf-40a1-aeea-4bf2789755df.roa (raw, json)
Hash identifier: fyBE6+7KfDzJaIxYWAzLDw8bVQiV+MXuzy/JNmy8jKU=
Subject key identifier: 6B:0E:AB:20:CC:78:86:DA:96:5D:A2:EE:03:38:CE:A3:9C:07:01:95
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7B997352F9671A3EFEA0678FB7F28EBC635448F6
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab09bd06-ffdf-40a1-aeea-4bf2789755df.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:99:73:52:f9:67:1a:3e:fe:a0:67:8f:b7:f2:8e:bc:63:54:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: serialNumber=3c7220489b9c8a1a015dc64cb06e87e68d4af63b6cac29c74001de6d6a744534, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:48:d3:89:86:fc:6d:8e:af:7c:a6:5a:c2:
38:a9:6e:db:30:7b:a7:9d:96:19:25:29:8a:84:8b:
e6:62:71:a0:13:8b:59:26:48:e1:bc:ae:4d:3f:c7:
af:cb:80:ef:70:53:85:74:2c:27:25:4b:4b:28:73:
4f:15:d2:f8:28:fa:69:a7:79:15:f1:52:21:55:85:
7a:10:47:52:5b:c0:5b:e4:7e:de:68:e8:b6:bf:f7:
a9:55:be:8e:40:5c:83:9f:3b:b3:2c:20:75:3a:5f:
01:67:b4:fb:67:4a:a8:87:f3:82:1c:ee:39:25:40:
42:49:e6:3b:72:ff:2e:19:42:94:ed:ba:5c:1d:f6:
74:69:87:3c:c0:f1:11:68:15:49:be:fb:7b:bd:c1:
47:df:e3:3a:eb:ea:7d:29:39:54:02:1f:f9:65:ce:
93:ac:28:7d:48:27:dc:9b:a5:91:15:76:26:f8:02:
fd:25:fe:37:15:78:3f:f6:6b:17:25:af:f6:3d:74:
14:68:27:fa:0e:52:a9:81:9b:33:2e:0d:73:78:2d:
0c:32:29:a8:59:44:01:6b:b8:e3:03:f4:ad:59:e7:
ab:2f:c0:e4:9c:1e:26:7d:cf:91:d4:65:05:c2:28:
54:83:56:c2:97:46:cc:a7:a5:e2:63:2d:0a:fe:74:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0E:AB:20:CC:78:86:DA:96:5D:A2:EE:03:38:CE:A3:9C:07:01:95
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab09bd06-ffdf-40a1-aeea-4bf2789755df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b1:0d:a5:ef:dc:6e:32:c8:e6:c2:6c:c1:8a:9d:62:fd:6f:
ed:4e:83:54:fb:c9:d7:87:e8:8d:9b:c5:27:18:a6:b9:0a:6e:
43:ed:59:e5:c6:42:d2:1b:3f:5c:98:24:f8:af:99:c5:05:7b:
06:35:75:a3:98:be:57:e4:b6:ab:c7:dc:89:23:09:0a:7d:f3:
58:6e:80:08:4a:90:01:d6:ea:6d:74:49:81:1d:f4:17:2e:b2:
dc:36:47:eb:13:de:85:83:98:0f:a1:0a:d5:76:f4:bb:42:fc:
de:06:16:71:75:28:98:0b:53:1d:54:03:b1:bf:46:62:5b:b8:
26:29:e6:b9:98:39:71:b8:90:76:39:c3:f1:af:08:6b:ca:c1:
ce:aa:73:b1:a9:c7:51:88:5b:41:32:d0:4b:11:23:28:63:4f:
3c:8d:2c:5a:c3:e6:dc:54:0c:13:43:d2:57:3d:cb:7d:d0:53:
01:f2:35:d1:5c:c1:68:75:aa:c8:e1:04:87:12:4e:c8:b3:2b:
2e:5d:c4:ff:3f:e6:5a:7e:7b:71:71:4c:bb:31:47:0c:28:a2:
af:d6:79:46:44:1f:a4:ac:98:66:eb:a8:c3:16:40:8c:af:7f:
b0:c9:11:30:63:64:e0:60:28:f0:cb:92:87:2e:43:64:94:03:
64:4f:f7:b5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe5lzUvlnGj7+oGePt/KOvGNUSPYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI5MDAwMDAwWhcNMjQwMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzcyMjA0ODliOWM4YTFhMDE1ZGM2NGNiMDZlODdlNjhk
NGFmNjNiNmNhYzI5Yzc0MDAxZGU2ZDZhNzQ0NTM0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuN0jTiYb8bY6vfKZawjipbtswe6edlhklKYqEi+ZicaAT
i1kmSOG8rk0/x6/LgO9wU4V0LCclS0soc08V0vgo+mmneRXxUiFVhXoQR1JbwFvk
ft5o6La/96lVvo5AXIOfO7MsIHU6XwFntPtnSqiH84Ic7jklQEJJ5jty/y4ZQpTt
ulwd9nRphzzA8RFoFUm++3u9wUff4zrr6n0pOVQCH/llzpOsKH1IJ9ybpZEVdib4
Av0l/jcVeD/2axclr/Y9dBRoJ/oOUqmBmzMuDXN4LQwyKahZRAFruOMD9K1Z56sv
wOScHiZ9z5HUZQXCKFSDVsKXRsynpeJjLQr+dO4nAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaw6rIMx4htqWXaLuAzjOo5wHAZUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FiMDliZDA2LWZmZGYtNDBhMS1hZWVhLTRiZjI3ODk3NTVkZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABmxDaXv3G4yyObCbMGKnWL9b+1O
g1T7ydeH6I2bxScYprkKbkPtWeXGQtIbP1yYJPivmcUFewY1daOYvlfktqvH3Ikj
CQp981hugAhKkAHW6m10SYEd9Bcustw2R+sT3oWDmA+hCtV29LtC/N4GFnF1KJgL
Ux1UA7G/RmJbuCYp5rmYOXG4kHY5w/GvCGvKwc6qc7Gpx1GIW0Ey0EsRIyhjTzyN
LFrD5txUDBND0lc9y33QUwHyNdFcwWh1qsjhBIcSTsizKy5dxP8/5lp+e3FxTLsx
Rwwooq/WeUZEH6SsmGbrqMMWQIyvf7DJETBjZOBgKPDLkocuQ2SUA2RP97U=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net