Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab7bf3ce-3109-465e-b906-a03637a6adbd.roa
File: ab7bf3ce-3109-465e-b906-a03637a6adbd.roa (raw, json)
Hash identifier: +Ha/Kj1HDGQNVZ2BzBNBxLCJ78sOp2AiVa8E8c29MVE=
Subject key identifier: 8C:AC:2F:95:C9:61:34:66:FC:89:1F:2D:D6:CE:5A:84:40:E9:02:E5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 06BB95E01A6C3711C15A79F23D34B6DA0F332FE4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab7bf3ce-3109-465e-b906-a03637a6adbd.roa
Signing time: Thu 14 Dec 2023 00:00:00 +0000
ROA not before: Thu 14 Dec 2023 00:00:00 +0000
ROA not after: Thu 18 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bb:95:e0:1a:6c:37:11:c1:5a:79:f2:3d:34:b6:da:0f:33:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 14 00:00:00 2023 GMT
Not After : Jan 18 23:59:59 2024 GMT
Subject: serialNumber=815320d1138df13c5a73917a629a577be19ea0eb434d7e6e0a23868a36382f56, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:ed:ea:0f:52:40:85:c6:68:de:07:73:93:
d4:fc:e0:32:c6:e8:cb:52:d9:9f:3a:39:fc:7d:3c:
f1:0f:b3:f4:f6:3c:9c:43:29:cf:1f:98:53:b5:e2:
c2:de:0c:30:de:dd:ba:97:4f:23:51:48:97:e9:0d:
4d:90:63:6e:60:20:42:56:2c:f7:c4:c6:46:38:01:
26:e0:f5:1b:c9:cf:36:c5:2f:54:82:1e:56:37:50:
ca:09:cb:a1:ad:3d:fd:52:8f:43:9a:1f:db:0b:d6:
47:95:04:a4:b0:c7:e8:44:18:54:87:d5:a7:2d:7e:
b3:cd:08:d1:d5:1c:fa:29:5c:a9:ef:5b:ef:5f:e9:
86:d9:d8:eb:c5:59:2c:2d:0c:73:c9:26:0f:43:72:
59:41:28:8e:73:a7:e6:db:7a:ff:93:44:c6:64:10:
ae:0b:1e:c7:64:67:45:48:33:8f:94:1d:ee:e2:fa:
92:15:3d:48:8a:57:47:9f:12:3a:64:d0:fd:be:1a:
62:e7:6e:1a:0f:77:ca:80:a7:b4:ee:c3:63:b7:c6:
19:4d:dd:b8:54:4b:19:c0:22:36:dd:f9:78:cb:65:
eb:dc:70:a1:ee:51:cf:92:eb:7c:39:8f:8d:5f:3d:
17:a4:98:ed:89:a3:93:ec:86:48:f3:3c:e7:96:8d:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:2F:95:C9:61:34:66:FC:89:1F:2D:D6:CE:5A:84:40:E9:02:E5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab7bf3ce-3109-465e-b906-a03637a6adbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:44:08:98:cf:bd:66:e9:cf:8f:93:12:ea:98:51:c7:e4:8c:
d7:21:9d:e7:82:b6:13:01:06:10:33:fa:86:1b:d8:af:1b:67:
0c:f5:9a:f8:c6:76:c4:81:be:51:de:e6:25:8d:a4:d5:fb:50:
ff:d4:a2:07:da:72:95:df:e4:ed:dc:4b:91:80:2f:b3:36:4b:
ff:a2:1f:29:1a:da:3f:80:eb:b3:03:a6:a3:3d:1e:62:40:87:
7b:97:3f:d2:b6:15:11:59:4d:de:2f:98:f0:f1:d5:e6:6c:cf:
34:b1:34:88:5e:84:f4:f2:2c:08:a3:af:b6:61:ae:87:b3:d8:
e3:13:6d:b7:17:1c:47:7a:c1:41:a1:23:77:61:8c:1a:da:cd:
ba:be:70:7c:89:f8:04:0f:f1:35:1e:42:a8:0f:d6:7e:7e:21:
64:8a:f8:5d:2c:b4:a8:18:df:21:32:83:15:f4:eb:80:0e:4c:
d1:7f:1d:e8:64:e2:91:a9:eb:ec:91:d4:27:b8:39:0c:d9:97:
fc:c3:71:da:cf:ce:7d:02:e1:8f:ce:00:ee:48:c3:d9:ea:83:
b7:1d:df:c0:ad:a3:ec:69:a2:f2:51:dc:83:6f:cf:ce:ce:b9:
4c:0b:04:a6:94:2d:f9:d9:10:31:57:02:af:a5:20:49:f5:fe:
c3:d8:a7:02
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBruV4BpsNxHBWnnyPTS22g8zL+QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE0MDAwMDAwWhcNMjQwMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MTUzMjBkMTEzOGRmMTNjNWE3MzkxN2E2MjlhNTc3YmUx
OWVhMGViNDM0ZDdlNmUwYTIzODY4YTM2MzgyZjU2MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqR+3qD1JAhcZo3gdzk9T84DLG6MtS2Z86Ofx9PPEPs/T2
PJxDKc8fmFO14sLeDDDe3bqXTyNRSJfpDU2QY25gIEJWLPfExkY4ASbg9RvJzzbF
L1SCHlY3UMoJy6GtPf1Sj0OaH9sL1keVBKSwx+hEGFSH1actfrPNCNHVHPopXKnv
W+9f6YbZ2OvFWSwtDHPJJg9DcllBKI5zp+bbev+TRMZkEK4LHsdkZ0VIM4+UHe7i
+pIVPUiKV0efEjpk0P2+GmLnbhoPd8qAp7Tuw2O3xhlN3bhUSxnAIjbd+XjLZevc
cKHuUc+S63w5j41fPRekmO2Jo5PshkjzPOeWjYDBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjKwvlclhNGb8iR8t1s5ahEDpAuUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FiN2JmM2NlLTMxMDktNDY1ZS1iOTA2LWEwMzYzN2E2YWRiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALZECJjPvWbpz4+TEuqYUcfkjNch
neeCthMBBhAz+oYb2K8bZwz1mvjGdsSBvlHe5iWNpNX7UP/UogfacpXf5O3cS5GA
L7M2S/+iHyka2j+A67MDpqM9HmJAh3uXP9K2FRFZTd4vmPDx1eZszzSxNIhehPTy
LAijr7Zhroez2OMTbbcXHEd6wUGhI3dhjBrazbq+cHyJ+AQP8TUeQqgP1n5+IWSK
+F0stKgY3yEygxX064AOTNF/Hehk4pGp6+yR1Ce4OQzZl/zDcdrPzn0C4Y/OAO5I
w9nqg7cd38Cto+xpovJR3INvz87OuUwLBKaULfnZEDFXAq+lIEn1/sPYpwI=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:08 2023 by rpki-client on console.sobornost.net