Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ae17d60d-2c9f-45f4-a8e2-cb998bf60618.roa
File: ae17d60d-2c9f-45f4-a8e2-cb998bf60618.roa (raw, json)
Hash identifier: OquzjHOFuZfpSGDZTI7mrsxwtExvPl9lhjVAgoGmiE4=
Subject key identifier: 62:6F:84:D1:AA:4B:9E:48:B9:E1:12:41:1A:EC:AB:21:48:67:7F:92
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7882F06D784DC3530BABF0847AAA5054F69F2391
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ae17d60d-2c9f-45f4-a8e2-cb998bf60618.roa
Signing time: Fri 21 Jun 2024 00:00:00 +0000
ROA not before: Fri 21 Jun 2024 00:00:00 +0000
ROA not after: Fri 26 Jul 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 21:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:82:f0:6d:78:4d:c3:53:0b:ab:f0:84:7a:aa:50:54:f6:9f:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jun 21 00:00:00 2024 GMT
Not After : Jul 26 23:59:59 2024 GMT
Subject: serialNumber=98d7d5643f6112a1eb8e051244e738e77707b4036b35fec498c70de08b2e255d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:28:aa:33:11:5f:88:89:1f:16:34:3c:6c:
2f:c4:7c:a2:02:77:69:67:23:d5:2e:69:b5:3d:93:
fe:e2:1d:4e:26:a0:d9:75:14:a5:34:ec:7e:1e:86:
90:94:08:13:26:28:38:ad:02:96:e5:63:95:39:69:
e1:e0:44:3f:ae:88:c2:99:c9:c2:9b:da:4f:88:67:
d5:ea:2e:4e:3a:7c:2e:2e:c9:1e:f9:0e:b7:11:c3:
36:86:3c:2d:e8:73:b0:77:17:b9:c5:a1:83:53:10:
e8:9b:ac:89:ad:6e:f6:a7:61:e4:01:c5:14:11:4e:
58:b2:69:07:00:b9:ed:a5:37:87:a7:0a:4a:89:ef:
cb:2d:c2:e0:74:ee:65:24:9a:fc:4c:1b:e2:51:6b:
e1:5b:15:2f:f9:c4:22:c9:2b:40:da:e9:6b:77:98:
f3:70:ff:20:a4:f9:bc:1f:1f:56:cd:9b:fc:0a:43:
09:5c:09:c2:1d:52:e3:3e:54:27:f8:4d:17:15:1b:
fc:c6:29:aa:09:bb:d3:d6:fd:58:ec:4d:bb:75:aa:
a7:d7:53:c5:76:09:8c:5d:95:cd:42:5b:17:c4:9e:
c3:d8:3f:e9:cd:10:19:b8:5c:9f:c0:3e:c6:a4:d7:
8c:25:70:74:2b:80:cf:c3:06:d0:9f:46:4b:7d:2b:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:84:D1:AA:4B:9E:48:B9:E1:12:41:1A:EC:AB:21:48:67:7F:92
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ae17d60d-2c9f-45f4-a8e2-cb998bf60618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a9:ca:d8:49:48:97:48:14:d0:b9:d7:67:34:e4:c3:ba:2b:
49:a3:73:5a:d2:92:71:44:a7:af:28:3e:fd:e0:c9:23:8c:78:
94:8a:28:1b:87:c0:3f:b6:6e:96:87:b2:0d:5a:1b:85:c9:3e:
cd:a2:19:23:9a:a4:a8:db:5d:74:48:6d:79:b7:73:7c:e1:7a:
20:8c:93:b9:c8:2b:4d:78:1b:17:c6:c6:2f:0c:49:25:01:6f:
a4:d5:46:fe:7f:95:f2:8c:d2:4e:c1:69:0d:a4:67:68:c5:ca:
73:41:75:5e:42:e6:53:f4:66:c4:4b:19:5b:f3:45:e2:d2:69:
2d:fc:6c:3a:50:97:64:37:7f:1b:51:3b:95:f6:85:b5:bc:ef:
3f:1e:4b:8b:00:6c:d8:25:78:e4:e2:94:dc:02:71:b5:e4:3b:
3a:7a:72:d9:86:d8:d9:45:91:82:3c:ea:1e:ab:04:c7:76:9e:
0d:75:ee:50:da:42:88:05:02:70:9b:ea:57:60:9b:a8:b4:2b:
d7:34:ee:0f:5f:15:6f:b3:1c:fe:7e:47:b3:8e:21:04:3b:8c:
a9:61:34:a6:fe:84:f1:c9:c4:f6:00:5b:87:57:4e:f4:de:3f:
85:92:88:3a:55:65:4c:3c:4a:6f:ba:28:84:b0:c6:83:e8:cb:
c7:db:9f:bb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeILwbXhNw1MLq/CEeqpQVPafI5EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNjIxMDAwMDAwWhcNMjQwNzI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OGQ3ZDU2NDNmNjExMmExZWI4ZTA1MTI0NGU3MzhlNzc3
MDdiNDAzNmIzNWZlYzQ5OGM3MGRlMDhiMmUyNTVkMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDc4iiqMxFfiIkfFjQ8bC/EfKICd2lnI9UuabU9k/7iHU4m
oNl1FKU07H4ehpCUCBMmKDitApblY5U5aeHgRD+uiMKZycKb2k+IZ9XqLk46fC4u
yR75DrcRwzaGPC3oc7B3F7nFoYNTEOibrImtbvanYeQBxRQRTliyaQcAue2lN4en
CkqJ78stwuB07mUkmvxMG+JRa+FbFS/5xCLJK0Da6Wt3mPNw/yCk+bwfH1bNm/wK
QwlcCcIdUuM+VCf4TRcVG/zGKaoJu9PW/VjsTbt1qqfXU8V2CYxdlc1CWxfEnsPY
P+nNEBm4XJ/APsak14wlcHQrgM/DBtCfRkt9K6OjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYm+E0apLnki54RJBGuyrIUhnf5IwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FlMTdkNjBkLTJjOWYtNDVmNC1hOGUyLWNiOTk4YmY2MDYxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACGpythJSJdIFNC512c05MO6K0mj
c1rSknFEp68oPv3gySOMeJSKKBuHwD+2bpaHsg1aG4XJPs2iGSOapKjbXXRIbXm3
c3zheiCMk7nIK014GxfGxi8MSSUBb6TVRv5/lfKM0k7BaQ2kZ2jFynNBdV5C5lP0
ZsRLGVvzReLSaS38bDpQl2Q3fxtRO5X2hbW87z8eS4sAbNgleOTilNwCcbXkOzp6
ctmG2NlFkYI86h6rBMd2ng117lDaQogFAnCb6ldgm6i0K9c07g9fFW+zHP5+R7OO
IQQ7jKlhNKb+hPHJxPYAW4dXTvTeP4WSiDpVZUw8Sm+6KISwxoPoy8fbn7s=
-----END CERTIFICATE-----
Generated at Sat Jun 22 02:13:42 2024 by rpki-client on console.sobornost.net