Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b974a206-6fec-4ae8-9989-36f8f389a707.roa
File: b974a206-6fec-4ae8-9989-36f8f389a707.roa (raw, json)
Hash identifier: 8o5mU8NGHWHWHqOkfkFsXV18jUvNQVu9kZKNUfkI9N8=
Subject key identifier: 93:1B:11:B3:5C:37:0C:A7:CA:25:CB:63:1E:44:B4:F5:61:27:1A:C6
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2397757AFADABA6D6271D6901E0111F43ED0A2D9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b974a206-6fec-4ae8-9989-36f8f389a707.roa
Signing time: Mon 08 Jan 2024 00:00:00 +0000
ROA not before: Mon 08 Jan 2024 00:00:00 +0000
ROA not after: Mon 12 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 18:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:97:75:7a:fa:da:ba:6d:62:71:d6:90:1e:01:11:f4:3e:d0:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 8 00:00:00 2024 GMT
Not After : Feb 12 23:59:59 2024 GMT
Subject: serialNumber=1f13cdc9de9074a5d13f96bc78fe009a043b70c7823037e99dae3103130d62eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:50:4a:0b:42:30:9b:7e:39:7a:a4:29:a9:
3f:92:97:1b:3d:93:65:ae:56:6c:55:12:c1:87:07:
07:20:39:b9:87:4d:6c:ef:d6:33:02:54:d7:76:67:
e1:70:8d:06:68:a5:54:a8:f3:9d:18:00:e2:7c:06:
f3:85:7c:b2:32:86:ef:b0:87:64:91:5c:f6:cf:21:
a9:3c:86:e1:0b:ff:30:dd:12:3b:14:3e:67:d7:c7:
e1:d3:2e:4e:9d:ef:fd:b9:50:b6:15:96:e2:29:dc:
9b:e6:03:02:9d:8d:52:e6:7b:c7:cc:16:b8:7b:e3:
ae:8a:03:0c:fb:74:3d:42:56:64:7d:23:66:67:22:
69:22:62:0c:e0:00:d9:68:fe:02:46:53:81:5d:14:
53:aa:fd:d0:c5:21:3e:12:ef:c7:6d:6b:fd:fb:63:
e3:d0:7b:78:34:fb:e1:a1:80:bc:eb:11:ee:d7:89:
eb:26:f4:b7:ca:27:a3:6b:8b:3d:2c:68:91:7c:9c:
10:68:09:d4:62:d7:48:67:8d:b7:7a:ac:e5:78:a5:
e7:ec:01:8d:84:4b:ff:31:2e:71:e6:ef:e3:5f:6e:
0f:fb:e0:39:12:2d:2e:86:68:a5:45:f0:6e:55:de:
16:5e:5b:83:33:e8:af:02:2b:7e:f5:bd:9f:62:58:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:11:B3:5C:37:0C:A7:CA:25:CB:63:1E:44:B4:F5:61:27:1A:C6
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b974a206-6fec-4ae8-9989-36f8f389a707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:aa:28:59:94:a1:c7:8b:33:cd:dc:93:01:53:7a:a3:eb:7a:
5c:fb:77:06:6c:d3:e2:d0:51:cf:cf:36:21:0f:a8:13:42:ae:
21:ca:a6:ae:a2:9d:3c:0a:3c:1b:d3:23:f1:e6:17:38:1e:0e:
23:cb:d2:6a:d3:0b:70:00:66:d7:89:67:e2:91:ce:d3:ff:a5:
5d:82:c7:b3:28:15:65:62:76:0c:09:5c:54:32:d3:a2:f9:ac:
5f:5a:09:98:3f:fd:ab:9c:ea:66:7b:91:e7:75:3d:13:0e:16:
19:60:cd:b3:d8:be:2c:05:08:84:44:b7:84:5f:bb:8e:42:9e:
e0:d0:c6:82:6f:46:6b:2f:c6:28:29:46:dd:68:c8:14:6c:fa:
e1:55:3a:b3:9e:a3:94:1b:b4:0e:82:8f:a6:10:34:0e:05:cf:
00:77:55:a8:a6:67:f0:52:12:cf:e6:c4:31:ee:85:98:17:ca:
11:a0:cf:8c:68:b0:3b:40:51:af:32:af:a2:78:44:03:61:63:
d5:42:02:f7:ed:17:a2:3b:f9:99:0b:cd:3b:cc:0d:8f:8e:ba:
70:22:8f:35:0c:82:95:a4:a4:a8:37:bf:54:c2:ce:00:7d:52:
f2:1a:db:1d:d5:29:cc:72:6f:b8:be:82:68:05:5d:91:55:a8:
61:03:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 20:05:50 2024 by rpki-client on console.sobornost.net