
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba01ac27-496e-4327-81f9-a8153c89a3d6.roa
File: ba01ac27-496e-4327-81f9-a8153c89a3d6.roa (raw, json)
Hash identifier: ejgC6pKMOM7SO6qX7sen00W+x9ahj2UisuR/8Dw01Vc=
Subject key identifier: 87:29:7A:59:10:8B:5B:79:1B:4C:7A:44:D0:90:5E:77:7B:05:0B:FC
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 679E6C002B9487E2366555929FB4E7ED50B3FA2C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba01ac27-496e-4327-81f9-a8153c89a3d6.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9e:6c:00:2b:94:87:e2:36:65:55:92:9f:b4:e7:ed:50:b3:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=3c926eefcb7570e498dd57edb85c9aa156e281820c5f2c9fdade811b3559a10b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:e8:7f:d9:3b:de:c5:3f:27:ff:26:20:6a:
dc:4b:cd:4d:0f:49:49:a7:d4:d9:30:e6:15:1d:cf:
03:d2:dc:13:d3:30:0c:52:43:29:27:3e:5a:73:07:
81:b0:71:40:db:6e:e1:81:59:bf:ec:18:50:52:03:
5e:f9:34:e0:ce:d3:03:da:fa:09:3f:69:9c:ca:01:
bd:03:1a:f5:8f:8f:9b:ad:16:ed:9c:20:6e:6d:29:
8b:ab:30:8a:21:16:17:50:89:7d:06:30:b1:12:c3:
3f:ab:28:61:5f:1b:4b:12:53:f3:92:1e:a3:55:a8:
5a:17:af:df:4e:a4:17:c6:d4:bb:3d:7c:be:cc:d6:
c3:0b:a3:47:38:08:26:14:50:3e:8a:58:28:8a:2c:
fa:e7:4b:eb:67:e1:11:38:e8:1e:c0:a9:49:4c:15:
63:93:27:19:d1:83:48:7f:bc:2d:25:39:b8:32:51:
20:b4:99:5c:e0:5b:60:21:fd:d8:f4:28:be:62:17:
50:3f:be:09:dc:6c:72:8a:88:ec:79:13:1d:8a:12:
b8:ce:cd:e1:19:e4:d3:90:54:7f:a0:9a:70:80:81:
60:df:8b:c1:5e:8f:51:63:49:41:3f:37:a8:bb:10:
c9:1a:eb:e4:83:19:71:98:14:13:08:c7:00:33:22:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:7A:59:10:8B:5B:79:1B:4C:7A:44:D0:90:5E:77:7B:05:0B:FC
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ba01ac27-496e-4327-81f9-a8153c89a3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:fa:43:d7:c3:21:28:81:56:6d:42:95:57:a5:22:17:17:59:
96:91:ee:d5:d2:8f:e4:10:53:9e:e1:a0:7e:b5:01:d8:1d:83:
43:87:5a:71:6e:1a:20:67:8e:23:32:72:34:40:da:a0:c3:8e:
73:83:9f:39:0b:15:e1:f9:b1:ec:81:c5:21:42:21:fd:ce:5c:
48:45:76:4e:b2:07:68:59:3c:7a:74:74:ce:15:3d:ad:c3:ae:
0e:bb:dd:76:eb:e1:1e:56:25:8b:d1:d8:f7:97:2d:fe:50:0e:
7c:c1:9d:45:fb:15:7f:72:bf:37:8a:32:ce:0a:3e:61:38:b1:
0e:d1:c3:4b:3d:43:64:59:e9:5f:90:4f:1c:98:4d:0e:17:c0:
7a:99:84:d8:d2:fe:ee:f0:6f:35:bf:f7:8c:f5:ac:58:54:e1:
01:72:88:10:23:0d:dd:d9:86:57:b3:94:2c:b0:8c:8e:9a:65:
ba:58:94:e3:92:88:44:a2:2f:d4:ed:89:de:43:f7:d3:d9:60:
88:b5:16:ef:bc:68:f1:e7:41:05:6e:ff:5b:fc:81:09:c2:72:
cb:6e:86:d8:f8:77:d3:ee:f8:df:ba:13:5e:0f:7a:6c:d7:c8:
16:c6:49:b9:cc:c6:b1:3b:8d:3e:cd:6f:34:c8:a8:2c:66:51:
c5:dc:e4:5f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ55sACuUh+I2ZVWSn7Tn7VCz+iwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNTIxMDAwMDAwWhcNMjQwNjI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzkyNmVlZmNiNzU3MGU0OThkZDU3ZWRiODVjOWFhMTU2
ZTI4MTgyMGM1ZjJjOWZkYWRlODExYjM1NTlhMTBiMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDd6Oh/2TvexT8n/yYgatxLzU0PSUmn1Nkw5hUdzwPS3BPT
MAxSQyknPlpzB4GwcUDbbuGBWb/sGFBSA175NODO0wPa+gk/aZzKAb0DGvWPj5ut
Fu2cIG5tKYurMIohFhdQiX0GMLESwz+rKGFfG0sSU/OSHqNVqFoXr99OpBfG1Ls9
fL7M1sMLo0c4CCYUUD6KWCiKLPrnS+tn4RE46B7AqUlMFWOTJxnRg0h/vC0lObgy
USC0mVzgW2Ah/dj0KL5iF1A/vgncbHKKiOx5Ex2KErjOzeEZ5NOQVH+gmnCAgWDf
i8Fej1FjSUE/N6i7EMka6+SDGXGYFBMIxwAzIiH/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhyl6WRCLW3kbTHpE0JBed3sFC/wwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2JhMDFhYzI3LTQ5NmUtNDMyNy04MWY5LWE4MTUzYzg5YTNkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBALD6Q9fDISiBVm1ClVelIhcXWZaR
7tXSj+QQU57hoH61Adgdg0OHWnFuGiBnjiMycjRA2qDDjnODnzkLFeH5seyBxSFC
If3OXEhFdk6yB2hZPHp0dM4VPa3Drg673Xbr4R5WJYvR2PeXLf5QDnzBnUX7FX9y
vzeKMs4KPmE4sQ7Rw0s9Q2RZ6V+QTxyYTQ4XwHqZhNjS/u7wbzW/94z1rFhU4QFy
iBAjDd3ZhlezlCywjI6aZbpYlOOSiESiL9Ttid5D99PZYIi1Fu+8aPHnQQVu/1v8
gQnCcstuhtj4d9Pu+N+6E14PemzXyBbGSbnMxrE7jT7NbzTIqCxmUcXc5F8=
-----END CERTIFICATE-----
Generated at Tue May 21 09:51:41 2024 by rpki-client on console.sobornost.net