Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc2fd612-ec9f-4fac-ae98-dbcc1c4f0242.roa
File: bc2fd612-ec9f-4fac-ae98-dbcc1c4f0242.roa (raw, json)
Hash identifier: kFXZ8V5ZtiW8gXo95AebWmx1qh9DocE22e1oSKJ3VTg=
Subject key identifier: 3A:B9:1F:D2:70:6A:F7:B8:8E:C3:A5:B9:6D:8B:83:7F:BA:06:16:AF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 750591BD526A1541AE85606A368598523FE913A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc2fd612-ec9f-4fac-ae98-dbcc1c4f0242.roa
Signing time: Mon 11 Dec 2023 00:00:00 +0000
ROA not before: Mon 11 Dec 2023 00:00:00 +0000
ROA not after: Mon 15 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:05:91:bd:52:6a:15:41:ae:85:60:6a:36:85:98:52:3f:e9:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 11 00:00:00 2023 GMT
Not After : Jan 15 23:59:59 2024 GMT
Subject: serialNumber=b3b351dca62d5cb610e8252db37335c739bb7675fdcebfaecde4fce1393b2393, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:c2:f6:b4:f9:f2:11:07:b8:47:26:7c:db:
b2:2d:5f:be:26:e9:c2:bf:57:17:a8:50:86:03:2a:
99:f9:67:9f:b0:56:3b:df:81:01:31:7e:38:e8:77:
90:19:5a:72:f7:c6:80:4e:df:83:55:11:03:1b:7e:
07:61:59:db:70:dc:b4:1c:d2:1a:2b:9a:29:5d:aa:
af:91:6a:0a:f8:f2:54:d6:f5:6a:5e:9f:91:a6:3a:
ea:6e:01:69:8a:ea:c0:8e:c4:cd:9d:cc:0b:7b:4b:
de:4d:e5:dc:a5:4b:74:27:d5:36:60:b2:6f:5c:98:
4b:cb:8a:90:54:a1:fa:9c:d0:25:b6:f2:76:35:05:
14:a4:e3:b4:61:9c:fe:93:31:62:8c:aa:7a:00:03:
af:5c:94:a1:a9:05:a8:f0:2d:a7:be:79:0f:10:34:
82:e8:f6:b9:f1:09:5c:8d:c4:ea:19:e6:48:a8:0a:
ab:fd:8a:dd:88:13:6c:4d:f4:eb:f7:5e:b3:5d:6f:
2e:62:d9:40:ea:f9:2c:1a:00:9c:d4:88:b1:91:82:
45:6f:33:38:20:be:7f:bd:73:3b:61:fd:00:9e:41:
d1:54:5d:9f:a5:af:41:53:c5:18:36:c0:55:1d:c1:
39:96:38:09:24:95:ea:07:0c:66:a8:9d:b5:96:2f:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:1F:D2:70:6A:F7:B8:8E:C3:A5:B9:6D:8B:83:7F:BA:06:16:AF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc2fd612-ec9f-4fac-ae98-dbcc1c4f0242.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:96:c8:75:47:bd:8e:f7:4f:93:0d:a1:11:28:07:7e:85:88:
12:ec:af:e9:50:fe:56:ec:1d:13:e5:e6:e5:7c:d9:76:83:41:
3d:5d:d5:48:db:99:05:e9:fc:bb:98:b7:d7:da:d9:e4:10:92:
5b:5e:e8:84:77:06:9d:98:b3:36:c4:2e:9c:c4:8c:db:2f:21:
2c:ec:8b:e0:3f:f2:f1:7d:96:96:5c:0c:f3:c0:2b:cd:c3:08:
eb:9e:08:88:e2:5d:b8:bb:10:21:d9:9f:52:c2:f3:65:ca:1c:
f6:1c:33:eb:0a:b3:0d:50:29:05:ba:36:4a:cb:76:6a:10:25:
b8:c3:57:90:7e:f9:76:ee:56:20:9c:c9:0c:fd:9f:16:4b:97:
5e:34:b9:25:10:79:9b:ce:56:06:fa:ed:b1:82:dc:a0:1a:35:
91:dd:35:43:33:6f:09:da:b4:dd:ca:a8:01:40:c8:01:76:82:
75:4b:a3:cd:90:06:cc:86:42:73:ef:9d:24:b0:ec:d1:41:03:
6d:51:5b:06:f4:28:2e:7a:7f:29:53:0a:84:5c:d5:c3:70:2b:
d1:a4:93:ab:a9:11:09:f1:ff:ab:63:fb:d5:ae:70:1c:42:a9:
43:18:1f:d1:d1:a4:ce:37:40:10:1c:82:8d:a2:50:89:ee:32:
77:c9:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net