Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c070ecff-65d2-459d-b315-7a59c2a6055d.roa
File: c070ecff-65d2-459d-b315-7a59c2a6055d.roa (raw, json)
Hash identifier: WXufp4RK11JVXyseSRbGt+qS+drSE8gqerIsL0iTod0=
Subject key identifier: AF:ED:F7:D1:9F:B2:F5:BD:25:AC:12:16:F3:E6:94:0C:DB:E8:D1:EF
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 43C9B5E19FC6F06B3E7DBECF4D262550BBA970D7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c070ecff-65d2-459d-b315-7a59c2a6055d.roa
Signing time: Thu 07 Dec 2023 00:00:00 +0000
ROA not before: Thu 07 Dec 2023 00:00:00 +0000
ROA not after: Thu 11 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c9:b5:e1:9f:c6:f0:6b:3e:7d:be:cf:4d:26:25:50:bb:a9:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 7 00:00:00 2023 GMT
Not After : Jan 11 23:59:59 2024 GMT
Subject: serialNumber=de822e8ce1d7dcb1ff095dbe19b5a964aef44cd07fea7281d44f31295a501ef7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:3a:cd:c9:a0:a2:99:b9:9c:69:88:f3:3a:
11:95:0a:74:48:47:04:70:a6:90:a3:a3:7b:2a:72:
98:7d:f6:8b:ff:f4:c8:e4:36:cb:fc:d3:ec:d1:07:
40:91:cf:14:92:c8:99:75:1f:99:38:b7:6a:08:60:
ae:da:af:ea:14:9b:88:dc:1c:08:e2:6b:4f:10:34:
b7:aa:39:2b:bb:c2:c7:44:d9:39:54:35:b3:b4:94:
4f:d4:76:63:f5:98:3e:e3:68:00:25:9e:10:08:a2:
9c:0b:16:ab:2e:46:b6:f1:36:e5:88:c5:71:23:e6:
68:ac:40:13:fb:0e:50:9a:6d:de:aa:2d:ea:53:16:
08:9f:39:7d:28:46:47:6a:20:53:77:bd:e1:40:aa:
e9:c8:f0:ee:67:d9:34:39:e1:4d:8b:84:61:fb:7f:
73:a1:82:75:a2:ba:a5:66:41:0c:21:6e:04:0a:b7:
a5:f1:16:25:6d:f2:19:ea:71:f1:19:c8:a1:01:71:
b2:9c:a2:3c:58:93:2c:ce:8c:4e:c3:2d:2a:42:40:
47:0f:ca:6f:e1:1e:d8:4a:6c:40:06:8f:7b:b4:d7:
45:69:1c:0b:08:10:f2:19:64:cb:43:12:c6:d7:7d:
99:00:66:72:a4:6e:8d:ef:ff:b3:a0:ba:c0:72:b6:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:F7:D1:9F:B2:F5:BD:25:AC:12:16:F3:E6:94:0C:DB:E8:D1:EF
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c070ecff-65d2-459d-b315-7a59c2a6055d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:36:db:16:6b:c3:3b:fa:27:6d:48:8b:d9:8f:36:38:82:47:
f1:22:b0:2e:e7:a7:30:4f:b8:04:06:4a:cd:3f:6f:23:84:c7:
3e:d0:5f:ff:7b:d1:ba:7b:6b:b0:61:83:2e:f1:ee:16:05:41:
c2:92:b7:9f:0f:30:0f:b2:4a:65:f0:be:09:c0:65:03:3f:68:
8e:02:9d:47:63:5f:82:a8:2d:15:f5:7e:e2:40:e8:8c:39:5b:
7c:ee:89:56:a9:8b:c2:5b:22:5a:a9:8f:81:35:86:ff:47:92:
b5:84:b6:b9:8a:2d:ab:5d:ee:69:ce:94:92:80:ff:26:dd:20:
b8:56:13:3d:25:47:85:68:3b:23:e1:a3:44:5e:0d:5c:87:c9:
36:0a:fe:d8:eb:66:fa:78:be:19:ba:5c:80:f9:b2:7e:b8:3d:
c6:c4:e4:ce:e5:df:b4:fa:f5:49:85:15:fb:94:ac:23:43:19:
22:62:1c:1c:fe:a7:a8:18:c3:e2:ac:fb:3b:21:21:9b:35:46:
5e:ce:d6:d6:d9:ca:e9:86:59:57:f1:43:ea:cb:a0:a7:41:5f:
93:c3:e5:c8:89:7f:bb:5f:3a:8c:38:98:de:f2:48:15:b0:97:
86:99:28:9b:ab:50:70:f5:e9:27:1d:7e:ef:6d:7f:14:74:ed:
4b:26:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:12 2023 by rpki-client on console.sobornost.net