Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2daa533-c7bc-4449-98eb-b4892b246fef.roa
File: c2daa533-c7bc-4449-98eb-b4892b246fef.roa (raw, json)
Hash identifier: SA2ANthBWKQj2HUg/i+dfTDUtlXNSQ9/YHo2VyguH4A=
Subject key identifier: 74:D7:E9:F4:27:A4:5D:3B:1A:2D:B8:49:9D:68:29:D1:B8:25:E4:1F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 2C9FDC4106821DB4D56D54FC29757249F9F02F79
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2daa533-c7bc-4449-98eb-b4892b246fef.roa
Signing time: Fri 29 Dec 2023 00:00:00 +0000
ROA not before: Fri 29 Dec 2023 00:00:00 +0000
ROA not after: Fri 02 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9f:dc:41:06:82:1d:b4:d5:6d:54:fc:29:75:72:49:f9:f0:2f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 29 00:00:00 2023 GMT
Not After : Feb 2 23:59:59 2024 GMT
Subject: serialNumber=a55ab4ac097300b53ef3c4b13bb8e982b1e23e77d45fba00e151e6b271c6323a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:0a:4e:0e:d6:d2:c7:36:65:63:6a:7f:ea:
e2:5a:b1:27:07:d2:e1:3f:cb:08:2b:36:79:13:2c:
20:95:c2:67:a3:2e:cc:25:57:b7:9e:69:d9:26:57:
e5:f8:0c:05:20:6d:8f:d1:90:62:44:da:c6:57:21:
76:60:6f:ee:06:01:b1:bc:3e:bd:f5:da:ba:e8:35:
27:1d:23:31:75:8a:19:db:56:85:60:91:96:39:2f:
92:80:7a:1d:b1:ea:43:3d:11:5a:e0:e0:5b:00:d0:
e5:82:3f:1c:11:81:36:17:17:b4:29:3b:cb:14:7d:
ac:00:ef:8c:62:0f:4d:df:12:93:72:ce:38:24:15:
00:b9:cd:9c:91:56:25:30:4b:5c:81:6b:26:98:4a:
07:be:e6:d0:3e:cf:4a:d4:ef:ae:d2:aa:c4:ed:14:
5e:74:36:ef:cf:25:48:b1:17:23:a7:95:bd:8f:17:
80:d7:e7:95:b1:d9:d2:51:38:82:6b:9c:62:ed:fc:
fd:94:fd:04:e9:34:21:a5:c7:8d:01:aa:ed:05:9e:
57:cf:3e:e2:1b:e9:61:42:a6:6e:47:88:48:58:06:
70:cd:c4:37:f7:c0:17:02:d9:94:f4:87:f0:ec:73:
16:6a:9c:9e:a3:8c:bc:87:a5:1c:6c:ef:dd:dd:6f:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:E9:F4:27:A4:5D:3B:1A:2D:B8:49:9D:68:29:D1:B8:25:E4:1F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2daa533-c7bc-4449-98eb-b4892b246fef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d9:d9:67:64:2d:b4:67:2d:33:12:b5:22:42:59:53:ff:ac:
e5:b7:41:d9:1a:e9:1e:a3:ac:5c:cd:0b:03:01:fe:13:b7:66:
3e:0c:b6:08:e6:7c:92:f0:12:fa:8a:d9:2e:bf:28:82:39:b5:
49:c2:ae:51:75:1e:c2:5d:97:8b:d2:c7:5a:43:f2:8a:c2:1c:
3f:97:8e:e3:c7:98:8f:83:77:e2:56:20:c2:1d:4d:7d:c9:34:
e9:ef:bc:f9:15:9e:c6:40:16:2d:e9:f5:ac:9f:a6:78:c2:8f:
88:6e:e4:53:c8:a4:30:0d:d4:18:a5:ad:3f:ae:15:81:bc:32:
49:2f:9e:4d:ac:5b:b5:84:ba:25:23:40:fe:98:46:c9:1f:9a:
96:6c:77:0f:0e:c9:3b:65:b5:b8:b4:18:1a:dc:e6:96:35:ff:
23:cf:4f:86:6b:5b:c8:a4:c4:30:6e:2e:c8:8e:91:4a:f4:5a:
b2:ec:84:6a:c3:08:42:95:e1:ad:b8:e3:3f:98:ce:10:48:fc:
97:81:38:f6:ed:dc:ff:6a:b8:a9:6e:49:fc:16:24:b8:58:4b:
ad:cd:5e:6a:2c:cb:34:8c:ff:f1:3c:9f:ef:af:bb:5d:34:8d:
ef:b7:2a:57:65:e5:2f:a5:bd:28:3a:45:4b:52:44:9a:3a:9e:
e0:9a:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 13:54:08 2023 by rpki-client on console.sobornost.net