Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2f250b3-cc0f-47f3-a73a-55c14b68f3c4.roa
File: c2f250b3-cc0f-47f3-a73a-55c14b68f3c4.roa (raw, json)
Hash identifier: /RpTmedH9uzg3ZEEPDeHqz7lPSEB8zwi99Y2T/MjdBQ=
Subject key identifier: 10:7F:63:54:37:73:C1:06:2D:75:CC:B4:97:8A:49:EC:B9:B5:02:05
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 12310A9019380649C046DC2683F3C948EC79F90F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2f250b3-cc0f-47f3-a73a-55c14b68f3c4.roa
Signing time: Mon 01 Jan 2024 00:00:00 +0000
ROA not before: Mon 01 Jan 2024 00:00:00 +0000
ROA not after: Mon 05 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:31:0a:90:19:38:06:49:c0:46:dc:26:83:f3:c9:48:ec:79:f9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 1 00:00:00 2024 GMT
Not After : Feb 5 23:59:59 2024 GMT
Subject: serialNumber=bf17ac47fac4fa02ff50c045a8ee7b3b9f6390849011e441004baebf67a35bc9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:0c:e6:07:41:4a:7c:70:3b:6b:76:51:57:
06:ab:7c:e6:21:1c:d8:24:88:77:c2:11:67:7b:47:
50:dd:21:bb:6e:d1:3f:17:38:5f:64:09:6e:b1:e6:
32:4c:7e:f2:1e:40:bd:a7:57:f2:ea:d8:c1:e4:10:
7a:42:3f:f0:26:8d:39:7e:22:90:61:ad:f1:c2:9d:
66:cd:63:0e:cb:b2:5e:bf:aa:d3:9a:28:72:be:f4:
25:f9:55:1d:7f:bc:ae:8f:fb:80:bd:79:86:33:da:
c9:8c:05:a9:11:59:87:17:25:3e:93:25:e1:d2:35:
f3:10:cd:43:c6:cc:ab:43:60:47:a6:7d:96:70:d4:
a9:0a:10:ec:ee:87:19:d7:a5:4f:25:51:d8:20:be:
ce:f7:1b:bb:22:c3:c5:50:13:28:71:95:87:bb:79:
04:06:7b:73:19:59:00:c2:f6:13:f2:9f:d5:de:71:
1f:61:8a:93:d4:26:b3:0e:4a:31:40:75:25:82:15:
5e:df:e5:35:79:32:f3:26:4f:57:cf:99:1b:26:e4:
a4:20:4f:95:e8:97:20:65:27:b2:70:5d:a7:94:32:
68:cc:3a:2f:d6:33:dd:77:8e:30:b4:31:47:f4:85:
b0:5c:17:8a:84:71:03:ca:6f:6b:e7:f4:16:5d:f0:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:63:54:37:73:C1:06:2D:75:CC:B4:97:8A:49:EC:B9:B5:02:05
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c2f250b3-cc0f-47f3-a73a-55c14b68f3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f5:49:9a:64:cb:1d:80:d5:5f:cf:d1:6e:c3:7f:36:ff:37:
d9:3a:b8:82:cc:89:fe:e4:f4:34:98:3d:0e:9c:d5:e5:7f:1f:
b2:0c:45:1a:ce:d1:ad:bb:ec:7d:91:1d:fb:ab:ca:d9:10:b3:
c1:c0:09:bc:88:5b:3a:f7:b1:ea:1b:61:bd:04:5e:2d:d1:58:
0a:24:19:fe:bd:4e:c2:57:cb:3f:04:fd:ae:c4:29:21:08:c7:
cf:9f:12:04:75:ec:74:d7:41:2e:86:82:88:aa:47:57:e8:4a:
d1:b7:d5:c2:6e:e7:9b:ce:b1:b2:3e:3f:e3:b4:74:a9:48:32:
5f:a2:8a:02:f4:67:5c:f7:86:12:35:87:b8:41:55:95:64:56:
ae:84:1b:d8:25:ab:e4:8b:45:4f:e2:98:f4:a8:97:0d:56:0b:
3c:92:69:28:3d:c8:8a:b0:b6:d3:61:44:79:ec:88:19:6f:4f:
73:07:82:b4:55:c3:ff:ac:88:74:76:7d:a8:06:c8:a9:27:ec:
b0:71:2a:0b:02:5a:cd:82:4d:7f:90:44:af:8b:e6:0b:ce:23:
98:e0:05:07:b2:c9:80:1b:72:05:de:1b:a9:19:6a:9e:78:4d:
5a:82:54:8d:01:c8:cb:8f:1d:dd:71:4c:9a:05:9e:2b:e6:f8:
57:0f:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:52 2024 by rpki-client on console.sobornost.net