
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3decfc2-3868-443d-a820-b8a8117687ed.roa
File: c3decfc2-3868-443d-a820-b8a8117687ed.roa (raw, json)
Hash identifier: 7T29Uhs/sdbdpoK7VyS2SrIEnUP1npUHcuFITGQNdyA=
Subject key identifier: 7C:9E:B5:1C:56:1B:4D:72:3C:D1:E8:31:9D:69:04:F0:C7:04:FD:92
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: FFCC7B4B0BB33B12DB8AABA81221828C55EAFB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3decfc2-3868-443d-a820-b8a8117687ed.roa
Signing time: Sun 12 May 2024 00:00:00 +0000
ROA not before: Sun 12 May 2024 00:00:00 +0000
ROA not after: Sun 16 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 17:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ff:cc:7b:4b:0b:b3:3b:12:db:8a:ab:a8:12:21:82:8c:55:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 12 00:00:00 2024 GMT
Not After : Jun 16 23:59:59 2024 GMT
Subject: serialNumber=ab599c01dc5c7a0c6c16e751d6b75dd301fd65c6304e91883fedd1ac33f2a8bd, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:11:ef:90:89:c1:2e:0c:b9:04:b0:f3:73:31:
04:2d:45:fa:75:a1:05:0c:60:87:8f:e1:ec:91:22:
09:cd:c7:6c:37:6d:ce:2a:34:c5:2a:34:67:e3:53:
93:cb:75:93:5e:a0:f6:89:a6:0a:a1:01:7d:51:a7:
0b:8a:fc:62:f6:b1:62:32:29:a8:a7:68:81:ca:bf:
6c:90:b3:18:b3:0b:3d:e5:78:31:31:21:68:e2:f9:
b4:5d:9e:61:34:ee:6f:84:4b:81:9b:56:27:70:45:
f7:96:ae:1e:92:d5:38:0f:b3:01:9a:f1:98:f2:9e:
41:b3:17:2a:bf:a2:83:48:76:06:bd:85:94:42:c7:
21:62:3e:0f:66:bb:b6:75:0e:17:fd:40:97:aa:f4:
2d:a6:4e:d7:89:43:e0:85:c9:51:fe:7b:2a:25:33:
5c:30:54:91:80:e3:c4:5e:be:9f:d8:ad:29:11:31:
a0:3e:63:8f:dd:e9:68:7f:c3:8b:8c:a4:0d:c1:41:
75:b8:f8:d1:f5:fd:83:0c:0b:6c:8c:eb:c9:33:29:
9f:21:a9:c6:51:45:77:3e:46:b8:bd:d3:71:32:6b:
0d:15:b3:17:be:b8:ad:55:86:02:93:c4:1b:8f:f1:
ae:72:c7:e2:f7:bf:d7:62:0d:99:07:ee:30:06:54:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:B5:1C:56:1B:4D:72:3C:D1:E8:31:9D:69:04:F0:C7:04:FD:92
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/c3decfc2-3868-443d-a820-b8a8117687ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a1:a4:c8:a6:c8:4e:62:9d:fb:44:ae:e9:c9:b3:d0:fb:75:
42:e5:fc:08:93:00:a5:98:fe:7c:81:af:2c:f1:d2:43:fb:5f:
95:d1:42:54:7a:2d:d5:a9:d1:36:7d:32:08:71:1b:fe:2a:90:
0c:e7:e3:2e:8b:40:17:2e:b1:5d:0d:52:87:13:50:23:da:b2:
a3:e2:d7:44:0d:db:d3:12:dd:3e:18:a6:3e:24:b2:a4:78:15:
6d:54:5e:6f:9b:64:f3:f9:c9:28:98:7d:fe:ed:94:ec:e4:a3:
15:0d:5b:e5:c7:13:12:7a:bb:01:6c:2a:5f:61:72:af:e8:72:
26:1b:86:55:0b:68:ff:e6:04:d7:67:5c:9d:c2:50:c1:16:9c:
28:65:e8:ea:d8:a8:07:89:2f:e7:40:ca:27:91:45:7d:e9:c9:
77:bc:8f:f5:c5:14:28:de:da:08:5e:98:11:b5:bd:3c:21:c9:
aa:f7:4d:5a:7a:54:a6:22:8c:a4:7d:35:68:23:5a:66:b2:ce:
00:5f:23:80:41:5b:87:8e:97:ec:a8:0f:a5:92:59:12:f1:28:
f3:a3:29:a8:45:e9:ff:70:34:07:59:04:15:0e:27:9d:94:c3:
e2:3a:a5:45:e3:cb:f5:41:7e:5c:fe:14:d2:7d:df:2c:fc:19:
23:96:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:35:20 2024 by rpki-client on console.sobornost.net