Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc74cf8b-e8a6-4b06-824e-44e07587a4cc.roa
File: cc74cf8b-e8a6-4b06-824e-44e07587a4cc.roa (raw, json)
Hash identifier: pj2856rkvXZ03p/tlC6CsHYTS5FemCGyKZ8kVnohTYU=
Subject key identifier: 49:F2:10:FA:13:81:8B:2E:D2:CC:4B:68:86:1F:C1:7B:26:BE:8C:8A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 175062D17A83120E127CBEC8E5DF29F4FDAB1807
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc74cf8b-e8a6-4b06-824e-44e07587a4cc.roa
Signing time: Mon 27 Nov 2023 00:00:00 +0000
ROA not before: Mon 27 Nov 2023 00:00:00 +0000
ROA not after: Mon 01 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:50:62:d1:7a:83:12:0e:12:7c:be:c8:e5:df:29:f4:fd:ab:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 27 00:00:00 2023 GMT
Not After : Jan 1 23:59:59 2024 GMT
Subject: serialNumber=86ca9580edd9f239dc174f1c550b074bd2fb7565eb05066ed291d53449124bdb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:8f:88:95:03:65:79:36:b6:d2:a9:f6:fd:
73:22:1c:7e:db:4d:76:b3:58:26:45:95:94:91:77:
11:44:3f:62:92:0e:0b:8c:6f:a3:5a:13:b3:40:5c:
72:51:11:29:af:5d:a1:66:9d:4d:98:39:3f:79:21:
2b:9c:6e:8b:0d:37:a2:0f:3a:e1:b3:31:76:05:4e:
cd:80:41:c6:a9:fa:f3:83:9b:02:b5:3e:97:94:fa:
43:1a:00:cf:6f:7c:73:7c:83:c3:bc:5a:36:c7:e9:
86:49:f9:c9:4c:f2:78:8f:6d:5f:06:82:5a:59:1b:
c1:4c:c0:70:24:30:74:54:37:2c:fa:0f:4b:c0:9a:
58:2f:44:6f:a6:83:60:36:be:16:87:2e:03:15:f6:
cb:0d:8f:f4:7b:7c:cd:f9:14:52:a6:bf:59:be:38:
20:2e:a1:d4:1e:dc:dc:cc:60:3f:8e:19:f6:eb:8e:
1a:c4:9d:dc:87:f3:84:07:5f:48:23:55:78:dd:d0:
1d:c3:1d:f8:00:6d:8f:fa:98:e8:42:25:30:6a:2c:
37:6d:33:ae:31:67:8c:d0:b6:fe:21:c3:21:ce:8b:
27:cd:22:61:18:61:1f:c1:18:16:1b:60:0f:b1:1b:
05:59:17:f6:9b:02:0f:cc:e1:ae:14:96:e2:dd:be:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:10:FA:13:81:8B:2E:D2:CC:4B:68:86:1F:C1:7B:26:BE:8C:8A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc74cf8b-e8a6-4b06-824e-44e07587a4cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
98:36:6c:dc:6e:fa:66:77:cf:07:b5:bc:27:f7:c9:88:13:a6:
72:1b:37:ae:1f:a1:fc:9b:f4:20:d4:e8:fa:a4:6f:70:76:bd:
aa:70:8b:28:f7:7c:39:b9:54:c9:ba:ac:41:04:f3:16:1b:61:
f1:2c:b6:7c:62:6d:c1:ef:a9:b6:ae:72:82:fe:9d:f9:96:9b:
68:2d:0f:9f:f7:ea:04:08:e4:2c:98:85:8a:11:83:83:b7:91:
08:fc:25:a6:3e:1e:69:59:03:e5:86:04:a4:5c:db:cf:00:43:
f9:fb:f7:06:19:e5:c7:9c:e8:27:62:60:4e:b9:02:00:de:99:
d9:f9:86:47:9c:5b:81:87:31:7c:7c:38:90:2d:51:7c:24:9b:
ee:a1:b6:a3:46:0e:3c:82:5e:08:b1:7d:af:e5:48:84:b5:f7:
c3:4a:38:be:a4:aa:ad:5c:e4:32:4e:eb:49:40:98:2a:d5:57:
fe:24:01:de:c8:3a:19:c3:79:3c:45:46:1e:a3:8f:d8:1d:26:
4a:46:f4:ec:90:66:88:35:e1:30:4f:a1:15:c3:dd:b6:cc:4c:
03:cc:c0:55:95:67:c8:07:09:33:fe:e3:45:4a:51:54:d4:d5:
9b:4a:1b:15:04:f0:c2:6a:65:d6:59:91:08:21:d8:4a:7b:00:
51:c1:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:14 2023 by rpki-client on console.sobornost.net