Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd93fdeb-5d58-44d8-ba0a-a563e0303cab.roa
File:                     cd93fdeb-5d58-44d8-ba0a-a563e0303cab.roa (raw, json)
Hash identifier:          vQQ8WcwIOG2m9Uwxu3DlI930wj8IYjb4cMltlXeN0D4=
Subject key identifier:   C5:2F:5F:F5:5C:00:70:8B:0F:46:DD:C4:8A:FB:D9:6B:51:84:5F:E4
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       20893B624B4D3578C86B4D075E0B6A80323CE63A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd93fdeb-5d58-44d8-ba0a-a563e0303cab.roa
Signing time:             Mon 13 May 2024 00:00:00 +0000
ROA not before:           Mon 13 May 2024 00:00:00 +0000
ROA not after:            Mon 17 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 20:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:89:3b:62:4b:4d:35:78:c8:6b:4d:07:5e:0b:6a:80:32:3c:e6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 13 00:00:00 2024 GMT
            Not After : Jun 17 23:59:59 2024 GMT
        Subject: serialNumber=273d59ff0eccf35fd312a26615d11d8e62566cfeacd0cb84884ad8a44abeb0c0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:8c:de:11:65:f5:70:53:15:3f:8c:b1:dc:
                    cc:39:51:57:cf:9e:53:da:42:f9:ef:d7:31:39:8f:
                    4f:66:f4:62:bb:b4:2c:bc:3b:3a:3b:ff:a1:66:70:
                    5d:4c:90:ce:99:a5:20:66:c5:c6:27:1c:3b:a9:49:
                    ff:21:1f:45:91:bb:c5:50:eb:2e:6b:e6:7b:0d:82:
                    70:98:62:80:4e:f8:34:b5:4c:24:98:c3:96:f3:42:
                    5c:03:55:0d:88:27:d9:77:6f:8a:21:60:12:4a:d1:
                    70:25:e5:15:bd:45:c8:fd:5c:93:7f:21:f8:65:11:
                    41:23:19:3f:32:bf:44:c2:bb:e4:0f:6b:9c:98:40:
                    41:af:0a:99:50:c0:55:78:75:3c:3b:7a:3b:70:02:
                    ff:dc:29:d2:17:e1:9e:0e:d2:62:6e:fd:71:d6:84:
                    38:a6:ba:8f:b7:e0:fb:f4:c8:93:66:08:6e:9d:20:
                    be:ef:9d:e4:7d:9a:a9:bf:27:52:a6:95:48:4a:3f:
                    8d:d4:d6:5e:60:87:68:86:c2:36:a7:2e:f5:de:a5:
                    d5:1f:54:36:02:0d:81:86:0e:28:b5:61:c4:35:ab:
                    e8:ad:4d:0f:18:96:a8:5f:e9:05:21:b3:c3:e9:8f:
                    f0:38:c3:50:74:3c:a7:38:92:4b:6b:fb:bc:6b:52:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2F:5F:F5:5C:00:70:8B:0F:46:DD:C4:8A:FB:D9:6B:51:84:5F:E4
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cd93fdeb-5d58-44d8-ba0a-a563e0303cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:86:48:19:d0:ff:25:4b:73:7f:ef:22:06:3d:96:7a:36:
         d4:b9:43:53:22:bb:60:8a:e1:ad:5e:b7:aa:9b:1f:1f:30:33:
         2e:b5:7c:65:42:76:da:c0:aa:f3:cb:89:ef:a7:b1:2d:da:73:
         9c:72:99:ee:d5:34:dc:38:31:f0:9e:4f:c0:2c:55:dc:b9:ae:
         34:1f:c0:3c:7d:59:07:eb:c6:24:38:77:6a:8a:bd:63:bd:b7:
         83:4c:e4:cd:e9:29:c0:80:6e:d5:ce:d3:1a:b6:d3:4c:6c:29:
         37:b1:85:a2:a1:4e:a1:6d:0d:3e:05:a5:c9:29:b6:2f:76:11:
         e5:a0:74:2a:33:55:ee:d4:72:c6:dd:a3:7d:f4:dc:e2:53:b7:
         b8:72:b0:a7:6b:8e:cd:44:ed:dc:57:45:2c:ef:aa:83:84:78:
         70:4d:7d:e5:6c:05:9b:12:0f:45:c5:5b:45:d9:0c:67:55:9e:
         f0:e1:11:2a:2a:ac:5d:3e:b7:35:44:90:05:fc:f0:f1:f9:1c:
         97:2c:5f:d4:db:a5:8e:67:8e:93:e8:85:50:98:d1:7b:49:cd:
         34:8e:49:16:9c:dd:61:8a:06:8d:59:2d:c4:86:d9:56:2b:ee:
         f5:6d:26:f3:33:33:7a:4f:05:63:8d:dc:b9:ba:ff:65:ab:50:
         96:1f:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 23:37:17 2024 by rpki-client on console.sobornost.net