Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d05459fe-2b78-41a1-a2d8-5942ed80086c.roa
File: d05459fe-2b78-41a1-a2d8-5942ed80086c.roa (raw, json)
Hash identifier: /bacFoUHtCAkjbxzTpllscFJ8mvn/yoVVh/84iYym5w=
Subject key identifier: 7D:B0:3D:0E:A0:93:91:C5:FB:1C:A8:8A:1E:70:11:1A:07:E7:29:06
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 142D44DF80734764177D7D820B09CC52324A3C26
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d05459fe-2b78-41a1-a2d8-5942ed80086c.roa
Signing time: Sun 31 Dec 2023 00:00:00 +0000
ROA not before: Sun 31 Dec 2023 00:00:00 +0000
ROA not after: Sun 04 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2d:44:df:80:73:47:64:17:7d:7d:82:0b:09:cc:52:32:4a:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 31 00:00:00 2023 GMT
Not After : Feb 4 23:59:59 2024 GMT
Subject: serialNumber=5ec29f207111261511c7632f73d33f061f04cfcd25e38fa038992c23d657cfd7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:8d:f9:2e:fd:cf:73:ac:35:7f:cf:f2:0b:
ed:b8:99:a7:60:40:49:51:eb:36:cc:1d:6a:3d:03:
47:f0:31:94:2b:28:b6:b3:a6:6c:4e:3c:e5:fc:bb:
fb:90:14:0a:b1:75:21:cc:be:50:67:b5:04:41:78:
ab:44:e6:93:45:ca:77:87:8d:04:6d:42:65:9d:7c:
9a:6a:09:09:a5:a1:0a:cb:3c:d3:7e:f4:0e:9f:b2:
ef:d0:e8:5b:20:70:fa:f9:51:7b:1a:c6:1a:48:73:
bf:fb:5a:be:de:9c:a2:bd:86:19:1e:32:04:00:e7:
a4:d7:4e:b4:ef:38:1f:84:75:17:99:4a:11:f0:0d:
f6:5d:5b:be:c6:13:18:1b:85:04:c4:cf:49:30:3c:
14:5e:5c:07:cf:71:ec:4b:1d:2c:89:c7:f7:57:bc:
ca:bc:9a:9a:1f:ef:05:11:34:b9:39:e2:c4:0b:62:
7e:c2:8b:68:0e:b8:a7:c7:72:70:84:2d:40:ea:51:
dd:51:5d:54:5b:66:41:ff:91:e7:b3:21:12:96:11:
d8:f4:1d:4a:28:db:06:bc:50:af:ec:47:3e:67:ee:
13:97:69:2e:0b:2d:d6:c4:4e:f2:1c:1b:6d:93:bf:
b2:36:48:0e:f1:eb:c2:20:99:e0:4e:28:26:ed:de:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:3D:0E:A0:93:91:C5:FB:1C:A8:8A:1E:70:11:1A:07:E7:29:06
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d05459fe-2b78-41a1-a2d8-5942ed80086c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:07:98:8f:1f:2e:40:3d:81:a7:41:17:fe:8d:dc:5c:54:6c:
0a:84:b3:95:0d:86:b1:45:4f:cd:c5:75:89:52:62:70:b8:f9:
d3:99:82:12:8b:3a:97:f4:ce:9e:dd:33:39:fc:92:3d:d7:ad:
43:d8:1f:a0:b9:41:5a:8c:4f:44:50:d8:ab:e7:2b:f4:a7:8e:
25:1e:6c:2e:43:7f:07:7f:1e:0b:17:01:40:1b:91:b2:16:e3:
e5:4e:f8:33:21:3c:2d:a2:76:1b:b7:92:93:8f:86:f4:fc:56:
bf:3f:e6:70:60:d6:cd:2f:47:cf:7c:98:a2:e2:1b:d4:a2:b3:
b1:89:b0:6d:bb:f7:4c:66:01:3d:77:ae:82:53:ae:0e:d6:29:
8e:36:e9:c4:0c:2b:8b:d7:58:e4:c0:a0:3f:f3:35:01:d9:81:
36:7b:e4:51:eb:aa:8d:d8:9f:83:8b:0b:11:49:93:c4:39:37:
07:9f:59:dc:f0:26:b6:d6:ef:2a:cc:0b:de:c5:36:45:49:4a:
ca:fe:fc:7a:22:70:61:b8:5b:2e:68:32:98:95:23:65:bb:c3:
e8:63:c9:e5:d8:67:81:dd:1f:53:43:87:5a:7b:3b:4d:6a:eb:
b1:85:76:5c:2b:25:3a:fa:7a:d7:7b:ea:4f:89:27:95:a5:f3:
1a:f2:b6:ec
-----BEGIN CERTIFICATE-----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Generated at Sun Dec 31 23:16:30 2023 by rpki-client on console.sobornost.net