Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d32b7f96-1cae-4859-b286-794c6a4ec57c.roa
File: d32b7f96-1cae-4859-b286-794c6a4ec57c.roa (raw, json)
Hash identifier: wSLjDLccpcRadGw/mRu3FmQxV1V0grcQy08BME7Um1A=
Subject key identifier: 77:80:9C:1A:75:BD:C6:72:15:C1:76:AA:FC:A7:E0:FB:1E:7A:49:4A
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7FC34F9D2CE3C796AEFC7B8F0FBE127C69EC4A5A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d32b7f96-1cae-4859-b286-794c6a4ec57c.roa
Signing time: Thu 23 May 2024 00:00:00 +0000
ROA not before: Thu 23 May 2024 00:00:00 +0000
ROA not after: Thu 27 Jun 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 13:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c3:4f:9d:2c:e3:c7:96:ae:fc:7b:8f:0f:be:12:7c:69:ec:4a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: May 23 00:00:00 2024 GMT
Not After : Jun 27 23:59:59 2024 GMT
Subject: serialNumber=aa90406dc2bb67f6e26bf2efc5319289147cd9d3c9073c4d9a7045787978f860, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:88:c8:95:d9:81:64:0d:9f:df:f5:98:7f:
28:d8:a5:65:95:f5:ac:90:23:39:22:a6:47:17:99:
9f:d6:41:bc:5c:f6:d2:70:9c:f4:09:2e:c2:8a:56:
e8:e2:a3:ac:0b:01:2d:0c:00:4b:19:fa:76:cf:e5:
c5:9c:a3:0e:23:99:88:08:61:50:01:e5:1f:7d:8a:
84:3e:14:7a:02:5b:7a:ae:55:27:33:fa:6d:61:8b:
68:3a:e2:04:b3:3b:4c:02:d3:d6:3e:18:c2:3b:af:
eb:6f:d1:a9:61:a0:0b:2b:1d:b7:d0:3d:fd:26:8e:
0b:2c:5f:37:01:cf:84:a2:c3:e0:2e:1a:1c:72:49:
22:b5:ab:e3:1f:a0:0b:a6:63:77:ce:da:ba:20:1a:
87:58:99:cf:4b:15:89:2f:3c:46:54:65:24:a7:4e:
21:a0:82:d8:af:ee:d3:15:fa:1f:ed:d6:58:a9:5e:
81:af:15:cc:67:65:36:c3:85:36:5a:6a:18:68:31:
e0:bd:1b:f3:78:d6:2f:39:85:2c:59:0e:cf:79:8e:
e9:9b:64:5e:58:e8:92:72:bb:48:a7:49:6d:6a:e3:
7f:b2:7f:b5:d6:17:0a:98:a6:f3:12:95:6d:af:33:
34:c2:0b:87:2f:cf:71:c6:03:fc:8b:a4:6f:10:e6:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:9C:1A:75:BD:C6:72:15:C1:76:AA:FC:A7:E0:FB:1E:7A:49:4A
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d32b7f96-1cae-4859-b286-794c6a4ec57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:19:e8:2f:d3:51:bb:7e:b6:83:18:1a:a4:9e:b5:78:45:ad:
cd:1a:46:db:cf:b7:56:5d:3c:ae:30:60:89:82:6d:db:46:a8:
7f:a7:8e:86:1f:55:f5:0a:d0:55:dd:16:d9:1c:0f:41:bb:0e:
5d:7c:4b:43:ea:23:8a:e5:e2:fa:b7:46:98:d9:6e:6b:71:db:
4c:73:18:b7:db:84:d5:f1:b4:97:8b:8e:7f:ca:d4:05:88:bd:
75:71:8b:15:e0:af:2e:79:d8:b7:1d:31:c6:df:14:36:87:12:
41:29:a4:58:ce:da:e0:81:76:1c:67:b2:28:17:fd:5b:87:68:
07:c4:d7:3c:e0:97:fe:d9:61:97:9f:0a:8b:2d:54:dc:c5:47:
d3:eb:76:bd:6a:15:bd:64:9b:32:51:1a:a2:10:d6:4f:13:79:
a9:d7:fa:ad:3b:1c:d7:ae:2e:25:2c:44:7a:4d:8b:bc:3c:c6:
f5:ac:a6:1b:d6:62:84:22:97:87:36:c6:9b:71:89:4f:48:f2:
81:f2:86:12:69:08:f3:8f:f8:04:d0:c0:f4:61:94:75:33:25:
ba:0a:2d:bc:17:b5:6d:9f:38:ec:c8:a4:12:f0:d2:8c:04:a5:
38:08:fc:57:33:1e:d3:18:cc:ed:a7:e5:95:ec:0f:86:72:aa:
92:9a:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:02:41 2024 by rpki-client on console.sobornost.net