Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7bbfb65-6919-4109-b937-ca025a8a4d35.roa
File: d7bbfb65-6919-4109-b937-ca025a8a4d35.roa (raw, json)
Hash identifier: A2wGxsufqq5+0YVz6+Eae4iidjCu5Vd4EAphKVkplTs=
Subject key identifier: C0:5C:83:E3:D9:B7:2E:9A:6F:7F:55:96:E4:4C:78:3C:36:42:6B:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6743938B11F0C0EEEAAEF6E207615B156ACC3DC0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7bbfb65-6919-4109-b937-ca025a8a4d35.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:43:93:8b:11:f0:c0:ee:ea:ae:f6:e2:07:61:5b:15:6a:cc:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: serialNumber=f62f6a693f947643b548d379a7be608b88c950ec126656ba832136434de263ec, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:55:5c:df:7c:d7:24:36:a0:46:f2:10:28:
65:51:99:16:0d:49:07:e0:b9:52:02:bc:40:cb:01:
ce:e2:6d:4b:b4:22:0e:b2:78:ce:d9:f7:a1:78:e9:
f4:52:5e:85:69:61:f7:4c:36:00:65:fd:e3:fc:e6:
92:f3:8a:d2:9b:ed:2c:f8:39:6b:82:8d:e9:12:3b:
66:5f:51:f4:36:42:c6:7b:1c:5f:78:e5:e5:bb:30:
d2:dd:87:49:7d:e7:6e:3a:2b:a3:d9:56:73:62:27:
63:3d:c5:df:ec:e7:16:eb:b1:38:dd:57:e2:b4:5a:
48:33:12:cf:18:39:6c:e0:3d:65:fd:96:6d:5c:c0:
f2:64:c7:c1:14:69:e0:c6:e2:68:68:96:60:4e:46:
ac:65:3f:0a:ae:88:41:93:fd:4e:60:0d:ae:c8:dd:
06:d2:f4:50:21:94:c4:91:4a:6d:70:d4:fe:f6:4e:
bc:89:af:f8:ed:e9:7e:0c:27:33:28:bd:b1:d9:bc:
1c:d4:b9:c9:a2:bc:1b:aa:f8:44:58:e6:a8:b0:c5:
9e:ae:b6:ab:85:16:1b:0b:51:98:cc:c5:a7:05:ad:
60:7d:50:6b:da:d6:0f:a5:43:5d:74:d2:11:d4:63:
2d:18:a4:21:d7:61:74:62:e2:af:d7:7f:eb:ab:85:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5C:83:E3:D9:B7:2E:9A:6F:7F:55:96:E4:4C:78:3C:36:42:6B:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d7bbfb65-6919-4109-b937-ca025a8a4d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0e:aa:1b:35:73:c5:e8:7d:a9:77:fa:7d:57:c6:2d:b3:21:
bb:be:a4:4e:39:cc:fa:dd:86:1f:52:32:23:7d:6b:6f:f3:2c:
33:31:8d:aa:37:75:ea:d0:1f:6d:62:a8:5b:ee:52:a0:9a:b2:
23:b8:1a:b5:6e:7a:9e:00:26:f6:01:69:aa:43:e2:4b:7b:0f:
59:ab:8e:a9:9a:1b:b9:34:9d:b2:4d:9a:a4:4d:1d:82:96:aa:
3c:df:0c:e9:54:59:b3:59:a3:59:c5:3a:3f:d8:e6:dc:b4:f3:
d5:f8:16:b2:49:ac:5b:8d:5f:50:d4:9b:8e:b2:9e:89:0b:f8:
b9:ff:ec:52:36:d2:05:f2:e7:11:be:77:d7:13:bf:74:be:be:
ca:eb:0c:1a:16:2e:2f:b6:c6:88:cf:7d:b6:ee:45:28:29:73:
6d:de:4b:ba:65:a5:74:e2:44:ca:e4:d3:fd:73:2e:46:27:87:
cc:d5:c9:fc:b9:ee:5d:0a:ad:05:ba:54:5d:f6:c9:b4:58:c9:
95:82:a3:43:cf:6f:2c:16:0a:d9:81:5b:ff:a1:40:03:83:23:
0f:54:03:0f:f8:0a:18:a9:e9:b2:16:20:de:4d:81:01:28:55:
85:f0:35:e5:c9:4e:c5:04:bc:ce:ed:7e:d1:33:95:6e:bc:ae:
7b:26:26:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ0OTixHwwO7qrvbiB2FbFWrMPcAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTI5MDAwMDAwWhcNMjQwMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjJmNmE2OTNmOTQ3NjQzYjU0OGQzNzlhN2JlNjA4Yjg4
Yzk1MGVjMTI2NjU2YmE4MzIxMzY0MzRkZTI2M2VjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLulVc33zXJDagRvIQKGVRmRYNSQfguVICvEDLAc7ibUu0
Ig6yeM7Z96F46fRSXoVpYfdMNgBl/eP85pLzitKb7Sz4OWuCjekSO2ZfUfQ2QsZ7
HF945eW7MNLdh0l95246K6PZVnNiJ2M9xd/s5xbrsTjdV+K0WkgzEs8YOWzgPWX9
lm1cwPJkx8EUaeDG4mholmBORqxlPwquiEGT/U5gDa7I3QbS9FAhlMSRSm1w1P72
TryJr/jt6X4MJzMovbHZvBzUucmivBuq+ERY5qiwxZ6utquFFhsLUZjMxacFrWB9
UGva1g+lQ1100hHUYy0YpCHXYXRi4q/Xf+urhVLhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwFyD49m3Lppvf1WW5Ex4PDZCa6gwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q3YmJmYjY1LTY5MTktNDEwOS1iOTM3LWNhMDI1YThhNGQzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAK4Oqhs1c8Xofal3+n1Xxi2zIbu+
pE45zPrdhh9SMiN9a2/zLDMxjao3derQH21iqFvuUqCasiO4GrVuep4AJvYBaapD
4kt7D1mrjqmaG7k0nbJNmqRNHYKWqjzfDOlUWbNZo1nFOj/Y5ty089X4FrJJrFuN
X1DUm46ynokL+Ln/7FI20gXy5xG+d9cTv3S+vsrrDBoWLi+2xojPfbbuRSgpc23e
S7plpXTiRMrk0/1zLkYnh8zVyfy57l0KrQW6VF32ybRYyZWCo0PPbywWCtmBW/+h
QAODIw9UAw/4Chip6bIWIN5NgQEoVYXwNeXJTsUEvM7tftEzlW68rnsmJlk=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net