Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dea7c1f0-1d16-4d1d-8458-c9b0915df1c6.roa
File: dea7c1f0-1d16-4d1d-8458-c9b0915df1c6.roa (raw, json)
Hash identifier: 9zjHm9rjHyC1MjibUnDssXTK1NuXaQCw75/6KHSJ4A4=
Subject key identifier: ED:6B:49:7A:FD:E2:02:1C:CC:14:22:9A:DA:ED:98:20:A1:DF:FB:00
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6E3C1969F3932567019C20328E68D54E8D7E986E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dea7c1f0-1d16-4d1d-8458-c9b0915df1c6.roa
Signing time: Mon 11 Dec 2023 00:00:00 +0000
ROA not before: Mon 11 Dec 2023 00:00:00 +0000
ROA not after: Mon 15 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3c:19:69:f3:93:25:67:01:9c:20:32:8e:68:d5:4e:8d:7e:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 11 00:00:00 2023 GMT
Not After : Jan 15 23:59:59 2024 GMT
Subject: serialNumber=9c43305b4fdc260e3dbdb425a064d33432ba04141a307cef534d3a22fa1fa2f4, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:46:85:bb:89:51:a2:1e:93:ec:0a:ad:96:
c6:06:55:33:32:1e:7d:b6:2a:de:79:35:ac:8d:d4:
78:5d:aa:63:6e:ce:c7:3b:f3:50:43:9a:fc:09:bb:
19:9d:5a:3b:7c:12:8c:1a:2b:48:a7:8b:54:02:05:
d8:83:33:9c:f0:4d:8a:8b:92:b4:8b:30:bd:43:34:
86:22:af:fe:92:2c:84:dd:b1:c8:89:7b:00:50:4a:
b7:fe:da:07:43:b4:f2:d0:f6:38:87:f1:46:4b:57:
6f:c1:2e:1f:61:40:19:77:13:db:3f:7b:e7:fe:c9:
4d:2c:c6:5d:97:0c:bf:74:2c:8c:d5:e5:3d:be:26:
f6:d5:78:84:af:e6:6a:5a:5f:60:d3:3e:f7:52:c6:
2e:e9:14:83:57:7d:c4:3d:be:46:94:33:28:63:39:
24:8d:dc:59:5d:59:f4:cd:9c:75:1a:a4:12:11:03:
eb:cd:80:c8:d8:c5:18:d1:ff:c8:78:61:0f:65:bb:
82:15:e3:2c:2e:54:70:67:de:aa:b8:5a:d6:d0:85:
68:b9:ce:d6:d8:3c:53:10:08:a0:88:7e:6d:2f:ae:
b4:44:e8:ca:db:01:ad:36:30:ff:60:df:40:72:4d:
06:15:84:3a:ae:48:fd:e9:52:83:9f:33:95:db:81:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6B:49:7A:FD:E2:02:1C:CC:14:22:9A:DA:ED:98:20:A1:DF:FB:00
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/dea7c1f0-1d16-4d1d-8458-c9b0915df1c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:94:46:31:0f:7f:2a:54:81:97:de:c1:df:c6:3c:f9:b2:46:
ec:16:90:07:71:a6:e7:63:35:31:12:db:ed:5b:18:d3:dc:25:
c4:49:91:ec:db:13:d1:6d:7b:80:5e:db:b1:f3:7b:59:6c:1c:
97:77:73:96:17:19:25:66:8f:83:d0:8e:8c:28:f2:50:01:41:
4f:90:07:81:71:5e:4b:29:ee:43:0d:29:af:a4:fd:1a:13:47:
74:ff:0e:fe:c7:62:60:8c:a8:6e:0a:b7:81:72:5f:2e:63:8b:
1b:70:08:10:5e:de:c3:fa:42:f7:2a:47:48:cb:a4:a4:45:d6:
4a:a7:e0:fc:09:ed:27:45:11:23:50:50:d9:29:59:c0:cc:f1:
b3:90:47:1c:f2:05:af:06:bb:13:d7:15:87:59:d2:28:c3:74:
a1:12:dc:ed:3b:26:ac:ce:09:f0:d3:03:30:11:0e:11:18:03:
c6:17:44:1f:5b:a4:8c:6b:65:78:76:3b:2f:24:5a:83:c9:7c:
f4:ec:70:db:8d:ed:dd:e6:92:f1:14:04:06:a6:50:7d:aa:16:
51:7c:d4:ba:f8:da:24:15:c3:03:6d:48:d6:5c:34:83:4f:60:
b9:b9:fe:ef:19:32:e3:af:e6:f6:a1:7c:04:60:52:0d:57:02:
07:fd:6f:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbjwZafOTJWcBnCAyjmjVTo1+mG4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjExMDAwMDAwWhcNMjQwMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YzQzMzA1YjRmZGMyNjBlM2RiZGI0MjVhMDY0ZDMzNDMy
YmEwNDE0MWEzMDdjZWY1MzRkM2EyMmZhMWZhMmY0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjyUaFu4lRoh6T7AqtlsYGVTMyHn22Kt55NayN1HhdqmNu
zsc781BDmvwJuxmdWjt8EowaK0ini1QCBdiDM5zwTYqLkrSLML1DNIYir/6SLITd
sciJewBQSrf+2gdDtPLQ9jiH8UZLV2/BLh9hQBl3E9s/e+f+yU0sxl2XDL90LIzV
5T2+JvbVeISv5mpaX2DTPvdSxi7pFINXfcQ9vkaUMyhjOSSN3FldWfTNnHUapBIR
A+vNgMjYxRjR/8h4YQ9lu4IV4ywuVHBn3qq4WtbQhWi5ztbYPFMQCKCIfm0vrrRE
6MrbAa02MP9g30ByTQYVhDquSP3pUoOfM5XbgbsZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7WtJev3iAhzMFCKa2u2YIKHf+wAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2RlYTdjMWYwLTFkMTYtNGQxZC04NDU4LWM5YjA5MTVkZjFjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAKWURjEPfypUgZfewd/GPPmyRuwW
kAdxpudjNTES2+1bGNPcJcRJkezbE9Fte4Be27Hze1lsHJd3c5YXGSVmj4PQjowo
8lABQU+QB4FxXksp7kMNKa+k/RoTR3T/Dv7HYmCMqG4Kt4FyXy5jixtwCBBe3sP6
QvcqR0jLpKRF1kqn4PwJ7SdFESNQUNkpWcDM8bOQRxzyBa8GuxPXFYdZ0ijDdKES
3O07JqzOCfDTAzARDhEYA8YXRB9bpIxrZXh2Oy8kWoPJfPTscNuN7d3mkvEUBAam
UH2qFlF81Lr42iQVwwNtSNZcNINPYLm5/u8ZMuOv5vahfARgUg1XAgf9b2o=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:15 2023 by rpki-client on console.sobornost.net