Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3df1f0c-2a34-4d35-9bc5-b8e0d61e2be0.roa
File: e3df1f0c-2a34-4d35-9bc5-b8e0d61e2be0.roa (raw, json)
Hash identifier: fqcqY69zvZ+f++K8l0QJTgxzMYJOPQLcoUXkKlFxFi8=
Subject key identifier: 0C:33:11:84:90:AB:A0:A5:76:3E:DA:45:96:56:EF:99:C2:14:86:11
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 1C5CE5568B8412B0AC705B2A960B513CDBCD39AA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3df1f0c-2a34-4d35-9bc5-b8e0d61e2be0.roa
Signing time: Wed 29 Nov 2023 00:00:00 +0000
ROA not before: Wed 29 Nov 2023 00:00:00 +0000
ROA not after: Wed 03 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5c:e5:56:8b:84:12:b0:ac:70:5b:2a:96:0b:51:3c:db:cd:39:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 29 00:00:00 2023 GMT
Not After : Jan 3 23:59:59 2024 GMT
Subject: serialNumber=b98d7b4460a7ce955ac887365c9f771c5140d555273a0c2eef05c8f0e01524eb, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:d6:de:e5:d8:3a:35:33:1f:a8:cb:b6:f8:
2e:6c:0d:86:f0:1a:bf:b3:55:94:4b:25:a9:6f:b6:
ec:d5:fc:2e:ee:96:b7:d3:48:52:d8:07:38:7f:83:
97:10:a9:e4:9d:48:a3:69:aa:95:7e:b3:1d:de:ab:
24:63:69:1d:50:82:07:31:db:b9:a0:44:65:83:3f:
1f:f6:9c:34:6c:84:45:e0:c8:51:11:ad:dd:fd:fe:
8a:3b:52:63:9a:ac:34:49:10:f8:25:36:3f:1c:7c:
31:e1:a2:c8:4a:35:b3:33:23:ee:df:2f:6b:e7:fb:
b2:46:c0:9c:38:cb:c2:2b:92:9d:6b:42:bf:2a:b0:
6b:4e:9e:c8:d7:1b:b6:5e:e3:25:e0:2a:2c:1b:63:
19:26:3e:8d:13:86:80:54:a9:73:ff:df:c2:a5:6e:
ea:45:d5:b4:d8:81:40:5a:5e:32:6d:79:9e:87:e2:
51:c7:d6:f5:f7:ca:73:82:5b:8d:c7:b5:1a:05:1b:
39:1e:0d:a1:3a:a8:8c:e7:69:25:d8:be:5e:9f:51:
a8:7e:0e:8c:7a:e9:e2:7a:f8:48:3a:da:69:b2:16:
f9:de:eb:95:20:e3:17:c0:11:6e:ff:08:38:4d:28:
7d:cd:6b:da:47:31:f0:f0:44:3e:70:1b:1f:00:ab:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:11:84:90:AB:A0:A5:76:3E:DA:45:96:56:EF:99:C2:14:86:11
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3df1f0c-2a34-4d35-9bc5-b8e0d61e2be0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:86:f2:11:69:35:04:be:0c:6e:be:95:92:f9:6e:fd:a4:10:
f8:2f:27:96:1b:49:18:19:04:03:41:01:17:2c:8b:fc:25:45:
0b:32:80:02:b1:27:51:6d:f9:f8:ef:69:6a:58:5d:bb:da:91:
e4:33:13:00:b4:a0:65:c4:97:01:b2:ab:b3:16:19:3c:d9:d5:
8a:bd:04:01:88:d6:7b:fc:9d:f3:5d:23:2c:f4:87:63:38:9e:
94:35:20:41:a5:e7:ea:6f:1d:42:8e:14:52:2c:0a:e6:a0:4a:
22:12:e2:ea:64:e1:cf:f6:21:d4:5d:c0:59:a9:40:f6:95:ae:
85:81:35:13:c4:68:f7:b5:d0:29:78:ff:18:db:0a:44:0f:10:
52:86:1a:e1:d9:f6:62:9d:34:6d:03:c1:41:db:c0:f0:f0:7e:
5d:5c:12:55:d2:df:8d:d0:a0:86:b2:9b:c2:3c:2d:83:d9:ad:
cc:13:58:fe:a0:b1:6c:6c:58:85:ea:17:c9:0c:e5:9a:81:e1:
24:15:57:64:ac:13:b2:54:9b:b8:58:52:36:81:f1:b5:a0:18:
07:6e:05:32:44:85:4c:a7:11:d9:13:f7:5e:65:a4:43:65:f4:
92:c8:0a:46:b0:e7:27:4a:0a:52:2f:2a:ba:0f:5d:f8:14:21:
1e:74:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:16 2023 by rpki-client on console.sobornost.net