Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4b3028e-06e8-4e86-9692-27f893023ba5.roa
File: e4b3028e-06e8-4e86-9692-27f893023ba5.roa (raw, json)
Hash identifier: KStGMjww4XKqtVrEWoz5euQpACzUoiBzllrsViMzAYg=
Subject key identifier: 1E:8E:4E:C9:C8:03:05:59:CE:00:60:3B:D6:54:57:7C:49:6D:0F:94
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 70FDDEC8709B3F0E89C7704C5DF54A08D6A57D7A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4b3028e-06e8-4e86-9692-27f893023ba5.roa
Signing time: Mon 15 Apr 2024 00:00:00 +0000
ROA not before: Mon 15 Apr 2024 00:00:00 +0000
ROA not after: Mon 20 May 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 15:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fd:de:c8:70:9b:3f:0e:89:c7:70:4c:5d:f5:4a:08:d6:a5:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 15 00:00:00 2024 GMT
Not After : May 20 23:59:59 2024 GMT
Subject: serialNumber=bf790ace3577e91e535499ad95c5bc42b4ff2d144e68d65750d6d8a31a02847e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:9c:d5:ac:e7:39:9c:9a:2b:5d:09:21:9f:
b9:77:26:79:58:48:aa:da:67:75:bb:62:ff:42:43:
8a:49:02:8d:97:35:40:c5:13:19:ba:3c:d5:a2:dd:
a0:28:28:e9:8f:05:67:3d:f6:c0:dc:5d:8c:ac:dc:
0e:40:c5:1c:ae:2e:b7:c0:a9:25:d0:2c:64:ea:dc:
c6:3d:c8:8a:bc:f4:a0:30:8f:15:e5:77:22:bc:17:
73:eb:2f:50:a8:60:1a:b2:d8:5c:2e:2e:9e:c3:18:
f9:cf:47:0f:84:c9:ab:9b:1d:14:6c:eb:e1:da:b4:
70:e3:fc:f9:d5:4b:41:7e:a7:cb:41:6d:9f:b4:64:
56:7f:16:b3:92:8c:44:aa:28:1c:d7:f8:3b:2f:70:
93:0e:cd:87:23:32:23:6e:d6:e1:8e:0c:2b:2f:c9:
ec:f1:54:c5:1f:d8:85:45:12:29:c0:b7:52:f5:d5:
20:df:0b:d2:fe:ae:2b:4b:19:5e:13:78:2a:e0:4a:
73:ef:c9:f6:2d:36:30:ee:38:17:58:3e:39:9d:7f:
90:24:c2:bd:24:d9:b6:f0:c1:5e:55:e3:2a:7f:f7:
dc:7c:25:89:2e:90:25:dd:f6:69:60:05:f9:ed:1b:
3e:d5:e9:47:32:5c:cd:9b:97:97:ab:d5:8b:c2:d4:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:4E:C9:C8:03:05:59:CE:00:60:3B:D6:54:57:7C:49:6D:0F:94
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e4b3028e-06e8-4e86-9692-27f893023ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:22:7b:18:b6:b1:2f:87:01:08:fd:d7:ba:98:a7:12:2f:
18:ea:64:d8:c8:9a:f3:7b:3a:77:29:a0:ae:91:0b:e6:b6:c5:
88:3c:fb:1c:07:a9:91:57:71:2b:a8:b7:99:46:f9:52:fd:51:
45:38:b3:17:74:fa:0c:09:68:74:c8:c6:b4:b5:b2:56:39:5c:
c9:b0:cb:99:f5:4c:e3:b7:f4:ac:a2:81:3e:89:47:bb:b8:9c:
7b:32:6b:cb:22:4b:fc:48:43:cb:40:4d:87:6f:0d:43:05:df:
fb:76:73:cf:22:15:e4:90:1a:bc:f3:d3:12:e2:47:1b:60:54:
34:af:a4:48:3c:a7:8d:fc:ac:34:94:29:33:5e:40:3b:4c:78:
ae:af:3c:0a:13:f8:51:28:c8:2c:5d:98:32:0b:5b:43:ad:20:
bd:dc:7a:00:86:e4:80:39:6b:71:fe:55:64:34:a0:17:0f:98:
24:5a:96:27:9a:e7:f6:1e:73:8e:23:8e:a2:9c:2f:a0:8b:1c:
52:ef:31:d3:ec:6f:4a:38:de:cd:64:3e:90:49:8d:9b:37:13:
6c:40:dd:8e:bd:70:e7:b3:6e:ed:7a:13:65:e3:fb:45:7a:7f:
27:0f:7e:85:d4:00:c3:2d:58:1f:72:36:6d:89:bb:d2:07:87:
d4:b3:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:45 2024 by rpki-client on console.sobornost.net