Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec26a65f-35c6-4cee-96ef-fe310771118e.roa
File: ec26a65f-35c6-4cee-96ef-fe310771118e.roa (raw, json)
Hash identifier: AWe3WMUnliBgUzIXZfs0x1qO331C0WVIjOhJP9DISJU=
Subject key identifier: 21:C7:9F:9D:86:66:F9:61:64:EE:9C:42:EE:23:D8:C6:A5:6F:44:48
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 480516B8A6952D922F693F5C5DDE3CA01D1196DE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec26a65f-35c6-4cee-96ef-fe310771118e.roa
Signing time: Sun 26 Nov 2023 00:00:00 +0000
ROA not before: Sun 26 Nov 2023 00:00:00 +0000
ROA not after: Sun 31 Dec 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:05:16:b8:a6:95:2d:92:2f:69:3f:5c:5d:de:3c:a0:1d:11:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Nov 26 00:00:00 2023 GMT
Not After : Dec 31 23:59:59 2023 GMT
Subject: serialNumber=27ce1313534f1377cc04d2a6b17e27b04742f5f128a469b640225199934fc2fe, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:d4:22:78:a5:5e:3e:9b:93:84:52:c0:94:
26:57:96:96:db:02:15:76:b3:00:81:7c:7d:3e:30:
07:64:3b:24:36:17:28:8a:a1:80:e6:23:ef:52:26:
ea:55:f5:28:75:a2:f0:20:c7:14:ab:de:b0:a2:48:
0e:3b:7d:dc:0f:b9:28:0a:90:70:61:47:59:a8:41:
1f:9e:c2:c2:bb:89:95:39:32:41:40:b1:df:a2:63:
e8:02:79:87:d0:9e:4c:6b:ac:05:25:d9:dd:bc:53:
ba:69:8d:44:2f:5a:3d:fd:54:58:ac:3e:40:45:a6:
7f:d3:80:c5:87:c2:41:c6:7e:3f:7d:67:7b:b6:42:
2d:ec:b9:3f:a1:85:a3:2e:47:0d:14:5e:88:ba:25:
44:08:ce:b9:e9:69:59:12:e9:ef:fe:00:bc:24:41:
a6:c0:3a:a5:ed:01:4c:12:f6:ba:b8:a6:44:74:18:
10:be:da:8f:6f:9f:d1:50:d7:c2:75:60:4a:53:12:
7e:39:a2:78:52:7e:07:64:d1:4b:37:5a:95:02:fe:
49:1f:72:f7:e7:1e:c3:28:64:02:95:4f:a6:d7:f6:
be:10:59:62:88:88:5d:40:cb:bc:03:9a:a8:4f:4c:
cd:0b:80:62:6e:e3:dd:ba:3a:0d:7a:b4:49:74:92:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:9F:9D:86:66:F9:61:64:EE:9C:42:EE:23:D8:C6:A5:6F:44:48
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ec26a65f-35c6-4cee-96ef-fe310771118e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2a:5c:c5:da:cb:66:36:26:64:bd:7a:5e:5e:f2:60:79:c6:
36:b9:16:a5:ac:77:63:94:d0:d5:e2:5f:97:37:c4:44:19:dc:
a7:14:ee:01:6e:50:60:72:2d:07:18:d3:54:48:83:2d:f3:47:
43:81:b0:9c:04:7c:a5:42:65:31:e9:03:75:0c:49:62:b6:c0:
ba:d8:b5:6e:b9:48:28:c5:34:0b:6d:84:5f:ce:c7:5b:dd:73:
5f:e3:2d:54:d0:c0:e1:a2:b7:7f:4d:46:9a:72:ec:4b:25:5f:
fd:94:fa:a3:62:47:3b:c1:99:af:75:31:73:0d:7c:ed:fa:c6:
82:2b:4c:18:bf:bf:45:77:e8:d1:48:eb:38:7d:0e:ef:e6:f1:
45:a9:4d:40:4d:7d:3d:78:e3:18:05:02:f1:8b:00:21:1f:74:
53:6b:95:e1:ae:35:92:3a:21:5b:65:4c:9f:6e:2f:95:a6:a0:
c7:13:46:05:43:49:9d:a3:f9:dc:2c:ca:39:4f:46:e7:a6:38:
c7:38:2c:d7:f8:e0:c4:f5:ba:91:e8:44:ff:f4:3d:ed:34:48:
d3:af:62:46:63:47:66:29:98:8e:a6:4d:73:fc:5d:15:2b:62:
c9:44:fc:35:54:e4:92:ed:ef:52:a0:7e:0f:51:9a:82:a4:e5:
fe:c6:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:17 2023 by rpki-client on console.sobornost.net