Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed187906-969b-4cbd-b911-476549c88a78.roa
File: ed187906-969b-4cbd-b911-476549c88a78.roa (raw, json)
Hash identifier: HqtFqZ7rxElIJS91V5uhgYy6+98qI1hxu8EeTAA8VbY=
Subject key identifier: 84:56:3B:21:D2:3E:C6:F2:A8:28:45:FC:EC:C4:2A:29:13:83:1F:9B
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 76B8A18978B0A4DCE45E4CBCF164D0D73DA8A4B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed187906-969b-4cbd-b911-476549c88a78.roa
Signing time: Mon 01 Jan 2024 00:00:00 +0000
ROA not before: Mon 01 Jan 2024 00:00:00 +0000
ROA not after: Mon 05 Feb 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b8:a1:89:78:b0:a4:dc:e4:5e:4c:bc:f1:64:d0:d7:3d:a8:a4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jan 1 00:00:00 2024 GMT
Not After : Feb 5 23:59:59 2024 GMT
Subject: serialNumber=dde41969f61b3de6195571b79677e418d80d2cf5674a341624dcfe58e5eb817b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:e0:09:78:bb:84:64:ef:d5:bf:03:06:14:
e6:df:d3:75:8a:63:0a:f1:8f:7f:d6:de:e2:f1:9f:
df:8c:be:32:4d:99:06:78:a4:13:86:52:64:04:f0:
25:7c:09:2b:8f:94:e1:43:da:2e:0c:eb:ad:7e:e2:
c7:e1:30:a0:45:b5:22:4a:36:6b:0d:e6:00:15:5e:
c6:65:be:d2:08:8a:69:0c:36:6a:89:aa:36:a2:54:
cf:06:a6:a5:ad:5e:f8:d7:20:41:4f:66:33:f7:19:
1c:4b:2d:cd:05:c6:56:e2:92:9c:15:e0:d1:c8:21:
33:38:c6:83:2e:20:6e:6d:90:fa:93:af:66:60:1c:
64:7b:d3:0d:9b:d9:14:da:2c:b9:34:47:87:54:a6:
ca:e9:7f:00:44:f4:ba:63:57:5d:36:3e:60:1a:3e:
df:25:8e:9e:ee:59:54:0f:c8:37:1a:f9:69:98:28:
30:a3:98:9f:77:aa:15:51:a1:95:31:89:b1:f0:b1:
40:b3:db:89:a5:69:de:cf:5c:ad:2f:80:ba:34:81:
2b:1c:01:ca:e8:5e:09:fb:40:9e:1d:bf:ba:77:ee:
40:5f:89:ba:d3:cb:14:99:ee:c6:79:25:85:f6:a0:
0b:13:1e:4a:cf:1d:60:36:a1:ad:ef:fa:f5:1e:da:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:56:3B:21:D2:3E:C6:F2:A8:28:45:FC:EC:C4:2A:29:13:83:1F:9B
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ed187906-969b-4cbd-b911-476549c88a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a3:cf:8b:85:e9:77:56:26:a6:5c:9e:77:9e:74:c4:85:f6:
ee:86:c5:f6:3b:26:a7:22:14:76:41:d8:e5:05:19:a0:9a:f3:
46:3c:51:32:cf:b7:e8:cc:f3:ea:f8:44:2d:56:81:96:8d:cb:
d5:12:3c:58:a2:71:82:1c:62:5a:c5:32:a0:28:f9:22:87:0e:
bf:bb:6e:06:33:58:78:2e:19:b5:9c:0d:d7:7a:45:8c:16:54:
c2:00:b9:ce:94:06:09:86:4f:ae:66:e7:8a:60:9e:0e:37:7b:
25:d6:39:69:ff:da:bd:63:56:6b:3f:1d:86:c3:d7:cc:73:54:
f7:86:74:51:d5:2d:a6:47:31:1d:c9:80:05:46:37:08:03:53:
49:ef:d6:b6:cb:f9:dd:e5:af:5a:08:22:04:53:dc:30:b1:5e:
f9:1a:83:89:ed:15:54:b0:c9:c8:ae:ca:e4:40:d4:ce:a6:6a:
fb:15:8e:92:20:0c:03:f2:65:ab:26:03:2e:df:9c:1b:0b:e7:
11:25:3a:9f:3e:3d:2e:03:df:39:07:6f:15:e7:3d:cd:c4:41:
3a:e2:60:98:84:64:43:29:ca:7c:39:7f:5f:b9:80:a4:6a:19:
bb:df:5c:dd:d8:81:f8:d0:62:e6:1d:09:4d:2a:f3:ed:ca:92:
5d:40:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net